Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/UjcZlouW2mtSD2mRBG3dLDzxvRI.roa
File: UjcZlouW2mtSD2mRBG3dLDzxvRI.roa (raw, json)
Hash identifier: /EF/xSXeVgY4nhaB6X93kHR9MGp1n5DEjXA3d6Z+4v0=
Subject key identifier: 52:37:19:96:8B:96:DA:6B:52:0F:69:91:04:6D:DD:2C:3C:F1:BD:12
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019CADF789D76C81F6434378253D9AAA6F6B
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/UjcZlouW2mtSD2mRBG3dLDzxvRI.roa
Signing time: Mon 02 Mar 2026 09:53:26 +0000
ROA not before: Mon 02 Mar 2026 09:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 109.122.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:f7:89:d7:6c:81:f6:43:43:78:25:3d:9a:aa:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Mar 2 09:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=523719968b96da6b520f6991046ddd2c3cf1bd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:d8:66:2a:5b:91:1e:0a:fd:d3:f2:12:02:
d9:2e:7c:9b:bd:bc:30:21:93:00:6e:1b:af:c4:10:
42:a9:48:e9:32:df:ae:45:73:61:dd:40:32:d9:7b:
05:c9:90:65:63:f5:dc:a1:36:d9:54:26:57:e0:72:
b6:44:44:60:69:c0:05:e6:41:4b:40:99:f0:ca:23:
a4:9e:e9:7d:c6:63:5a:a2:17:fb:3f:60:37:76:f3:
12:69:22:73:d5:62:62:44:83:d0:af:8d:80:0f:0d:
48:8f:5f:e2:cf:70:e4:0d:da:6a:65:9a:2e:dc:e6:
04:02:2c:90:07:00:b8:b9:a1:75:d0:d9:51:4d:fb:
93:67:8a:c1:90:e8:e2:4a:f5:51:1d:a7:e5:52:01:
5b:a4:9d:1a:52:73:5c:95:28:b8:ac:b7:50:65:a2:
4b:75:7b:a5:9f:95:aa:ed:11:79:02:28:dd:3e:91:
fe:44:b4:7a:b4:d1:2a:a0:c9:f8:84:45:28:24:fa:
90:c4:b9:b4:a3:a6:0b:d7:01:39:45:8f:38:d8:35:
3b:1a:b0:c7:67:ca:9d:ad:ad:4a:9b:2e:6f:4d:31:
00:2e:4f:24:de:8f:40:87:24:0d:13:af:63:9c:ce:
c5:d3:87:74:d7:53:5b:a1:56:67:68:71:aa:36:b1:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:37:19:96:8B:96:DA:6B:52:0F:69:91:04:6D:DD:2C:3C:F1:BD:12
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/UjcZlouW2mtSD2mRBG3dLDzxvRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.14.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2f:30:da:ed:b5:cc:f1:b8:49:40:f1:c8:7e:cc:f5:7c:8d:
98:d9:99:63:d2:53:a3:db:35:82:41:56:f1:c8:23:23:ab:7a:
68:04:73:fd:07:0b:38:7d:ab:25:08:99:1b:c8:4c:e5:bd:bc:
03:1c:90:b4:5d:8b:dd:65:a7:37:f2:67:53:ab:0b:c2:80:6d:
29:aa:9f:2c:f8:99:6c:bd:91:51:d2:4c:28:0b:c5:14:68:94:
74:99:aa:70:ba:06:1e:02:d3:94:9f:4f:4c:ae:fe:e1:9b:9b:
94:be:e7:fe:00:32:d5:d2:05:d0:dd:66:69:db:d7:b3:dd:90:
78:5d:fc:88:41:fe:45:eb:e7:86:86:d5:03:86:b0:a2:36:82:
d4:cf:0e:a0:7a:23:70:13:01:8d:a3:1d:75:3f:3c:6f:fd:85:
bb:9f:08:5f:01:2a:75:fc:2b:61:78:21:79:d8:da:b7:0b:80:
e7:b5:fd:5a:a2:ad:3e:66:2f:86:f6:9f:c0:7b:7b:35:51:39:
12:f8:ed:37:66:31:e3:17:f3:d0:ed:b1:4e:53:38:37:9b:08:
89:9a:06:c5:e6:77:e4:d1:44:fe:95:3f:7c:c8:88:2c:ef:0b:
88:02:17:38:c1:98:da:fa:33:b3:1f:9b:a3:86:e5:93:5a:ea:
01:06:87:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyt94nXbIH2Q0N4JT2aqm9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjYwMzAyMDk1MzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjM3MTk5NjhiOTZkYTZiNTIwZjY5OTEwNDZkZGQyYzNjZjFiZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG/YZipbkR4K/dPyEgLZLnybvbww
IZMAbhuvxBBCqUjpMt+uRXNh3UAy2XsFyZBlY/XcoTbZVCZX4HK2RERgacAF5kFL
QJnwyiOknul9xmNaohf7P2A3dvMSaSJz1WJiRIPQr42ADw1Ij1/iz3DkDdpqZZou
3OYEAiyQBwC4uaF10NlRTfuTZ4rBkOjiSvVRHaflUgFbpJ0aUnNclSi4rLdQZaJL
dXuln5Wq7RF5AijdPpH+RLR6tNEqoMn4hEUoJPqQxLm0o6YL1wE5RY842DU7GrDH
Z8qdra1Kmy5vTTEALk8k3o9AhyQNE69jnM7F04d011NboVZnaHGqNrEgfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFI3GZaLltprUg9pkQRt3Sw88b0SMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvVWpjWmxvdVcybXRTRDJtUkJHM2RMRHp4dlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoOMA0G
CSqGSIb3DQEBCwUAA4IBAQCuLzDa7bXM8bhJQPHIfsz1fI2Y2Zlj0lOj2zWCQVbx
yCMjq3poBHP9Bws4faslCJkbyEzlvbwDHJC0XYvdZac38mdTqwvCgG0pqp8s+Jls
vZFR0kwoC8UUaJR0mapwugYeAtOUn09Mrv7hm5uUvuf+ADLV0gXQ3WZp29ez3ZB4
XfyIQf5F6+eGhtUDhrCiNoLUzw6geiNwEwGNox11Pzxv/YW7nwhfASp1/CtheCF5
2Nq3C4Dntf1aoq0+Zi+G9p/Ae3s1UTkS+O03ZjHjF/PQ7bFOUzg3mwiJmgbF5nfk
0UT+lT98yIgs7wuIAhc4wZja+jOzH5ujhuWTWuoBBofD
-----END CERTIFICATE-----
Generated at Fri Mar 20 02:13:22 2026 by rpki-client