Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Uvodxiq6t8V2M4oF-gkFjZVS0Tw.roa
File: Uvodxiq6t8V2M4oF-gkFjZVS0Tw.roa (raw, json)
Hash identifier: Vd0M1gSFTXdrEhx7rNlAO5zSK0vJOpADNz2e4ZU1ZZk=
Subject key identifier: 52:FA:1D:C6:2A:BA:B7:C5:76:33:8A:05:FA:09:05:8D:95:52:D1:3C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A1345B97B41F061C99E041A120248FF929
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Uvodxiq6t8V2M4oF-gkFjZVS0Tw.roa
Signing time: Tue 13 Oct 2026 08:23:00 +0000
ROA not before: Tue 13 Oct 2026 08:23:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.181.87.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:5b:97:b4:1f:06:1c:99:e0:41:a1:20:24:8f:f9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 13 08:23:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52fa1dc62abab7c576338a05fa09058d9552d13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:44:bf:3c:6b:82:71:27:ee:de:51:76:49:
28:cd:28:0a:ab:72:ec:b3:b9:c7:d9:50:2a:9f:b0:
6d:33:1a:da:61:0c:27:51:b3:49:4b:1a:fe:b2:2c:
2a:4d:1a:d2:a7:27:bd:a4:d1:04:d0:1e:26:f0:6f:
c7:fe:7c:6e:31:cf:42:a0:c4:61:e8:7b:46:0a:b5:
0d:23:f5:1f:93:79:2c:36:65:eb:d8:eb:56:78:c2:
15:95:b6:59:b0:16:35:35:8d:b4:46:16:89:72:84:
b0:20:29:40:dc:9e:9e:3b:4d:53:3e:96:9f:d1:19:
70:5d:6e:83:6b:64:93:aa:30:b9:a7:68:82:a8:b5:
29:b0:08:b9:8f:3e:5f:e7:57:40:92:df:c2:2d:d4:
f5:de:ce:83:7a:d5:34:79:b8:f3:fb:ab:7b:b4:c6:
56:1e:f7:1f:6a:27:4f:2f:64:85:b2:49:7d:f5:32:
56:f2:25:b0:37:41:93:69:46:d8:8c:4d:32:57:64:
02:2f:43:01:59:19:ce:84:0b:7e:46:e5:28:d0:9f:
49:bc:a4:b2:d3:ba:20:c8:16:17:c3:c2:ff:15:13:
db:2f:73:c3:fc:07:a4:a4:88:fb:86:d6:ed:5f:56:
67:09:c4:24:58:be:e5:8d:f3:e1:20:fa:48:59:7f:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:1D:C6:2A:BA:B7:C5:76:33:8A:05:FA:09:05:8D:95:52:D1:3C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Uvodxiq6t8V2M4oF-gkFjZVS0Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.94.170.0/24
45.144.213.0/24
195.211.190.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e0:69:37:2a:97:b2:28:5a:a8:b7:d7:28:e6:c6:89:9c:db:
93:81:cd:b3:27:52:c2:92:ac:93:d7:98:99:1b:4b:40:13:07:
65:41:4e:75:42:48:9b:61:1b:23:ed:bd:54:79:95:84:f3:c1:
de:b2:a6:d5:6e:07:12:92:3c:6d:94:1e:80:8e:29:a1:7f:20:
50:2b:f7:43:b0:76:75:b4:18:87:7e:06:3c:0c:2c:5e:59:76:
78:b4:bb:9c:d9:f9:95:87:c1:1e:ff:ef:ea:c9:14:a8:b7:31:
b6:29:48:b0:69:02:22:d8:8e:87:f8:0a:28:8b:37:83:54:0c:
2b:ed:dd:4b:18:85:47:97:61:0a:5a:5e:aa:6b:e8:a9:b8:3e:
76:9b:af:24:2b:dc:76:4c:5d:52:e0:13:ad:c3:05:5d:16:36:
d2:59:76:59:f5:22:cd:d4:f8:bb:45:b5:fc:3e:70:6e:25:e5:
25:8a:d8:f4:ea:05:16:83:d9:3c:c9:2b:ee:b9:5f:01:0e:ce:
d3:3b:f6:ed:94:e8:d8:fa:50:e5:0d:14:3f:9e:81:9e:03:09:
44:f0:df:5d:a1:bd:2d:17:07:9c:c4:26:b6:38:b1:a4:f9:42:
0d:d5:d5:7f:58:0c:61:05:65:06:43:4e:32:62:0a:ac:5b:87:
82:3d:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:17 2026 by rpki-client