Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/uuq-x34eXfLtlBJYEGS3OsNxH48.roa
File: uuq-x34eXfLtlBJYEGS3OsNxH48.roa (raw, json)
Hash identifier: QlJLuJpKb2DvxD0sYzJtq74+bVDFl/K54O80ygsZtIQ=
Subject key identifier: BA:EA:BE:C7:7E:1E:5D:F2:ED:94:12:58:10:64:B7:3A:C3:71:1F:8F
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A10C2CFA8A39B95523A455A91A46E993C4
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/uuq-x34eXfLtlBJYEGS3OsNxH48.roa
Signing time: Mon 05 Oct 2026 13:07:16 +0000
ROA not before: Mon 05 Oct 2026 13:07:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 141.98.112.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:2c:fa:8a:39:b9:55:23:a4:55:a9:1a:46:e9:93:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 5 13:07:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baeabec77e1e5df2ed9412581064b73ac3711f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:72:13:e0:42:8e:5a:e7:11:06:1e:8c:84:
3a:6e:74:ed:61:7f:cd:90:7b:ca:7a:a1:7d:7b:ca:
00:31:7b:f2:7c:69:7f:f1:53:e1:79:2f:eb:e2:67:
a7:a9:15:64:a0:8f:c0:c0:5a:cc:46:00:5b:62:ea:
e1:43:28:7b:2e:61:2a:5c:52:bc:76:a2:22:0a:35:
f9:84:cf:d4:c0:11:3d:bd:75:c0:29:18:52:e1:31:
a1:43:86:93:29:56:d9:23:3d:2a:dd:3d:fc:24:96:
01:1d:73:2f:f8:9a:02:7e:ea:0f:79:86:a5:11:b3:
f6:51:c0:1f:65:7f:c0:7f:a1:90:e8:31:6d:e8:f9:
06:d4:d7:c5:f7:91:47:b8:a1:f8:15:1e:0a:54:52:
66:c2:82:40:29:e9:13:b3:88:26:89:c3:07:de:48:
84:00:81:47:e2:cf:80:4d:cc:ba:f5:a3:97:35:9c:
d6:04:6b:5b:cd:c6:46:79:ab:03:8c:25:64:70:90:
1b:ab:0e:68:cc:4d:66:98:f2:4f:b4:f2:d6:e0:39:
57:00:da:19:a6:70:71:0e:fd:cc:32:9d:08:d0:b4:
a0:a6:6a:5b:c5:5c:b0:bf:cd:cc:f0:d0:6a:0d:ae:
c6:15:eb:87:1b:7d:b1:9e:d3:53:37:72:08:07:2f:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:BE:C7:7E:1E:5D:F2:ED:94:12:58:10:64:B7:3A:C3:71:1F:8F
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/uuq-x34eXfLtlBJYEGS3OsNxH48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/24
141.98.115.0/24
193.17.4.0/24
193.17.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:36:1c:d5:96:52:1c:06:db:aa:d8:d5:cb:79:70:3c:95:0b:
9f:59:9a:dd:e8:c3:79:f1:92:70:d6:45:72:a6:6a:9f:63:21:
2d:6e:97:4b:e6:cc:7e:66:41:45:e3:f2:e3:81:39:6a:99:35:
a0:d5:da:86:9a:48:4f:07:61:26:8d:3f:c4:c9:4f:ba:88:e6:
39:21:95:c4:e2:d3:94:d0:53:99:f8:b6:f9:85:ac:33:44:a4:
e9:9a:ec:5c:f5:9a:f8:3e:1f:a1:d1:37:0e:cc:3f:71:70:86:
76:00:d3:28:eb:e6:e1:9f:ca:da:83:ff:6f:11:4e:f0:c8:81:
1b:34:66:c7:28:5d:2e:2e:d4:91:df:63:20:f8:cc:ca:66:ae:
8f:86:a7:a4:f6:03:b9:c9:9f:46:bd:cf:e2:82:3f:4b:b5:3b:
a9:c8:25:98:be:0f:f7:02:8c:95:a2:d1:03:73:0d:6a:a1:62:
08:53:7e:7c:ec:19:2f:74:fe:2f:6f:54:ac:5e:8a:5d:8e:8a:
eb:64:47:39:84:5e:46:01:a0:79:fa:2a:16:c3:31:d4:31:b5:
c8:7d:8f:cb:c2:52:97:96:af:89:30:20:39:3f:95:a5:67:e0:
62:d1:db:43:a8:18:24:ce:13:e0:2d:7a:ba:56:2b:4f:46:ba:
72:34:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:50:00 2026 by rpki-client