Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UhuoMLeN7Tebj55wARq7wFONAQk.roa
File: UhuoMLeN7Tebj55wARq7wFONAQk.roa (raw, json)
Hash identifier: jtHQgMGobBSEmyDpwnPEth230/JyYIiSdp0pQmUveMc=
Subject key identifier: 52:1B:A8:30:B7:8D:ED:37:9B:8F:9E:70:01:1A:BB:C0:53:8D:01:09
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A14FED01BF27C7069E7ACE73AF0C91F324
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UhuoMLeN7Tebj55wARq7wFONAQk.roa
Signing time: Sun 18 Oct 2026 16:51:34 +0000
ROA not before: Sun 18 Oct 2026 16:51:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 91.217.149.0/24 maxlen: 24
192.109.206.0/24 maxlen: 24
217.28.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:ed:01:bf:27:c7:06:9e:7a:ce:73:af:0c:91:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 18 16:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=521ba830b78ded379b8f9e70011abbc0538d0109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:f9:ba:bd:f8:1f:12:6d:cd:9e:10:29:53:
87:e7:39:86:04:00:a4:7b:b4:e3:e3:4a:fc:aa:87:
a1:5e:bd:01:a4:ef:a7:26:f2:18:e1:a4:14:d4:40:
db:b0:c0:9b:65:bb:6a:dc:20:e8:e4:7f:b4:3f:bb:
57:dd:3d:95:e8:a0:eb:0c:73:b1:55:01:64:00:5b:
c0:c1:b1:94:c7:7f:96:0e:cc:85:7b:15:42:19:74:
ee:ba:8f:73:bf:ee:9f:13:c5:e8:fd:6f:be:6a:2f:
a3:42:db:6d:59:ab:5d:e4:c2:e4:79:2f:6a:0f:27:
b9:d4:ed:79:4c:0d:65:b3:89:a2:92:b7:7c:51:95:
45:b1:ba:0d:e5:8b:27:a4:08:d2:f3:97:f9:40:76:
88:99:b1:e5:a9:60:36:c6:d6:d3:cb:44:72:96:0c:
03:d4:c8:21:54:db:aa:a9:80:d5:29:9c:42:66:54:
bf:81:c9:3f:60:18:43:cb:ee:3d:89:58:c3:f0:5a:
ff:a7:1f:c8:30:23:4a:60:a5:45:a9:18:78:a7:80:
e1:9d:99:3a:dc:4d:94:40:c0:56:2c:e8:13:38:70:
3e:d4:cf:9c:07:75:4c:68:9e:60:b9:64:17:13:6d:
ce:4d:0f:b9:cb:04:b6:6a:6a:ee:c1:46:4e:54:77:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:A8:30:B7:8D:ED:37:9B:8F:9E:70:01:1A:BB:C0:53:8D:01:09
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UhuoMLeN7Tebj55wARq7wFONAQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.149.0/24
192.109.206.0/24
217.28.129.0/24
Signature Algorithm: sha256WithRSAEncryption
92:60:4f:0e:6b:3c:36:eb:6d:e5:fa:08:9b:03:07:9c:84:aa:
e6:40:34:53:0c:44:7d:c3:92:35:96:ea:20:17:d2:18:c0:a2:
e3:00:1e:82:ba:07:06:d3:60:f1:70:d6:97:7b:bb:a6:35:05:
c9:9a:de:2a:cf:61:e0:46:56:2d:29:33:d9:cd:96:0e:d7:57:
a4:cd:b6:99:e3:e3:8f:79:6f:2f:3a:75:ff:f9:cd:d2:54:9f:
d7:b1:a8:3e:14:b6:97:7e:f3:41:5f:88:9c:4e:bc:48:79:71:
bd:c7:47:78:25:37:3a:e1:8f:a4:4f:6e:b7:3e:8d:8b:0f:6b:
cf:bd:78:9f:cb:b7:61:e1:18:32:9d:cb:55:d7:dc:24:e2:93:
4c:bd:9b:9e:3f:8d:91:c5:c2:8d:ca:d6:ab:23:fc:4b:5b:d3:
74:4c:e4:21:6c:09:3e:86:ee:4e:18:4b:d7:74:75:c1:32:c5:
f1:86:d4:f5:70:12:0c:85:c3:b5:d7:f9:14:fb:3f:0c:a8:53:
99:ec:30:86:f3:10:ba:cc:7d:6b:a6:bb:1b:79:4f:90:a1:12:
c7:8c:1b:e6:5d:91:65:39:2f:85:a7:ca:75:ad:1e:5f:1f:32:
1e:21:df:fb:e4:6d:a4:92:06:da:45:b9:51:1d:4f:d9:eb:10:
07:11:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:36 2026 by rpki-client