Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/ucieseCn4X1qSKWwEPn_oNVbz1k.roa
File: ucieseCn4X1qSKWwEPn_oNVbz1k.roa (raw, json)
Hash identifier: LmFDFIu8DGDRUsQfXjI1zzyrnPH0LF4bgVgWF7ntgHo=
Subject key identifier: B9:C8:9E:B1:E0:A7:E1:7D:6A:48:A5:B0:10:F9:FF:A0:D5:5B:CF:59
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 019FEBEC45BF62F72CD21178020A3FED9DC2
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/ucieseCn4X1qSKWwEPn_oNVbz1k.roa
Signing time: Mon 10 Aug 2026 13:45:57 +0000
ROA not before: Mon 10 Aug 2026 13:45:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 89.40.131.0/24 maxlen: 24
89.42.34.0/24 maxlen: 24
92.114.34.0/24 maxlen: 24
94.177.64.0/24 maxlen: 24
188.208.18.0/24 maxlen: 24
188.240.16.0/24 maxlen: 24
188.240.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:ec:45:bf:62:f7:2c:d2:11:78:02:0a:3f:ed:9d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Aug 10 13:45:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9c89eb1e0a7e17d6a48a5b010f9ffa0d55bcf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:1f:6b:d3:9c:fa:83:d1:91:4a:d3:47:21:
14:72:56:b8:1d:d3:aa:a2:7f:7a:31:a5:d2:ae:dd:
0e:da:2b:1a:8a:70:02:09:82:b5:49:6a:f2:d1:7d:
76:94:7f:34:a6:24:d9:dc:15:0e:58:df:06:09:d0:
4e:41:bf:5f:09:19:e6:33:94:e0:e7:9c:ae:59:bb:
5f:e0:07:ad:65:7e:fb:57:3f:63:53:19:96:42:c9:
86:e5:39:d1:bf:de:cc:cf:67:f9:bc:e4:1a:97:ec:
99:da:e7:25:1f:a2:7c:d7:7a:30:67:15:cc:71:2c:
ce:5f:7c:22:96:46:d0:db:45:84:9b:e1:da:c7:75:
30:c3:35:d8:f8:f7:29:10:2c:9d:dd:b7:c0:5a:be:
d1:9a:a3:f0:a5:34:66:fa:cc:67:d6:01:40:22:57:
e2:4a:40:18:75:a4:f1:4d:5b:dd:61:01:24:0e:4b:
f0:56:4a:7b:6c:e6:40:62:b1:0b:d7:5e:d1:96:0c:
27:ec:40:09:41:39:e7:a9:6d:cb:e2:02:87:8a:82:
14:f2:73:f1:cd:30:7b:90:71:c1:ec:46:3f:44:b9:
3d:d1:fa:e8:4c:fd:62:75:5f:f5:23:82:e7:6b:7e:
51:d4:3d:e9:9c:df:51:0a:35:6b:de:c5:76:00:37:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C8:9E:B1:E0:A7:E1:7D:6A:48:A5:B0:10:F9:FF:A0:D5:5B:CF:59
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/ucieseCn4X1qSKWwEPn_oNVbz1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.131.0/24
89.42.34.0/24
92.114.34.0/24
94.177.64.0/24
188.208.18.0/24
188.240.16.0/24
188.240.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6f:8c:8a:2b:a2:a6:d3:38:24:62:7d:f9:40:42:91:f3:1a:
e6:72:1e:b8:06:68:d8:ca:28:12:54:12:b7:be:56:03:78:d2:
15:1c:76:e1:34:5a:14:67:56:94:c4:5d:b6:ac:74:46:e2:de:
61:d2:be:23:17:cf:93:97:f0:61:62:9f:65:06:ff:da:75:7a:
51:22:61:64:97:d5:98:ed:21:4e:b2:26:16:1a:71:2c:5d:fc:
99:0b:d5:0d:e1:83:ac:51:fe:9c:d1:5e:fc:66:fa:ce:a4:5e:
76:e5:b2:c5:ec:fa:0a:b0:7c:ce:b9:73:eb:98:b0:bd:50:75:
6e:c9:0a:29:00:8a:c1:2d:45:72:f8:6d:89:1f:00:66:64:cf:
7b:60:b1:e3:a6:f2:61:96:13:ae:15:55:72:25:88:f2:02:d3:
ae:67:12:4f:bc:77:bd:0b:e0:63:02:2f:78:3a:4f:77:0f:69:
e3:64:1c:27:f3:2a:8c:d9:c5:65:44:7c:4e:4c:e7:02:34:32:
b5:d4:00:a2:b1:84:cb:da:ef:02:46:1f:ef:a5:92:28:af:4e:
bc:ef:54:b7:8a:f6:e4:8d:11:7d:a8:88:74:74:2c:9b:9b:69:
d1:db:3e:0f:d4:e7:67:79:24:ab:7c:69:90:7c:98:bd:5c:27:
bf:8e:b4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:11:51 2026 by rpki-client