Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uKFeaCgh8ub17eZKtQYVtZq8Opc.roa
File: uKFeaCgh8ub17eZKtQYVtZq8Opc.roa (raw, json)
Hash identifier: vHkzhWVzcBIrmQr7o19B2b152TOiFgV40/fXjGK6rcg=
Subject key identifier: B8:A1:5E:68:28:21:F2:E6:F5:ED:E6:4A:B5:06:15:B5:9A:BC:3A:97
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A03841BE8B00287F39218CEAF0D98C3C70
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uKFeaCgh8ub17eZKtQYVtZq8Opc.roa
Signing time: Tue 25 Aug 2026 09:30:27 +0000
ROA not before: Tue 25 Aug 2026 09:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204229
IP address blocks: 64.43.78.0/23 maxlen: 23
64.43.96.0/23 maxlen: 23
91.245.188.0/22 maxlen: 22
93.120.26.0/24 maxlen: 24
109.207.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:41:be:8b:00:28:7f:39:21:8c:ea:f0:d9:8c:3c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Aug 25 09:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8a15e682821f2e6f5ede64ab50615b59abc3a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:bd:ec:30:4b:70:b7:e1:04:98:04:0a:f6:
2a:c9:f4:03:6b:37:d4:0e:96:74:14:ce:18:b3:6b:
cc:79:d5:05:81:22:51:f6:6d:07:de:22:b2:b6:fd:
3f:67:c4:c6:00:94:99:61:4e:92:6b:58:b9:f2:f6:
15:5f:f8:29:5f:c6:2b:8f:f6:03:ae:99:4d:47:1e:
81:7c:0b:ff:56:6d:74:09:9e:ed:db:d3:6a:1e:c6:
fd:b3:5f:a9:57:5f:53:03:c3:4f:9a:95:67:89:6a:
ca:a2:6e:b9:ee:66:d2:a1:1f:02:90:a9:8d:cd:49:
19:f3:c3:68:a7:16:bf:bd:a3:74:00:93:64:a2:e9:
41:ad:b3:8e:0e:01:98:b7:45:aa:49:ff:0f:94:29:
3d:04:a5:aa:9e:9d:43:2d:f8:a5:c3:13:6e:6d:44:
f7:9b:05:1a:7b:43:c0:e9:c4:35:6f:d4:51:76:50:
f9:f4:55:8c:7b:7d:13:2e:36:1b:0a:4c:04:22:b4:
10:ed:12:89:24:d3:b0:c8:97:61:2b:26:58:84:82:
63:c6:d8:16:da:d5:05:ae:e7:e9:48:3c:fd:42:91:
70:d9:82:3a:36:4a:54:8a:9a:f8:f4:c1:28:18:4b:
12:88:2c:f3:ba:c2:91:49:4e:67:82:58:fd:a0:fc:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A1:5E:68:28:21:F2:E6:F5:ED:E6:4A:B5:06:15:B5:9A:BC:3A:97
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uKFeaCgh8ub17eZKtQYVtZq8Opc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.78.0/23
64.43.96.0/23
91.245.188.0/22
93.120.26.0/24
109.207.134.0/23
Signature Algorithm: sha256WithRSAEncryption
90:e2:75:b0:cd:b3:0d:82:7d:4f:33:e6:fb:b2:2a:f1:34:0e:
c8:4e:53:e5:e1:4d:3b:4b:b5:ee:ec:49:83:b0:23:80:0b:d3:
07:3c:d4:c8:6b:73:e3:8e:5f:0e:3b:6a:88:fc:2a:1f:f5:76:
15:bd:4a:7b:76:4a:1f:f0:66:f9:69:96:f8:3e:93:50:c4:db:
d8:c0:15:62:62:52:cf:ca:2b:c7:d8:d8:cf:ac:87:93:21:b4:
30:b9:f4:59:be:0f:12:2e:f6:36:1f:78:23:c7:dc:66:aa:16:
d7:a6:47:96:34:f1:a1:50:f3:f4:56:73:65:53:52:50:ba:be:
17:1a:ad:0f:7b:99:96:b1:59:c3:ef:af:f3:ec:2d:b4:09:ca:
bf:25:83:57:5a:0a:b1:e8:a6:a1:e2:57:8c:f0:7d:13:a5:84:
b7:bd:d6:a8:cb:a9:ff:45:d3:a5:08:84:a9:28:07:1a:c4:cf:
8a:ba:41:4b:a4:59:ab:e1:13:34:48:63:95:3b:a9:76:38:ad:
e9:1a:16:de:24:be:e5:8d:14:bf:92:74:93:3c:0d:a3:6f:2f:
1a:e2:18:8f:d9:ba:a5:b0:b1:ad:83:e9:49:56:8f:4d:ba:fa:
8d:8c:40:0e:25:0e:4a:b4:7b:1a:28:8e:8f:e5:3c:01:fa:33:
87:52:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:21:32 2026 by rpki-client