Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/UWRpSa8c3Oh0mUYHXzQ6Q0qiIEs.roa
File: UWRpSa8c3Oh0mUYHXzQ6Q0qiIEs.roa (raw, json)
Hash identifier: 7iN0psfk1zyhVafop58DDcr20Feix7iaz6X07bxtzdE=
Subject key identifier: 51:64:69:49:AF:1C:DC:E8:74:99:46:07:5F:34:3A:43:4A:A2:20:4B
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A15A38CCD53614E9DAE34E681B9C8CFC88
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/UWRpSa8c3Oh0mUYHXzQ6Q0qiIEs.roa
Signing time: Tue 20 Oct 2026 16:50:34 +0000
ROA not before: Tue 20 Oct 2026 16:50:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 79.98.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:38:cc:d5:36:14:e9:da:e3:4e:68:1b:9c:8c:fc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 20 16:50:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51646949af1cdce8749946075f343a434aa2204b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:0d:69:b3:25:e2:a5:21:9b:8f:7a:21:fa:
91:33:e4:60:57:cb:6d:08:ea:6f:67:eb:4d:50:a2:
f3:29:15:78:63:50:eb:f9:e2:77:cd:53:66:06:e2:
4f:dd:f3:e9:72:86:be:48:a4:cc:2c:29:5c:29:74:
84:2b:4d:70:46:09:7d:19:08:79:33:2b:fc:89:dd:
52:74:29:0a:b8:1b:af:e6:8e:57:2a:9b:b4:fa:11:
f8:23:f0:f6:1b:07:57:bd:c6:85:4d:c2:61:36:59:
7b:5b:59:9b:0d:1b:19:ec:0a:90:ef:97:ae:91:c7:
56:f0:ce:55:32:28:56:6b:9d:dc:88:0a:5f:00:55:
6b:8c:77:fe:e6:04:a7:ab:12:26:3d:cd:f5:1e:8c:
80:2f:05:9f:73:92:2f:a4:2c:76:95:9e:ca:04:b9:
eb:55:44:5d:94:2c:74:da:9d:1e:c5:8b:23:44:e9:
d7:be:4a:c6:58:3f:e9:03:71:04:3b:6b:a0:00:00:
10:77:67:ce:fa:a8:ea:45:08:7f:5f:18:6a:7c:97:
0d:8e:77:19:e7:68:00:44:22:f8:10:93:30:f1:d6:
3f:82:2e:cd:08:8b:f8:03:99:94:82:a7:ee:43:9c:
83:ee:2a:c7:2c:41:83:95:5a:ac:a6:fd:ee:1c:bf:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:69:49:AF:1C:DC:E8:74:99:46:07:5F:34:3A:43:4A:A2:20:4B
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/UWRpSa8c3Oh0mUYHXzQ6Q0qiIEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.244.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:fd:f2:d1:9c:d6:10:17:05:36:e7:9f:6d:1f:95:1c:a4:2a:
61:14:c3:4c:2c:8f:a7:01:0d:f3:14:20:11:24:ed:85:5e:9b:
af:f4:33:ea:fe:e2:9d:ee:0d:9f:87:80:7f:30:b0:5d:d0:b8:
74:ad:ee:ce:8c:2b:ef:64:c2:2f:48:cc:30:67:dd:95:8b:d6:
df:cc:1f:6a:45:b7:47:f9:7b:bc:31:a2:5e:66:2e:b2:68:a3:
b0:40:ae:c9:ca:53:76:57:97:0b:92:72:df:38:27:d5:2d:ef:
47:28:a1:73:91:1e:0d:78:62:3b:97:aa:8c:20:28:ee:52:66:
89:31:29:39:ce:84:28:54:dc:fb:77:7b:c3:a4:71:db:94:d2:
a4:ee:c7:8a:b1:63:62:bc:ee:2b:21:4e:13:20:c4:d0:a1:f9:
2b:32:e5:96:d8:f3:ff:15:0d:9c:e9:ce:5d:1e:be:60:47:0e:
10:61:10:cc:ed:5f:d7:ea:e5:0b:fe:e9:bf:68:7b:61:90:64:
27:45:6c:c7:d6:c1:1b:43:8a:8f:5b:a1:c5:e9:91:a2:bb:3a:
43:05:42:68:f0:65:27:56:c0:d6:96:ff:21:5d:0a:e0:b8:c4:
cf:f0:a3:c8:9e:e0:1e:eb:d6:a0:b4:98:56:b5:9a:ef:80:24:
94:c4:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:35:05 2026 by rpki-client