Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/ukzkx1JbB5IRUHWvEeCVL44cVDM.roa
File: ukzkx1JbB5IRUHWvEeCVL44cVDM.roa (raw, json)
Hash identifier: 1PzHauMmOzj4+DFUie/o5jbuHUfzT3GHSawmS4HLyXQ=
Subject key identifier: BA:4C:E4:C7:52:5B:07:92:11:50:75:AF:11:E0:95:2F:8E:1C:54:33
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A12509179861D6AB41DC90BB1C829E683E
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/ukzkx1JbB5IRUHWvEeCVL44cVDM.roa
Signing time: Sat 10 Oct 2026 08:58:35 +0000
ROA not before: Sat 10 Oct 2026 08:58:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 185.145.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:09:17:98:61:d6:ab:41:dc:90:bb:1c:82:9e:68:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 10 08:58:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba4ce4c7525b0792115075af11e0952f8e1c5433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:dd:96:16:84:52:57:53:90:76:ba:19:13:
39:3c:dd:30:f5:8a:1e:d3:21:d7:ba:fa:33:1d:5e:
21:d9:15:0f:5e:d5:cf:12:7e:3c:9b:e0:be:2e:c0:
89:6d:f7:5e:b1:91:bb:fe:54:6e:6a:db:80:76:5e:
56:e8:f4:71:56:0a:7a:83:3d:a9:96:c3:6f:71:fd:
02:4d:a5:42:92:e8:64:fa:e4:75:55:ae:ac:3e:5d:
36:35:59:0f:40:0e:ab:5c:a5:cb:0a:e7:60:05:24:
0b:b3:3a:76:7f:43:e4:71:6c:80:8b:4a:fc:92:85:
a7:a8:1b:94:6b:d0:ee:0d:59:3b:6c:74:b7:1c:c4:
7e:4d:09:bb:58:cc:91:b9:99:ff:c1:e7:75:74:1a:
7f:3b:26:36:23:b0:3e:72:7e:b8:d5:d2:4b:13:8b:
5b:08:65:89:20:c7:ff:37:0b:fa:a6:07:a6:df:1b:
4e:ad:c6:b6:e5:09:d4:32:8f:c6:f3:a7:2d:fb:0b:
b7:2f:5a:09:45:f9:61:e7:64:6b:e3:03:43:a7:7a:
ba:bb:f3:54:69:d1:2f:8e:e1:fa:86:9d:8f:07:bd:
e1:28:38:e4:8e:43:0b:00:e1:82:a6:03:f9:8d:99:
67:2c:f2:1f:d5:8b:4c:f3:e6:21:61:9f:b1:16:7f:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:E4:C7:52:5B:07:92:11:50:75:AF:11:E0:95:2F:8E:1C:54:33
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/ukzkx1JbB5IRUHWvEeCVL44cVDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f6:a0:22:b9:94:37:1b:b3:a0:43:46:22:b4:38:92:6d:2d:
fe:61:0a:85:91:9f:f1:bc:ce:33:b9:d0:d3:c2:40:c1:5a:fc:
a4:8a:8c:e5:84:9c:4c:69:85:9f:f8:d1:fe:9b:30:9a:96:ec:
f3:43:27:37:f1:57:23:44:92:41:91:a5:8f:b9:1b:b2:39:bb:
8c:a5:cb:17:cf:29:55:66:12:e0:00:7c:56:48:09:c9:eb:2e:
38:72:4e:6f:2f:11:68:c6:e7:65:78:ea:c6:fd:2b:27:57:a4:
5f:6d:a5:06:a2:f7:1f:12:92:45:f9:0b:ab:ec:e3:be:fe:3c:
e0:37:fe:27:28:3b:70:38:9b:30:b6:85:7d:52:e3:59:61:8f:
6f:50:15:28:00:92:74:67:59:d9:c9:03:bf:16:7d:b7:79:47:
ef:49:e7:6a:d2:d4:82:fe:71:36:7a:d0:63:be:51:0a:ae:9b:
20:8e:b1:a8:e9:96:46:08:08:4c:c4:be:1c:33:5a:92:09:97:
e7:17:fa:9e:0e:61:64:67:3e:d7:5a:17:9d:35:a1:b7:8e:25:
c3:07:8f:0b:cc:df:3c:67:f7:4a:87:90:43:84:53:d6:af:0f:
bb:e0:7d:bb:27:24:a9:93:ee:32:b1:c4:40:66:05:b8:a8:19:
46:dc:a1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:48:10 2026 by rpki-client