Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/Uqxv6RJDJys9akW4OeqacWtytrA.roa
File: Uqxv6RJDJys9akW4OeqacWtytrA.roa (raw, json)
Hash identifier: RSQidgq4mEPgxtmCFTLFsYGLsEkeze9gOf1NNbRSvgc=
Subject key identifier: 52:AC:6F:E9:12:43:27:2B:3D:6A:45:B8:39:EA:9A:71:6B:72:B6:B0
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01A08A667C81BE5E06A938D6A8AA860B7D60
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/Uqxv6RJDJys9akW4OeqacWtytrA.roa
Signing time: Thu 10 Sep 2026 08:19:27 +0000
ROA not before: Thu 10 Sep 2026 08:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200929
IP address blocks: 85.222.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:66:7c:81:be:5e:06:a9:38:d6:a8:aa:86:0b:7d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Sep 10 08:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52ac6fe91243272b3d6a45b839ea9a716b72b6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4e:85:79:82:6d:6b:c8:65:bf:b8:76:50:44:
9d:f4:4d:3e:05:a0:1f:72:c7:50:32:30:26:e7:c7:
c7:dd:4a:a3:45:cf:50:36:d1:27:ae:e2:9b:06:a1:
4a:64:28:b9:88:3e:b8:36:43:22:5b:2d:11:f6:0c:
c3:15:bf:e7:1f:96:ad:e1:de:80:37:c0:9e:43:6d:
52:9e:bc:f9:f8:b6:e5:f3:43:db:ae:a9:55:d9:7c:
08:5e:db:bc:d2:3f:69:8a:2b:d5:0d:e2:cb:db:af:
a6:1f:34:6c:f4:d1:a3:c2:52:d4:f7:86:01:f9:95:
ef:12:d3:00:c6:28:dc:58:66:f7:9a:5d:32:55:d1:
c7:70:11:11:29:c8:68:c0:40:99:4c:3b:d9:2e:be:
e5:1d:f4:c4:15:f2:f7:0c:1d:23:f7:06:51:ba:43:
19:89:3a:05:db:bb:c7:c0:01:59:92:0b:64:9a:f4:
64:f0:90:ed:42:03:b7:50:32:f0:24:0f:73:14:57:
b1:13:16:3a:59:58:8f:e5:5d:e8:0f:cd:6d:2e:7e:
9b:dd:cc:3f:d0:75:37:25:b1:ed:1e:bc:fe:b5:72:
d3:68:4e:58:f0:08:23:16:86:73:97:f7:87:cd:c9:
56:d4:78:68:59:64:e6:51:80:52:a7:23:55:3b:d7:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:6F:E9:12:43:27:2B:3D:6A:45:B8:39:EA:9A:71:6B:72:B6:B0
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/Uqxv6RJDJys9akW4OeqacWtytrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.173.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9a:da:e9:4b:b5:5f:e4:1f:b7:ed:a9:82:65:ba:a7:39:29:
63:25:0b:2b:91:63:77:2d:41:f0:62:bd:ef:eb:da:28:8c:ef:
c9:e2:c1:7b:2a:dc:b8:15:93:f7:68:0d:2b:4b:94:62:35:a5:
7e:47:43:ba:04:41:e7:bf:b4:e1:5c:cd:60:29:bc:1e:99:84:
7f:d9:4f:64:a4:59:f8:38:90:79:dc:3e:4b:65:3d:77:06:08:
38:b1:43:91:eb:d3:60:b1:cc:b8:d5:72:e7:c2:a7:c8:70:e4:
82:0d:5d:5d:22:9f:ea:d1:bd:eb:e9:ec:8a:36:ee:1c:83:51:
e2:be:27:35:e9:af:8d:79:55:eb:c8:00:ec:f2:53:e7:b8:ae:
83:dc:2d:c2:ab:eb:db:bb:7d:87:e6:49:24:a9:70:ca:72:aa:
7d:5d:95:2c:21:2c:ac:43:e0:06:30:7f:f7:ab:8a:db:41:ec:
a1:18:b9:2f:8e:fd:ff:ac:51:80:7c:c4:81:26:09:cb:0e:e6:
c8:cd:2f:ed:ed:3f:da:d0:38:d6:c9:a2:66:43:43:37:97:e2:
d6:8e:c7:31:6d:15:18:8b:28:55:5c:96:5e:df:94:00:e3:2b:
ef:6a:5b:c2:56:69:e6:ff:6c:eb:ea:bc:7e:9b:9e:2a:76:df:
5c:e6:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:42 2026 by rpki-client