Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/UyuDpsThd0HTxIHLtl_AcLRLcgU.roa
File: UyuDpsThd0HTxIHLtl_AcLRLcgU.roa (raw, json)
Hash identifier: cR9/I8Oh8wt0pXLSLn6pWKFwtuW+7P/mjqHujGnIbq8=
Subject key identifier: 53:2B:83:A6:C4:E1:77:41:D3:C4:81:CB:B6:5F:C0:70:B4:4B:72:05
Certificate issuer: /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial: 019F236860C1F8FA118A1790D0BC58DF304B
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/UyuDpsThd0HTxIHLtl_AcLRLcgU.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 5.198.136.0/24 maxlen: 24
5.198.140.0/24 maxlen: 24
5.198.142.0/24 maxlen: 24
5.198.143.0/24 maxlen: 24
188.92.136.0/24 maxlen: 24
188.92.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:60:c1:f8:fa:11:8a:17:90:d0:bc:58:df:30:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=532b83a6c4e17741d3c481cbb65fc070b44b7205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:2a:1d:b3:14:ed:18:e3:40:92:44:e2:2c:
d4:31:7e:e3:1a:f0:8f:d5:79:7e:06:37:6b:c5:87:
e4:b1:9a:39:d7:cb:44:da:a1:57:87:8a:63:1b:66:
36:5b:bf:e6:46:7f:25:b5:5a:2b:ca:85:93:e1:0c:
7b:f8:47:df:ac:c0:ad:64:34:32:6d:75:c1:e9:31:
e4:9f:50:c2:3e:bd:d1:fe:c3:80:4d:8f:25:5a:a6:
49:18:56:2e:95:8e:91:e2:d4:38:d2:49:8d:8c:35:
c0:39:41:d3:79:e5:97:c5:08:e2:be:76:98:ec:57:
fa:94:eb:bd:0b:41:f1:fe:6f:ac:ae:be:8e:0e:14:
87:f2:58:f3:cb:84:43:ee:d2:4c:7e:f6:e9:33:dd:
a4:fe:ed:ca:5e:7e:ba:cb:db:71:cf:31:2e:74:ee:
86:97:96:6a:e2:1a:e4:12:dd:ea:05:af:5f:b1:03:
0e:9a:75:42:f1:0a:05:86:78:e5:46:92:ba:8a:c1:
79:99:03:cb:82:1b:1d:84:bb:e6:3c:80:cc:c5:7d:
fa:91:f5:1c:34:92:71:86:06:b3:09:15:00:84:25:
8a:e1:cc:02:37:0a:02:d4:14:07:d5:6f:07:21:9e:
1a:a5:cb:1b:cb:f4:c9:4d:f7:ed:08:3b:47:54:0f:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:83:A6:C4:E1:77:41:D3:C4:81:CB:B6:5F:C0:70:B4:4B:72:05
X509v3 Authority Key Identifier:
keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/UyuDpsThd0HTxIHLtl_AcLRLcgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.136.0/24
5.198.140.0/24
5.198.142.0/23
188.92.136.0/23
Signature Algorithm: sha256WithRSAEncryption
34:28:73:cc:db:41:fa:99:a4:78:e8:6d:b4:cb:a3:f5:ee:f7:
cb:4f:f9:59:26:fa:fe:e2:47:7e:63:9a:10:79:f6:34:28:a4:
3a:e3:43:2b:36:45:8b:24:2f:f4:09:ed:4d:9a:63:b4:a7:43:
f6:a4:80:1b:da:bb:f2:b3:34:48:82:4e:ea:7c:9f:dc:09:49:
df:f2:9a:09:42:ca:a4:9e:0b:92:06:e4:73:4d:3b:9f:40:6d:
16:ce:1b:b7:8d:9a:69:55:2a:71:ca:14:08:f2:b7:47:63:58:
41:b5:04:fc:4b:28:d1:b2:17:a1:44:67:7b:75:17:52:55:5f:
86:1d:b2:72:c2:f6:38:2a:3c:19:63:43:14:87:15:c4:65:de:
ed:b4:e4:25:ba:76:34:8f:02:c3:6e:76:9e:e1:91:31:b2:41:
61:d2:06:63:94:ac:e2:43:db:55:a1:b6:c1:5f:db:c8:bf:d2:
45:3e:68:34:d3:d1:5d:b4:d2:f1:9b:27:e6:1a:c4:ef:ae:ca:
7f:14:fa:da:d2:c5:46:c9:b7:f4:13:61:e6:a7:10:3f:34:f4:
2a:55:5f:77:22:e5:1b:b0:d2:c9:ae:91:36:e1:37:dd:03:09:
ad:2f:fd:e5:a6:c5:74:1d:15:0c:c6:ce:9a:90:35:c2:3d:7e:
9d:2b:5d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:39 2026 by rpki-client