Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UltusBKgsNpsaUOcrICNoBCNbDA.roa
File: UltusBKgsNpsaUOcrICNoBCNbDA.roa (raw, json)
Hash identifier: F2kUyaZWQUAERwE1lLxp18j06vET6ZnMvj58tHqsjVg=
Subject key identifier: 52:5B:6E:B0:12:A0:B0:DA:6C:69:43:9C:AC:80:8D:A0:10:8D:6C:30
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A028731F4070CEAFEFE31DDAD72D656DED
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UltusBKgsNpsaUOcrICNoBCNbDA.roa
Signing time: Sat 22 Aug 2026 07:50:28 +0000
ROA not before: Sat 22 Aug 2026 07:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 88.216.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:73:1f:40:70:ce:af:ef:e3:1d:da:d7:2d:65:6d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 22 07:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=525b6eb012a0b0da6c69439cac808da0108d6c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:ec:a2:a0:66:c4:4a:47:54:18:eb:7c:de:
a9:a3:7c:70:a3:b4:79:a5:b2:21:f3:18:13:05:31:
e1:d7:a7:8a:c5:de:ae:3b:2f:c3:f3:68:cc:76:22:
fc:03:d0:61:4b:c2:20:42:26:a8:b2:99:4a:00:3b:
cd:1a:d7:48:85:b0:07:0e:dc:90:44:fc:3b:a1:cf:
dd:0c:de:ab:f9:76:03:4d:fd:bd:50:d9:fa:b3:88:
6a:2f:04:ad:02:e1:f7:b7:dc:3f:13:7f:70:1b:03:
59:34:16:62:ee:6f:56:cc:fc:1a:90:24:c1:c9:59:
7a:b6:77:45:c3:6c:ce:be:84:a5:98:9b:1a:3b:e2:
32:34:44:42:0b:61:bb:d2:f8:5a:e7:34:b1:88:ea:
b7:08:a2:9e:2b:9b:d0:04:93:e0:01:d4:79:20:99:
37:31:37:af:db:d5:92:04:a6:d4:56:11:84:de:41:
13:ad:46:a8:30:eb:7e:65:1b:81:94:8a:9f:e8:7e:
10:0b:79:ff:04:d6:ab:fb:10:89:43:88:fa:46:41:
e0:ca:51:58:9c:3d:9e:33:79:30:98:3e:b4:d0:7f:
48:4b:7f:38:9b:d4:c9:a0:94:94:f5:5e:0b:da:cd:
c3:7b:80:cb:42:9d:e4:4e:2e:18:60:b1:42:c3:b4:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:6E:B0:12:A0:B0:DA:6C:69:43:9C:AC:80:8D:A0:10:8D:6C:30
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UltusBKgsNpsaUOcrICNoBCNbDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.134.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7b:26:c6:1a:cf:a9:2f:21:fc:f1:33:95:bc:5a:70:cb:ab:
e2:b2:29:2f:bb:8c:14:2d:54:00:16:7b:92:aa:e3:c9:43:3d:
77:6e:ff:b9:44:ce:0a:5e:f7:15:a4:4f:c0:1a:e3:d1:c1:01:
27:85:5d:dc:38:d7:eb:69:0b:c3:b6:30:9c:5b:e4:66:b2:6e:
17:33:96:11:4a:67:ed:ad:c1:d8:01:61:7d:ee:9b:0b:74:13:
8f:31:f8:b6:77:c3:98:98:ac:05:48:59:b5:37:3f:63:ae:c5:
f0:4e:d4:20:51:b2:7a:9a:d6:57:be:2e:57:72:d3:e4:9a:e7:
f0:f9:a7:63:78:0f:1f:2d:27:03:0d:da:79:8c:4d:53:57:7a:
e8:d9:16:2f:06:61:c9:cf:c7:e4:11:37:e8:7e:f6:8c:76:a9:
5b:cf:09:90:e3:d4:88:ad:c3:c8:93:e6:80:52:b9:af:25:77:
f4:9c:f6:6c:2a:b2:fe:e6:5f:15:f1:e8:d3:a4:45:16:0c:18:
8b:60:a3:4d:0e:34:97:79:a9:a6:54:ca:89:f3:80:9f:97:e2:
11:99:15:85:7b:9c:f2:d3:93:5e:33:06:88:50:f7:ea:82:02:
38:6e:98:71:b6:81:ab:5a:5c:7b:12:00:c7:5d:d2:68:09:d8:
a5:bf:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:19 2026 by rpki-client