Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/uRLU0blxeKfoO_QFBHCsyFA8e_o.roa
File: uRLU0blxeKfoO_QFBHCsyFA8e_o.roa (raw, json)
Hash identifier: 1MZVy9oqPihq/rDsPHr6D9iqI/1EWI5c2M5lyukdpPo=
Subject key identifier: B9:12:D4:D1:B9:71:78:A7:E8:3B:F4:05:04:70:AC:C8:50:3C:7B:FA
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01A0F6C40E47CAE99A3D600B522F7F707932
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/uRLU0blxeKfoO_QFBHCsyFA8e_o.roa
Signing time: Thu 01 Oct 2026 09:20:38 +0000
ROA not before: Thu 01 Oct 2026 09:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.3.0/24 maxlen: 24
94.26.32.0/24 maxlen: 24
94.26.37.0/24 maxlen: 24
94.26.42.0/24 maxlen: 24
94.26.68.0/24 maxlen: 24
94.26.69.0/24 maxlen: 24
94.26.70.0/24 maxlen: 24
94.26.88.0/24 maxlen: 24
192.109.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:c4:0e:47:ca:e9:9a:3d:60:0b:52:2f:7f:70:79:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Oct 1 09:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b912d4d1b97178a7e83bf4050470acc8503c7bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:ef:d6:09:89:b5:c2:cc:56:ec:d7:b9:49:
d1:c5:79:83:c5:7d:38:bb:56:39:a4:e0:e7:b6:8f:
d6:69:c0:01:a2:15:a8:76:bd:d2:f1:5c:15:a9:4b:
08:1c:1f:3d:d0:f4:42:e4:ab:4b:7a:64:ab:bc:c1:
c4:9d:2c:90:4e:b7:f1:43:0b:31:6a:dc:42:72:ee:
37:02:e7:01:da:05:d4:fb:ff:62:97:ee:9b:b1:e3:
2d:8d:42:85:40:6f:3c:4d:07:90:71:50:2b:f7:ac:
02:87:b3:18:31:cb:bb:e7:d6:75:48:b8:bc:27:c0:
85:60:d3:a1:ca:ee:4d:04:72:7b:55:02:8d:d0:b9:
5e:88:d0:13:69:71:09:00:6b:e7:12:40:1e:d0:fe:
bb:91:69:97:11:04:ca:ea:c4:74:f9:3d:c1:ac:cb:
e4:ed:18:9c:8f:a8:70:b9:83:2e:12:be:4d:3e:19:
1a:3d:d7:40:4f:f7:cf:5b:e7:bb:4b:99:de:2f:c3:
49:90:a3:e5:fd:ad:ff:9a:aa:f1:31:d8:e2:bf:c1:
c9:a7:94:c3:68:27:cf:48:29:53:84:6d:11:db:5d:
66:c8:a0:06:2e:34:64:19:77:ae:3a:29:b5:1c:8a:
76:02:26:5c:5c:14:44:55:fc:18:a9:5f:fc:0f:93:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:12:D4:D1:B9:71:78:A7:E8:3B:F4:05:04:70:AC:C8:50:3C:7B:FA
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/uRLU0blxeKfoO_QFBHCsyFA8e_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.3.0/24
94.26.32.0/24
94.26.37.0/24
94.26.42.0/24
94.26.68.0-94.26.70.255
94.26.88.0/24
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:86:8f:fb:8f:06:3c:f9:f8:23:3b:6e:73:b3:32:9f:58:48:
fa:c8:46:ec:f1:c6:f7:6a:58:a9:6b:5d:8e:a3:dd:70:a6:4d:
ef:89:c0:ca:73:40:87:8f:42:00:03:b6:c0:c1:1e:a8:29:92:
fb:f5:8e:21:91:d3:24:a3:1b:a0:08:76:0a:b6:c9:6f:8b:69:
4b:7e:5d:66:72:f1:5a:8b:7d:d8:64:31:44:0b:b0:91:a2:e1:
1d:53:d2:7f:4a:44:df:50:24:0b:a8:1d:03:2d:41:f4:2d:b8:
ba:02:a7:6b:44:e6:39:db:26:62:a0:f7:4c:76:08:30:4f:37:
b8:90:b8:be:b9:8c:67:f5:6a:f2:53:76:41:87:a1:6d:35:67:
07:29:00:42:e3:68:5c:c2:5b:3d:20:bf:fe:b1:9f:73:1a:56:
be:bc:3f:f4:34:f2:5a:04:4d:3b:e9:a7:3f:fb:ce:e8:76:94:
00:a6:34:d6:09:73:88:9d:70:2c:cb:4d:2e:4e:18:ba:d5:8f:
97:a6:91:84:c0:ce:aa:8a:17:8d:6e:fe:4c:48:47:ae:10:47:
00:2a:82:c7:05:7e:0e:a4:16:b8:2e:3e:1b:c8:d2:57:f1:82:
52:ba:a3:00:05:01:03:c0:86:a2:1a:4b:bb:53:79:94:a1:c3:
66:f5:e0:20
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAaD2xA5HyumaPWALUi9/cHkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2
YzQzNDIwHhcNMjYxMDAxMDkyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTEyZDRkMWI5NzE3OGE3ZTgzYmY0MDUwNDcwYWNjODUwM2M3YmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkTv1gmJtcLMVuzXuUnRxXmDxX04
u1Y5pODnto/WacABohWodr3S8VwVqUsIHB890PRC5KtLemSrvMHEnSyQTrfxQwsx
atxCcu43AucB2gXU+/9il+6bseMtjUKFQG88TQeQcVAr96wCh7MYMcu759Z1SLi8
J8CFYNOhyu5NBHJ7VQKN0LleiNATaXEJAGvnEkAe0P67kWmXEQTK6sR0+T3BrMvk
7Ricj6hwuYMuEr5NPhkaPddAT/fPW+e7S5neL8NJkKPl/a3/mqrxMdjiv8HJp5TD
aCfPSClThG0R211myKAGLjRkGXeuOim1HIp2AiZcXBREVfwYqV/8D5OGPwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFLkS1NG5cXin6Dv0BQRwrMhQPHv6MB8GA1UdIwQY
MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt
YzE2Nzg3MjcyMDQ5LzEvdVJMVTBibHhlS2ZvT19RRkJIQ3N5RkE4ZV9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5
LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAXhoDAwQA
XhogAwQAXholAwQAXhoqMAwDBAJeGkQDBABeGkYDBABeGlgDBADAbcgwDQYJKoZI
hvcNAQELBQADggEBALuGj/uPBjz5+CM7bnOzMp9YSPrIRuzxxvdqWKlrXY6j3XCm
Te+JwMpzQIePQgADtsDBHqgpkvv1jiGR0ySjG6AIdgq2yW+LaUt+XWZy8VqLfdhk
MUQLsJGi4R1T0n9KRN9QJAuoHQMtQfQtuLoCp2tE5jnbJmKg90x2CDBPN7iQuL65
jGf1avJTdkGHoW01ZwcpAELjaFzCWz0gv/6xn3MaVr68P/Q08loETTvppz/7zuh2
lACmNNYJc4idcCzLTS5OGLrVj5emkYTAzqqKF41u/kxIR64QRwAqgscFfg6kFrgu
PhvI0lfxglK6owAFAQPAhqIaS7tTeZShw2b14CA=
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:04 2026 by rpki-client