Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Uoe_SscthdT5Lj8JwakaF_6ZMag.roa
File: Uoe_SscthdT5Lj8JwakaF_6ZMag.roa (raw, json)
Hash identifier: O3qrYIG7FfGFZNwu+ECEsktuO1orGikciTzmdtF5DOc=
Subject key identifier: 52:87:BF:4A:C7:2D:85:D4:F9:2E:3F:09:C1:A9:1A:17:FE:99:31:A8
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D6A18B2F5C282EC62BE94CE4C14A
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Uoe_SscthdT5Lj8JwakaF_6ZMag.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209181
IP address blocks: 5.252.117.0/24 maxlen: 24
193.34.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d6:a1:8b:2f:5c:28:2e:c6:2b:e9:4c:e4:c1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5287bf4ac72d85d4f92e3f09c1a91a17fe9931a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3f:4f:75:25:e8:72:83:7c:8b:25:9a:64:a8:
bb:99:04:33:6f:04:50:e4:a0:8d:7c:1f:96:74:3d:
02:57:fa:91:10:fe:ee:65:61:ba:de:e8:a4:a4:5b:
4f:c3:9d:18:ba:9d:73:44:61:2d:7b:cb:56:47:b4:
e6:a5:53:61:ce:b5:8e:ed:02:f9:93:2b:f1:4c:2a:
3c:37:ed:cb:72:ae:38:78:61:44:83:6b:8a:c6:18:
09:20:7c:12:b0:6d:a4:89:7a:9d:4f:05:74:d5:1c:
76:4d:ce:2b:d5:f0:11:d3:93:17:c9:66:c3:4e:b3:
33:40:ce:dd:4b:c6:ca:f3:76:b6:7c:3f:94:46:d0:
6b:c8:d9:23:0a:2d:14:03:e5:85:f5:71:9a:b4:8c:
8e:b0:58:8f:be:ef:51:46:82:b7:4c:cd:c7:54:0a:
c0:d6:9f:53:2a:14:e2:c8:a3:61:8c:ca:e5:69:82:
14:a8:ee:ec:39:05:d9:3d:54:e1:02:dc:8d:c5:43:
2d:10:79:92:d6:1b:1c:96:04:88:b9:94:74:6f:4d:
72:19:4c:6e:af:4f:bb:cd:9c:71:44:bd:49:7b:27:
ec:bf:a2:46:36:ea:63:cf:43:87:12:a1:bf:54:9d:
3b:d2:81:33:83:a7:60:7a:da:c1:6c:bd:29:cd:62:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:87:BF:4A:C7:2D:85:D4:F9:2E:3F:09:C1:A9:1A:17:FE:99:31:A8
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Uoe_SscthdT5Lj8JwakaF_6ZMag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.117.0/24
193.34.232.0/24
Signature Algorithm: sha256WithRSAEncryption
46:6c:54:fe:78:46:52:78:b7:4c:1f:47:ad:2c:e2:8f:5c:10:
a9:6d:d1:e6:4a:00:8f:d5:7b:3b:0a:25:24:d9:f4:c8:0d:5f:
b1:0b:92:d4:fd:ac:9f:fd:d4:33:5c:49:2b:b5:0e:9a:5d:0d:
d8:63:48:c7:e8:da:98:1c:de:81:43:b0:4c:42:e1:0c:40:26:
10:5f:7a:a3:5a:88:0f:b6:e3:00:bc:ac:ff:59:e5:dc:08:52:
b6:42:91:c2:38:c7:a9:b5:18:f0:60:75:5f:2d:2c:2c:1c:2b:
4c:74:a3:44:8e:90:ed:9b:b9:66:bd:f5:42:45:ec:71:af:c9:
d7:ad:46:df:4f:75:3a:8d:1c:55:0f:53:34:f5:9b:af:a8:2b:
82:09:b3:de:c6:39:d8:98:40:3c:e3:a7:58:2a:b8:f5:9d:39:
16:d1:f2:81:ac:58:a8:61:f2:86:07:c9:3b:f8:94:ad:da:05:
93:ed:32:4d:8f:d3:d0:d8:b3:f4:5f:36:2f:3d:6d:d4:05:4c:
a2:a4:d9:57:73:c6:ed:82:6d:f4:c9:86:ee:c7:6f:78:b0:d8:
3f:ba:1f:53:79:16:d5:3a:34:94:9f:10:7c:76:cf:b2:be:26:
1f:02:23:07:44:b7:1b:61:ec:38:98:4b:a7:3a:6a:c6:fa:3b:
7d:7f:e1:f2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaNahiy9cKC7GK+lM5MFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mjg3YmY0YWM3MmQ4NWQ0ZjkyZTNmMDljMWE5MWExN2ZlOTkzMWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z9PdSXocoN8iyWaZKi7mQQzbwRQ
5KCNfB+WdD0CV/qREP7uZWG63uikpFtPw50Yup1zRGEte8tWR7TmpVNhzrWO7QL5
kyvxTCo8N+3Lcq44eGFEg2uKxhgJIHwSsG2kiXqdTwV01Rx2Tc4r1fAR05MXyWbD
TrMzQM7dS8bK83a2fD+URtBryNkjCi0UA+WF9XGatIyOsFiPvu9RRoK3TM3HVArA
1p9TKhTiyKNhjMrlaYIUqO7sOQXZPVThAtyNxUMtEHmS1hsclgSIuZR0b01yGUxu
r0+7zZxxRL1Jeyfsv6JGNupjz0OHEqG/VJ070oEzg6dgetrBbL0pzWJ+hQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFKHv0rHLYXU+S4/CcGpGhf+mTGoMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvVW9lX1NzY3RoZFQ1TGo4Sndha2FGXzZaTWFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABfx1AwQA
wSLoMA0GCSqGSIb3DQEBCwUAA4IBAQBGbFT+eEZSeLdMH0etLOKPXBCpbdHmSgCP
1Xs7CiUk2fTIDV+xC5LU/ayf/dQzXEkrtQ6aXQ3YY0jH6NqYHN6BQ7BMQuEMQCYQ
X3qjWogPtuMAvKz/WeXcCFK2QpHCOMeptRjwYHVfLSwsHCtMdKNEjpDtm7lmvfVC
Rexxr8nXrUbfT3U6jRxVD1M09ZuvqCuCCbPexjnYmEA846dYKrj1nTkW0fKBrFio
YfKGB8k7+JSt2gWT7TJNj9PQ2LP0XzYvPW3UBUyipNlXc8btgm30yYbux294sNg/
uh9TeRbVOjSUnxB8ds+yviYfAiMHRLcbYew4mEunOmrG+jt9f+Hy
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:13 2026 by rpki-client