Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/UQaYZisc4uIpdIV5Qcgu2CBhpm4.roa
File: UQaYZisc4uIpdIV5Qcgu2CBhpm4.roa (raw, json)
Hash identifier: btFExtXBGZm6iyT34KsvRoOlCqR0AR8BiTbQZcr4gU4=
Subject key identifier: 51:06:98:66:2B:1C:E2:E2:29:74:85:79:41:C8:2E:D8:20:61:A6:6E
Certificate issuer: /CN=b9ffc4475c83cdd78b2e6f92a37fb256f52c57d2
Certificate serial: 01A0D66146C2225DD4EE6A335C3A6A1B5780
Authority key identifier: B9:FF:C4:47:5C:83:CD:D7:8B:2E:6F:92:A3:7F:B2:56:F5:2C:57:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uf_ER1yDzdeLLm-So3-yVvUsV9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/UQaYZisc4uIpdIV5Qcgu2CBhpm4.roa
Signing time: Fri 25 Sep 2026 02:24:54 +0000
ROA not before: Fri 25 Sep 2026 02:24:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202616
IP address blocks: 31.99.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/uf_ER1yDzdeLLm-So3-yVvUsV9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/uf_ER1yDzdeLLm-So3-yVvUsV9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/uf_ER1yDzdeLLm-So3-yVvUsV9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:61:46:c2:22:5d:d4:ee:6a:33:5c:3a:6a:1b:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ffc4475c83cdd78b2e6f92a37fb256f52c57d2
Validity
Not Before: Sep 25 02:24:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=510698662b1ce2e22974857941c82ed82061a66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:86:ef:f9:2a:8e:86:c8:05:c2:db:55:ca:
81:a5:02:c8:2f:ff:cf:a2:0a:7b:9f:1f:67:7c:b3:
1c:04:33:0d:f2:eb:70:87:04:93:8a:9e:35:27:ce:
04:eb:cb:f1:66:02:ec:04:01:bc:ec:87:69:4f:71:
e4:db:d6:b3:83:4a:01:6d:7c:c6:ca:84:71:d5:72:
19:86:04:a8:b1:e6:5a:a6:06:a7:e4:21:93:03:17:
b7:58:92:77:db:bf:89:77:4c:b0:43:26:e4:0b:ad:
24:4e:ee:fd:e5:ec:27:fe:f9:5b:d9:33:00:01:f0:
b8:fd:71:56:60:a8:a7:ea:0c:00:21:5a:9c:41:72:
86:ad:14:6e:2c:19:2e:7e:06:6f:93:aa:8e:f0:f7:
c6:28:9b:68:89:06:e6:3e:da:cc:1d:1a:d7:9d:1e:
af:2d:7d:86:c5:63:c5:c0:db:4f:ee:78:07:25:ae:
a6:c1:79:b8:2b:d8:61:2e:13:96:1e:84:2c:96:8c:
99:c9:10:98:7b:a3:b4:ba:5e:b2:dd:53:bd:7a:12:
67:e4:ab:41:7d:a3:9a:45:d8:9b:90:48:8e:e8:9b:
5a:c4:75:a9:57:d8:7b:09:a4:dc:52:25:d3:e3:08:
2b:62:c8:09:97:bb:ed:d1:c9:6e:e2:cd:09:4d:96:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:98:66:2B:1C:E2:E2:29:74:85:79:41:C8:2E:D8:20:61:A6:6E
X509v3 Authority Key Identifier:
keyid:B9:FF:C4:47:5C:83:CD:D7:8B:2E:6F:92:A3:7F:B2:56:F5:2C:57:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uf_ER1yDzdeLLm-So3-yVvUsV9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/UQaYZisc4uIpdIV5Qcgu2CBhpm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/uf_ER1yDzdeLLm-So3-yVvUsV9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.99.190.0/23
Signature Algorithm: sha256WithRSAEncryption
78:4c:fb:28:a7:9e:7d:5b:87:e1:5e:43:28:67:ca:52:c6:db:
62:12:dd:09:b4:70:42:9d:bc:b2:ed:02:57:ea:39:f8:fd:e6:
3b:53:b3:48:76:3c:b5:91:e5:72:e8:1b:23:2c:a6:11:78:90:
e5:10:f7:8b:20:2b:cb:17:91:9f:95:ca:fc:20:d7:8a:e9:61:
18:8e:eb:ba:1a:d3:d7:ed:13:64:a7:ae:b5:ae:51:a4:7d:52:
02:fd:4a:2f:d7:e1:84:74:ff:21:ae:38:41:20:76:db:41:c7:
50:53:74:30:49:a2:8b:cf:69:61:a7:65:a8:48:af:95:0b:bd:
cc:19:29:8b:f6:2e:3d:2c:97:bb:11:8c:30:d9:c7:e5:30:34:
31:2b:91:43:45:d1:10:55:a1:ae:42:1a:42:be:b0:91:c4:c4:
58:dd:53:49:ab:4f:50:d7:d3:b4:06:88:bf:ae:f2:d6:56:70:
c9:61:f5:3d:c6:98:c2:7b:57:5b:80:49:55:d1:58:52:f5:de:
88:4a:44:ee:88:db:63:8e:2d:6f:42:03:ed:b2:7f:34:aa:88:
f6:5e:ff:7e:fa:fc:8d:f2:d0:07:ca:c9:c1:c9:40:ff:50:b0:
11:14:bd:ba:b1:03:26:17:b9:72:e8:d8:8c:bc:af:d1:ad:f8:
e7:b4:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:59 2026 by rpki-client