Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/uB9_F9Uv35SMbMvtgr9IxwK4Dug.roa
File: uB9_F9Uv35SMbMvtgr9IxwK4Dug.roa (raw, json)
Hash identifier: OTn1XOmLNXU+bMutJ79lrPi8LrD2Hxh9Ba7GgjpDrIw=
Subject key identifier: B8:1F:7F:17:D5:2F:DF:94:8C:6C:CB:ED:82:BF:48:C7:02:B8:0E:E8
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A0244144603C0AC3CF0821D63BEA46FE90
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/uB9_F9Uv35SMbMvtgr9IxwK4Dug.roa
Signing time: Fri 21 Aug 2026 12:17:32 +0000
ROA not before: Fri 21 Aug 2026 12:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202759
IP address blocks: 194.156.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:41:44:60:3c:0a:c3:cf:08:21:d6:3b:ea:46:fe:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Aug 21 12:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b81f7f17d52fdf948c6ccbed82bf48c702b80ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:ad:25:91:16:43:ba:8e:f2:10:80:82:a8:
6c:60:9d:1f:4a:da:28:32:cb:99:45:a4:d6:9e:fe:
33:ab:38:92:dc:c1:aa:bd:2f:87:2a:3d:ab:c2:00:
f0:72:f9:77:f4:d7:a8:59:34:4e:39:5d:4b:65:05:
aa:2b:27:e4:da:b0:65:cb:23:58:2e:6f:5f:57:0d:
da:aa:fa:a1:33:9f:b1:42:a7:eb:fc:89:7c:bd:9c:
fa:73:7a:c9:f8:10:7c:db:11:d3:e1:8a:f8:b3:7a:
9e:4b:87:e0:71:d4:9f:08:4c:9a:4a:7a:be:69:78:
dc:0c:8a:0b:0c:5b:c5:d2:5b:1b:8d:21:8f:af:0c:
c2:7c:e6:25:85:26:85:65:65:32:a0:01:71:a3:27:
f6:fb:47:74:59:c0:6e:df:4c:35:ef:ae:4e:ec:c1:
9b:fc:90:d1:c9:06:e5:24:fc:4e:52:29:68:74:4c:
50:fb:62:19:06:08:03:99:05:58:46:2f:8a:fa:e6:
36:53:1c:f3:7e:2d:14:88:87:b9:a1:d5:e8:5b:30:
b0:34:61:09:02:83:4c:aa:11:bb:c6:ca:1a:41:2d:
ac:43:db:c5:d5:7e:77:14:30:03:ba:4c:89:7d:9c:
9d:64:ab:76:4e:3f:06:60:13:6d:16:81:75:d2:0b:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1F:7F:17:D5:2F:DF:94:8C:6C:CB:ED:82:BF:48:C7:02:B8:0E:E8
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/uB9_F9Uv35SMbMvtgr9IxwK4Dug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.99.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:09:a2:e3:95:e1:99:64:97:7e:8e:12:2b:d2:68:e7:8b:93:
45:cf:36:e7:55:3d:33:93:02:58:11:0c:57:cc:6a:27:96:d1:
26:ae:32:8e:2c:6b:f5:7c:dc:90:28:fe:ed:89:d5:ce:b1:cc:
5b:dc:5f:d0:ac:12:be:16:87:e1:4d:7d:74:9b:ca:9f:c7:ec:
27:28:0c:a3:c3:de:35:8f:e0:02:ef:7a:a4:e0:66:86:ef:48:
f7:23:1d:ae:b5:c3:f3:09:92:8b:1f:29:a4:45:39:23:ee:2c:
4c:b2:3e:a7:ef:a4:09:52:9b:22:bd:d6:a3:b5:93:54:69:7f:
54:32:8b:c4:95:17:48:95:45:0a:6b:11:26:31:3d:6c:b8:fc:
18:2a:46:3c:d4:db:b9:7c:8b:7b:c1:09:b6:d4:08:fd:5c:d7:
a2:2c:c1:b0:2f:7a:c0:c7:fc:93:bc:ba:ea:95:ef:1a:cd:b0:
cc:bd:0b:28:5c:44:97:e2:d3:7d:fe:59:fc:f6:6e:b1:04:b0:
35:cd:7f:a0:5d:51:52:0c:15:55:6f:d9:e3:b0:dc:24:42:31:
24:34:86:bb:72:09:df:4a:e9:de:80:6a:89:74:e3:a9:c2:7a:
22:f7:66:d5:4b:86:a3:94:f0:24:22:d6:9d:53:1a:71:b9:fa:
c6:e6:4c:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAkQURgPArDzwgh1jvqRv6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjYwODIxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODFmN2YxN2Q1MmZkZjk0OGM2Y2NiZWQ4MmJmNDhjNzAyYjgwZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mytJZEWQ7qO8hCAgqhsYJ0fStoo
MsuZRaTWnv4zqziS3MGqvS+HKj2rwgDwcvl39NeoWTROOV1LZQWqKyfk2rBlyyNY
Lm9fVw3aqvqhM5+xQqfr/Il8vZz6c3rJ+BB82xHT4Yr4s3qeS4fgcdSfCEyaSnq+
aXjcDIoLDFvF0lsbjSGPrwzCfOYlhSaFZWUyoAFxoyf2+0d0WcBu30w1765O7MGb
/JDRyQblJPxOUilodExQ+2IZBggDmQVYRi+K+uY2Uxzzfi0UiIe5odXoWzCwNGEJ
AoNMqhG7xsoaQS2sQ9vF1X53FDADukyJfZydZKt2Tj8GYBNtFoF10guf5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgffxfVL9+UjGzL7YK/SMcCuA7oMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvdUI5X0Y5VXYzNVNNYk12dGdyOUl4d0s0RHVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpxjMA0G
CSqGSIb3DQEBCwUAA4IBAQAOCaLjleGZZJd+jhIr0mjni5NFzzbnVT0zkwJYEQxX
zGonltEmrjKOLGv1fNyQKP7tidXOscxb3F/QrBK+FofhTX10m8qfx+wnKAyjw941
j+AC73qk4GaG70j3Ix2utcPzCZKLHymkRTkj7ixMsj6n76QJUpsivdajtZNUaX9U
MovElRdIlUUKaxEmMT1suPwYKkY81Nu5fIt7wQm21Aj9XNeiLMGwL3rAx/yTvLrq
le8azbDMvQsoXESX4tN9/ln89m6xBLA1zX+gXVFSDBVVb9njsNwkQjEkNIa7cgnf
SunegGqJdOOpwnoi92bVS4ajlPAkItadUxpxufrG5kyN
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:33 2026 by rpki-client