Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/UOLKXwl4raPcBtOzkti6Xof9ArE.roa
File: UOLKXwl4raPcBtOzkti6Xof9ArE.roa (raw, json)
Hash identifier: b9AJQjvXyzdPGfOOW/QWcRxYtDo8t1e90orS2QDs7ZM=
Subject key identifier: 50:E2:CA:5F:09:78:AD:A3:DC:06:D3:B3:92:D8:BA:5E:87:FD:02:B1
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 019FBCBDAE8012E3A7CE586F5FEFED209EA7
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/UOLKXwl4raPcBtOzkti6Xof9ArE.roa
Signing time: Sat 01 Aug 2026 09:52:55 +0000
ROA not before: Sat 01 Aug 2026 09:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206924
IP address blocks: 91.198.241.0/24 maxlen: 24
185.230.223.0/24 maxlen: 24
2a0c:2f05:3512::/48 maxlen: 48
2a0c:2f07::/32 maxlen: 32
2a0c:2f07:d::/48 maxlen: 48
2a0c:2f07:f::/48 maxlen: 48
2a0c:2f07:29::/48 maxlen: 48
2a0c:2f07:c1::/48 maxlen: 48
2a0c:2f07:384::/48 maxlen: 48
2a0c:2f07:666::/48 maxlen: 48
2a0c:2f07:ac1::/48 maxlen: 48
2a0c:2f07:4663::/48 maxlen: 48
2a0c:2f07:4896::/48 maxlen: 48
2a0c:2f07:9459::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bc:bd:ae:80:12:e3:a7:ce:58:6f:5f:ef:ed:20:9e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Aug 1 09:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50e2ca5f0978ada3dc06d3b392d8ba5e87fd02b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:59:9c:b2:5d:0e:cf:c9:94:20:46:0d:33:
4e:23:2f:5c:81:37:80:a2:17:52:e5:5e:af:ed:f4:
5c:6b:5f:04:2e:63:8a:1c:e7:4c:65:3e:89:60:4e:
8a:54:bb:90:41:3f:c3:54:e3:90:2b:29:c8:1b:4c:
a0:3a:50:0c:c2:aa:e5:7d:b4:b1:fa:8d:4f:84:de:
dc:17:6f:e3:a0:95:3f:6e:2f:a9:50:9d:a8:cb:f8:
65:a5:bc:89:1d:06:a7:62:7c:a8:cc:cb:2c:ef:d7:
96:7f:b7:be:e3:1a:ad:d3:eb:43:76:53:d3:d3:7f:
52:dc:fb:85:2e:9c:82:f7:c3:cc:d4:74:85:8e:c8:
cb:29:dd:90:bb:15:2a:25:4d:c1:3a:bb:e2:d6:2f:
4f:a1:d5:e5:1c:85:2e:16:67:0b:53:88:2f:5a:17:
f8:ef:ce:8f:05:79:5f:1a:f5:0a:9a:42:48:c5:2a:
d7:9f:eb:1b:6d:ed:aa:fd:e4:8f:e6:77:91:c8:83:
29:1b:02:61:52:e2:79:1f:19:e0:0b:33:b2:60:99:
6f:c7:d7:c1:1c:93:0c:ab:cb:7f:9e:83:74:d7:00:
51:89:56:90:05:f8:40:9c:5e:b2:11:cf:ff:33:b5:
af:49:9f:85:c7:79:1e:44:a9:b9:5b:0d:f1:b7:e6:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E2:CA:5F:09:78:AD:A3:DC:06:D3:B3:92:D8:BA:5E:87:FD:02:B1
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/UOLKXwl4raPcBtOzkti6Xof9ArE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.241.0/24
185.230.223.0/24
IPv6:
2a0c:2f05:3512::/48
2a0c:2f07::/32
Signature Algorithm: sha256WithRSAEncryption
98:39:4d:3a:42:6e:00:d9:05:d1:55:db:e5:05:75:3a:4e:72:
fd:9b:e1:2d:2e:6a:ac:77:52:5d:77:b4:7f:83:c0:bf:e4:16:
35:53:c8:5f:f7:2d:59:49:f9:a9:a1:a9:10:77:18:fd:31:90:
8e:29:07:65:91:78:a8:b8:a4:53:78:fa:2e:c7:d1:6f:a0:b3:
d1:9a:c2:f5:0e:14:74:e6:5f:cc:4a:5b:07:ce:36:4f:fa:e9:
9a:1e:25:68:ed:9d:d1:ef:31:2f:a2:a8:c3:93:3b:11:3c:15:
7c:50:16:16:d0:db:14:48:04:13:49:af:8c:61:f9:f7:ac:63:
12:e4:48:45:4d:5b:ca:95:b3:0a:8d:23:d9:9e:35:27:68:c5:
23:18:0e:09:f1:0f:aa:ca:ee:3f:35:3c:db:85:fd:e6:3d:6d:
15:df:30:58:70:91:6b:bb:44:47:59:e1:f9:f7:1a:14:df:21:
40:e8:54:b7:07:96:46:a9:74:61:71:5d:b3:a8:ff:08:07:17:
ce:69:5c:7f:4d:e0:8c:d1:39:b0:79:a5:d2:0e:44:01:36:87:
34:16:f0:6b:08:b9:48:d9:5c:e3:a6:dd:f1:af:93:bf:e6:0e:
59:84:c6:f0:86:07:da:ca:ac:5f:cd:79:d5:43:70:d9:7f:4c:
0c:29:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:22:09 2026 by rpki-client