Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/qUkyzsESbsS2zlpHenJHCZVcW9w.roa
File: qUkyzsESbsS2zlpHenJHCZVcW9w.roa (raw, json)
Hash identifier: c8dRUptusWX4N4YghoTv+p9PDy6rP3WCRhu7DIFBHMM=
Subject key identifier: A9:49:32:CE:C1:12:6E:C4:B6:CE:5A:47:7A:72:47:09:95:5C:5B:DC
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019CFBB37B24F9C7F37AC46CF4D08C41BE63
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/qUkyzsESbsS2zlpHenJHCZVcW9w.roa
Signing time: Tue 17 Mar 2026 12:09:29 +0000
ROA not before: Tue 17 Mar 2026 12:09:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52000
IP address blocks: 194.242.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:b3:7b:24:f9:c7:f3:7a:c4:6c:f4:d0:8c:41:be:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Mar 17 12:09:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a94932cec1126ec4b6ce5a477a724709955c5bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:4b:2d:05:d0:7f:3d:15:f6:89:71:a0:47:
6f:1e:31:b2:f2:74:01:05:13:45:2f:82:de:1a:a9:
38:b9:ae:24:55:c1:65:ea:7e:5e:93:59:14:24:a4:
08:c2:4d:5f:84:e7:f0:83:08:d1:5f:22:80:78:89:
f7:80:30:22:15:d3:5c:f3:f8:e0:5e:65:5f:dd:2b:
2a:eb:ce:c3:0f:e6:81:b2:80:47:de:31:1c:c9:f8:
b9:2e:83:5c:e1:af:f2:e6:aa:61:9a:67:e6:34:64:
6e:e4:50:93:63:96:cf:c5:77:de:ef:78:f5:73:02:
20:90:f5:3a:fd:0d:0b:ad:e6:0a:a7:cc:f0:a2:19:
14:a1:3e:d6:18:b0:9a:e2:01:dd:25:58:c9:20:f2:
d1:9c:e2:23:f8:01:23:6c:fd:58:71:8c:e8:f3:b9:
47:33:01:bc:06:61:98:34:d5:ea:2e:61:d0:ef:6a:
01:b0:d1:4d:37:de:b5:4a:3d:ac:48:e5:6f:e8:ba:
f5:69:03:04:b3:b5:be:97:3c:e8:05:90:bf:d2:2a:
6f:64:57:6e:f0:3f:5b:98:9d:5f:e6:a5:3f:73:99:
74:96:1c:a8:8c:64:e5:45:b5:c2:76:09:aa:0d:ff:
1a:e1:a7:af:39:84:eb:21:0e:b6:26:70:68:3e:b6:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:49:32:CE:C1:12:6E:C4:B6:CE:5A:47:7A:72:47:09:95:5C:5B:DC
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/qUkyzsESbsS2zlpHenJHCZVcW9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.127.0/24
Signature Algorithm: sha256WithRSAEncryption
34:54:2d:2c:68:61:6c:27:84:8a:0d:6c:54:9a:71:6c:74:b7:
cf:9d:67:db:60:db:25:20:d3:d8:dd:a6:c5:06:61:35:95:51:
ba:d4:fe:ee:33:0e:0d:60:61:f8:6e:f7:6a:99:60:3e:c0:48:
b3:20:da:e2:a6:7c:89:62:c8:0d:9d:72:8a:cd:62:d7:83:33:
03:cb:96:72:d7:ac:6d:b4:77:8e:b9:84:5a:25:10:15:10:bd:
a6:ac:3b:9f:39:1d:d2:68:3a:96:ff:df:9e:08:53:0b:32:6e:
33:f5:97:1b:19:fd:09:8d:84:b1:aa:11:61:3b:6f:2f:f5:ac:
1b:17:30:b1:a1:d5:d7:80:d5:d4:d9:bf:0c:08:5a:df:f5:95:
09:f5:3b:a2:94:cf:08:be:71:28:de:67:b6:7e:43:6e:79:ec:
ad:fe:c2:ab:1c:a4:9a:76:8b:2a:33:25:88:7f:c7:05:93:d7:
58:b1:68:b4:71:78:9d:6d:9c:99:34:3c:91:27:db:fc:04:f6:
aa:a5:ce:7c:e3:63:47:c2:53:f1:cf:13:db:a9:93:d8:5a:23:
0b:82:40:24:73:41:cc:5f:66:be:d6:58:6c:7c:63:ab:bb:e3:
1c:ee:44:74:39:3d:6a:f2:c6:9f:03:b9:08:12:00:89:59:0a:
fb:dc:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 01:52:24 2026 by rpki-client