Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/uzf55yC-7djRSVx8Sh-FlrIF-Kk.roa
File: uzf55yC-7djRSVx8Sh-FlrIF-Kk.roa (raw, json)
Hash identifier: zoa8rEN1vewB6fKTwGs9R6JAyCcSTUzhxoihIuKJC6U=
Subject key identifier: BB:37:F9:E7:20:BE:ED:D8:D1:49:5C:7C:4A:1F:85:96:B2:05:F8:A9
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 019E25783A3DAF908E0908F8282BB10EFC58
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/uzf55yC-7djRSVx8Sh-FlrIF-Kk.roa
Signing time: Thu 14 May 2026 07:51:36 +0000
ROA not before: Thu 14 May 2026 07:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201071
IP address blocks: 91.109.248.0/21 maxlen: 21
91.109.248.0/24 maxlen: 24
91.109.249.0/24 maxlen: 24
91.109.250.0/24 maxlen: 24
91.109.251.0/24 maxlen: 24
91.109.252.0/24 maxlen: 24
91.109.253.0/24 maxlen: 24
91.109.254.0/24 maxlen: 24
91.109.255.0/24 maxlen: 24
92.249.5.0/24 maxlen: 24
217.147.120.0/24 maxlen: 24
217.147.121.0/24 maxlen: 24
217.147.122.0/24 maxlen: 24
217.147.124.0/22 maxlen: 22
217.147.124.0/24 maxlen: 24
217.147.125.0/24 maxlen: 24
217.147.126.0/24 maxlen: 24
217.147.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:78:3a:3d:af:90:8e:09:08:f8:28:2b:b1:0e:fc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: May 14 07:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb37f9e720beedd8d1495c7c4a1f8596b205f8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:73:26:7c:d6:e5:e3:d9:e0:f3:c6:d1:e5:
cc:87:27:05:2c:eb:f8:01:22:ff:a2:e5:7e:dd:dc:
dd:e0:d9:02:c8:46:bc:e0:66:0a:4b:bc:15:83:f8:
c1:d9:ea:76:a9:db:ae:9b:37:6e:a2:08:15:23:73:
c7:05:0a:65:dd:82:f8:e8:80:e6:6f:9d:4d:fb:7f:
a5:c5:c6:f0:63:bb:29:a2:ce:8f:66:2e:d4:1b:58:
81:80:59:a4:6e:61:1e:eb:03:67:2a:50:2f:2d:1c:
8d:3e:b3:f1:5b:27:df:8d:d2:f1:b8:4b:8e:77:17:
5e:25:26:a8:58:75:83:f1:d9:37:1c:30:20:eb:1a:
47:b2:54:3c:1f:99:ee:1a:e0:8f:1c:82:c0:e6:82:
4e:0a:6f:93:c7:f7:3c:c6:1c:ac:1b:f4:9b:04:c9:
1a:f0:5b:a8:cf:c9:d5:35:8e:b2:80:05:ec:c0:54:
78:46:a7:17:76:ac:00:9f:fc:e8:fe:04:8c:9f:56:
83:fd:da:40:4a:46:03:b2:3b:f7:cd:68:7d:5a:d8:
f7:80:c0:3e:12:d8:a8:c5:2e:37:cc:c6:19:2f:ae:
b9:05:34:7c:70:57:f4:f5:54:2e:be:89:00:a0:4d:
2d:e2:15:65:55:5f:52:16:25:ea:25:48:56:2c:25:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:37:F9:E7:20:BE:ED:D8:D1:49:5C:7C:4A:1F:85:96:B2:05:F8:A9
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/uzf55yC-7djRSVx8Sh-FlrIF-Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.248.0/21
92.249.5.0/24
217.147.120.0-217.147.122.255
217.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:82:15:11:6b:e1:76:63:10:ad:a5:2d:f1:51:42:4e:26:ea:
23:37:71:bb:ec:1e:3d:6f:69:33:42:a8:40:17:92:1c:a4:33:
64:4e:b2:9d:75:8e:ad:f6:c4:c4:c3:10:c8:9f:a2:7a:d9:a4:
44:da:16:05:b9:7a:3e:3a:42:e0:5e:c5:44:ef:1a:f6:d7:d8:
db:b1:96:8e:2a:2d:47:3a:d3:ec:0f:33:a6:83:1b:65:b1:13:
bb:78:b2:94:19:55:b6:b0:e9:8d:71:28:87:50:7e:5b:ab:b3:
0f:fd:c8:f1:42:38:f2:9a:8d:4c:b7:f0:cc:54:9c:1f:26:d2:
23:c6:70:2d:bc:e4:d7:87:f6:2c:01:cf:c9:de:12:6c:91:22:
ac:c8:b0:53:b2:9e:61:25:48:a5:ee:a0:b9:fe:23:59:4d:b1:
65:08:a1:ed:0d:4d:86:74:12:f3:a8:75:d7:c1:ed:ef:cb:26:
d6:05:65:c3:81:c6:e5:e8:95:0e:cf:98:d7:b0:8d:a0:e2:2e:
df:7d:3e:e8:33:62:b0:8f:35:bc:69:f1:23:38:5e:ed:46:33:
17:6d:35:c7:83:d9:d7:88:46:07:93:33:8e:8a:ea:4e:13:f4:
1d:7a:02:0f:88:1a:ab:f3:30:db:d1:7f:8b:ad:05:b4:86:ab:
f6:a9:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:06:51 2026 by rpki-client