Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UhHAGjy-Vr8ZdZVTGlhNc2nkTH4.roa
File: UhHAGjy-Vr8ZdZVTGlhNc2nkTH4.roa (raw, json)
Hash identifier: nOb04da/iIcfxf5jikSuhPWVi0taolyBc4Qul6JpGcs=
Subject key identifier: 52:11:C0:1A:3C:BE:56:BF:19:75:95:53:1A:58:4D:73:69:E4:4C:7E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E8E4D9BBECEEDBDAE10AD303F3E888CC9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UhHAGjy-Vr8ZdZVTGlhNc2nkTH4.roa
Signing time: Wed 03 Jun 2026 16:25:11 +0000
ROA not before: Wed 03 Jun 2026 16:25:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.39.0/24 maxlen: 24
31.59.161.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 11:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:4d:9b:be:ce:ed:bd:ae:10:ad:30:3f:3e:88:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 3 16:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5211c01a3cbe56bf197595531a584d7369e44c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:04:ce:b6:3e:0a:a9:24:e9:88:86:0c:0a:
98:89:43:87:09:83:50:26:71:cc:4c:1b:46:3c:7b:
0f:c9:45:a7:25:17:f0:f4:86:5d:6e:21:b4:c8:53:
42:9d:0f:f6:65:58:78:4f:ef:fa:57:9e:1c:3b:08:
a2:5f:f2:8b:be:84:60:cd:13:b6:88:b2:8c:1f:72:
ee:02:13:45:f5:dc:e0:9e:ba:29:97:ca:71:06:96:
e4:73:d1:82:05:f4:c9:92:53:80:dd:54:89:46:c2:
9a:e5:7a:80:94:86:95:09:d7:98:6b:d3:fa:22:c7:
34:53:f8:57:f8:62:36:59:79:b9:a9:ec:e0:5c:03:
6d:02:28:5a:f1:7e:a5:87:dd:77:b2:84:11:d9:65:
6b:69:f3:22:90:c5:5a:96:99:58:5c:f1:72:c2:99:
20:61:2f:9b:69:8a:12:70:05:82:c4:d8:27:e1:54:
c5:0b:db:c8:33:4b:40:df:63:d2:c2:e1:0a:7d:a0:
94:8d:ab:1d:99:26:ef:29:10:2c:28:23:34:f3:1e:
9f:a0:fe:54:30:dc:71:96:a5:a8:a4:ec:58:02:34:
f0:58:56:01:86:34:52:60:7f:32:d2:3c:45:8c:4f:
08:c2:ea:72:35:64:8b:68:4a:22:13:1b:f0:9b:85:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:11:C0:1A:3C:BE:56:BF:19:75:95:53:1A:58:4D:73:69:E4:4C:7E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UhHAGjy-Vr8ZdZVTGlhNc2nkTH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.36.0/24
31.59.39.0/24
31.59.161.0/24
94.183.170.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
80:89:53:c6:c4:6d:30:66:70:74:08:61:d0:52:ef:af:63:de:
fe:41:75:5d:95:5e:c2:c3:6d:26:2d:5b:fb:b0:7a:a3:22:fc:
ef:a2:31:9f:aa:e4:20:c3:6d:e9:c7:4e:4b:6a:1a:86:67:e4:
17:2c:27:2d:ba:96:22:42:f8:73:2f:20:60:58:ff:c2:56:f8:
6b:1f:ac:f7:57:d5:bd:7f:e0:4d:0e:41:2e:cd:13:7e:a9:70:
a3:73:cd:18:50:09:23:2b:a4:ef:fb:c1:fc:bf:fe:89:da:d7:
fd:ed:1f:d9:d5:7f:0d:a6:73:f9:6a:1c:2f:9d:0c:3a:a4:3e:
66:e4:1d:8c:61:f3:08:80:bb:1c:6e:09:d5:e8:fe:49:37:5a:
0d:e9:26:51:bd:8f:30:3c:af:8c:0d:3d:33:db:f2:93:3b:41:
f6:ee:5e:6e:7e:e1:93:f4:fd:61:67:30:f0:3d:27:e3:05:a0:
c1:17:e9:15:f5:8d:ab:01:68:05:98:e9:cf:09:62:7b:f7:49:
c5:bb:98:e6:78:07:f8:83:e2:d4:ab:88:37:42:0b:02:19:8c:
08:71:d3:1b:5d:48:10:36:11:11:1c:cc:5f:2d:fa:38:9d:29:
38:18:78:34:3e:8e:da:9b:96:b0:da:73:38:a4:b1:a7:1c:9a:
95:be:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:07:06 2026 by rpki-client