Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uiphq86H9GxU_dhouvPTJYQtRb4.roa
File: uiphq86H9GxU_dhouvPTJYQtRb4.roa (raw, json)
Hash identifier: ZOApd+pRY+2fS0jUYj44JB7ooXyAq/PLlSwEu7gVQeI=
Subject key identifier: BA:2A:61:AB:CE:87:F4:6C:54:FD:D8:68:BA:F3:D3:25:84:2D:45:BE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A117DA07AACB8D0B597D464672B6EF6BC9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uiphq86H9GxU_dhouvPTJYQtRb4.roa
Signing time: Wed 07 Oct 2026 19:32:06 +0000
ROA not before: Wed 07 Oct 2026 19:32:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198189
IP address blocks: 31.59.220.0/24 maxlen: 24
94.183.156.0/24 maxlen: 24
217.60.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:da:07:aa:cb:8d:0b:59:7d:46:46:72:b6:ef:6b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 7 19:32:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba2a61abce87f46c54fdd868baf3d325842d45be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:51:7f:b6:30:00:d8:f9:41:07:ed:82:86:
59:03:c5:d7:4f:2a:41:98:c4:36:17:eb:11:23:3a:
34:ae:64:a5:2b:97:c3:19:96:c3:ba:5e:65:1a:4c:
10:fa:36:2a:db:ac:9f:2f:83:50:fb:c2:bb:da:a5:
a7:39:7c:28:aa:5e:b9:a2:50:44:d4:8b:8f:e1:94:
28:3f:18:1d:78:af:ce:94:19:f5:bf:25:fb:10:60:
cb:8c:44:e0:d2:37:46:5b:e1:63:23:37:1c:8d:b8:
9d:14:56:33:cd:7b:c2:36:60:9b:3a:ab:e3:18:72:
47:39:a7:0a:1d:6c:f9:3a:41:d2:97:f9:3c:a8:50:
33:0f:5d:fa:fe:aa:4f:1a:37:49:f7:da:43:0c:6f:
ea:96:d8:44:12:cc:4a:2c:f4:68:44:42:21:b8:f7:
e5:e2:0d:bd:32:40:e1:6a:a1:6d:9b:12:8c:83:b1:
30:e7:f7:30:62:c0:a6:d7:47:33:a7:db:45:0b:75:
24:72:8e:d5:90:19:37:68:4b:6e:8d:5f:d9:17:6f:
a4:84:41:3c:ac:4e:3b:d0:b5:99:06:9e:7b:9c:b6:
fe:ae:0f:c0:a2:35:dc:a5:c3:3d:66:68:b9:53:c4:
98:ad:e2:0b:43:91:e3:cf:c0:1c:52:63:98:12:1b:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:61:AB:CE:87:F4:6C:54:FD:D8:68:BA:F3:D3:25:84:2D:45:BE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uiphq86H9GxU_dhouvPTJYQtRb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.220.0/24
94.183.156.0/24
217.60.78.0/24
Signature Algorithm: sha256WithRSAEncryption
47:98:88:bf:ff:d1:7c:78:57:39:3c:39:5f:02:b9:59:a0:19:
76:76:2b:c9:7c:a0:d8:32:22:b7:c8:60:55:e4:6a:5c:5e:c5:
b7:b7:a7:b2:e6:cf:a2:e0:1c:d2:b8:16:48:ca:46:3d:25:19:
32:74:37:68:9b:58:85:30:f9:57:8e:8c:2c:7f:41:a6:68:04:
4a:3b:35:c2:63:a7:eb:0e:8d:53:f1:a7:84:bf:71:cd:20:71:
24:94:77:de:40:c9:41:18:16:06:9b:ac:bd:5b:15:49:78:7d:
af:fe:20:8f:67:c7:52:26:ad:98:0b:4a:9c:7b:e9:a8:50:49:
73:c0:ed:db:fb:9a:9f:e4:c0:d4:f1:5b:a3:1d:e2:8c:96:eb:
9d:b5:6b:41:67:21:90:52:18:10:51:dc:b2:2a:72:82:a8:42:
d6:3d:f3:cc:de:b0:9a:2a:b2:46:a6:cf:92:71:d9:5e:0c:45:
a5:e0:46:40:fa:0e:3d:08:b2:be:4c:4a:89:f3:b8:6b:93:38:
8d:1d:69:bd:40:aa:70:11:f6:88:c4:7b:8e:1a:57:f4:eb:34:
c7:3e:38:b0:1c:60:91:3b:0d:0e:a9:b5:94:44:14:ae:7c:d0:
87:d2:d9:09:d1:44:3a:f8:e3:61:05:45:6f:f3:f2:cd:c8:4d:
d1:d1:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:28 2026 by rpki-client