Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UctFLwqM_4WOq9unapxPDQOIFss.roa
File: UctFLwqM_4WOq9unapxPDQOIFss.roa (raw, json)
Hash identifier: jsWvt8vWSgSLT5hexwAAInmmfxYwbW5bGxe4i8DxWyo=
Subject key identifier: 51:CB:45:2F:0A:8C:FF:85:8E:AB:DB:A7:6A:9C:4F:0D:03:88:16:CB
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FE6C13E9AEF94969DD85A96F9D05FC1FD
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UctFLwqM_4WOq9unapxPDQOIFss.roa
Signing time: Sun 09 Aug 2026 13:40:51 +0000
ROA not before: Sun 09 Aug 2026 13:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 110.34.32.0/24 maxlen: 24
150.107.50.0/24 maxlen: 24
150.107.51.0/24 maxlen: 24
222.167.210.0/24 maxlen: 24
222.167.224.0/24 maxlen: 24
222.167.232.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:c1:3e:9a:ef:94:96:9d:d8:5a:96:f9:d0:5f:c1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 9 13:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51cb452f0a8cff858eabdba76a9c4f0d038816cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:76:1d:0c:86:6f:12:58:be:99:0a:35:5a:
8d:59:c8:9a:46:e0:cc:81:c8:4a:06:f3:b5:3b:9d:
b7:ca:f2:a9:29:f0:bc:3c:e9:0b:fa:32:a4:f0:56:
b9:4e:55:00:a5:0f:e7:ef:25:1d:1e:57:79:7d:7b:
8e:75:d5:0b:91:73:4c:09:22:8a:34:b2:9c:34:e8:
e0:1b:28:4d:75:97:15:af:bf:8e:55:76:a5:48:b5:
87:7d:74:2c:7a:60:49:2c:59:a6:f6:b6:14:7f:3f:
48:96:f8:99:a4:a9:9c:01:c2:a4:0d:b0:94:d7:3c:
77:66:50:93:5b:3e:c8:36:e0:f0:9c:e3:31:35:42:
4b:19:7a:0c:21:b2:5a:26:24:4c:65:ad:82:50:5c:
19:2b:89:74:54:ee:dd:04:ee:04:fc:76:da:9e:7e:
00:fb:7e:cc:02:08:87:29:0b:1f:21:9a:63:60:ef:
38:7b:0e:7e:fe:0a:ec:15:fc:a2:d1:6a:2d:69:3e:
24:53:89:82:41:7f:74:61:6d:e6:97:3e:c2:e1:14:
a0:36:60:13:0e:3b:07:ab:e4:0d:e1:bc:2b:71:88:
b4:f4:6b:3c:d9:46:49:78:2c:fe:20:d3:c5:cd:33:
69:c7:1f:86:3f:f3:76:fe:2a:90:9c:dc:e6:77:9e:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CB:45:2F:0A:8C:FF:85:8E:AB:DB:A7:6A:9C:4F:0D:03:88:16:CB
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UctFLwqM_4WOq9unapxPDQOIFss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
150.107.50.0/23
222.167.210.0/24
222.167.224.0/24
222.167.232.0/24
222.167.250.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
47:19:17:7c:6b:b5:6b:00:2c:a8:15:f0:b2:80:94:53:0a:20:
34:25:7c:ae:74:ce:5f:3a:42:aa:d0:eb:1a:61:28:59:b1:99:
0b:af:bc:80:29:b4:d2:2c:40:f6:fe:ad:d1:55:04:c1:02:79:
68:93:13:a3:de:fe:a8:85:b2:5e:24:29:87:bb:aa:62:5b:78:
f1:54:cf:87:95:aa:06:99:7e:7f:f0:ae:07:bd:56:c9:15:2a:
1f:6b:40:28:75:69:f2:7a:74:4d:d2:97:68:de:66:50:0f:b4:
95:e2:dd:f0:fe:65:22:27:7f:fd:24:b6:27:e6:35:15:29:f7:
25:da:28:73:54:bd:91:54:6b:e4:39:98:b1:04:3c:b5:e7:61:
a0:ed:71:19:fa:c2:bb:fd:90:66:36:c1:3a:60:0f:f5:7d:1e:
60:c8:5c:d2:3c:58:c5:62:27:84:5c:e3:fc:59:74:90:f2:27:
75:59:21:f6:62:96:27:29:9a:0a:4d:25:71:23:ae:75:54:9b:
6b:b3:a0:24:8f:16:48:0f:73:8f:4a:1e:f4:f8:fa:60:cf:6c:
93:2e:8b:e9:34:a4:9f:9b:7f:a8:a2:e9:83:49:5a:86:0d:89:
fe:29:33:31:27:9b:0a:ef:a5:4d:0d:11:a5:75:64:63:99:c0:
77:11:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:19 2026 by rpki-client