Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UovVuidSJ6VyOXzaImlvnvDzNZo.roa
File: UovVuidSJ6VyOXzaImlvnvDzNZo.roa (raw, json)
Hash identifier: FrrmtyyFqx6LliZFwik7dAsD8K6N5OUt4H0X2CLgP74=
Subject key identifier: 52:8B:D5:BA:27:52:27:A5:72:39:7C:DA:22:69:6F:9E:F0:F3:35:9A
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FFD96848CF99BD1437D03B69BC7503854
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UovVuidSJ6VyOXzaImlvnvDzNZo.roa
Signing time: Fri 14 Aug 2026 00:05:27 +0000
ROA not before: Fri 14 Aug 2026 00:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 110.34.32.0/24 maxlen: 24
222.167.210.0/24 maxlen: 24
222.167.224.0/24 maxlen: 24
222.167.232.0/24 maxlen: 24
222.167.234.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:96:84:8c:f9:9b:d1:43:7d:03:b6:9b:c7:50:38:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 14 00:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=528bd5ba275227a572397cda22696f9ef0f3359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:95:c4:4b:b2:63:89:65:7f:05:b3:2e:25:
03:2f:68:03:27:bf:df:16:21:61:31:31:64:3c:66:
91:29:d3:39:00:6a:89:f9:7c:ee:83:26:2c:1b:28:
dc:5c:29:67:d1:c8:27:ea:cf:be:29:ee:0d:8c:68:
36:a0:51:01:2e:43:25:bb:59:10:85:fc:74:4c:2a:
8b:cc:e2:52:69:6e:e8:59:0a:15:5c:3b:75:0d:b4:
04:f2:3f:d2:7e:87:f6:20:e1:41:58:1e:64:1e:26:
eb:eb:a9:41:80:d1:9e:2f:f5:e0:f8:9c:bf:07:31:
c4:e3:5d:4d:de:79:cd:4b:1b:64:1e:d1:0c:06:a1:
9d:45:5d:11:b7:b5:cf:27:56:e7:bc:c4:5a:af:74:
79:e6:05:be:0c:41:02:5c:e2:50:44:16:a8:65:0f:
9d:c8:00:d1:83:c4:42:6e:81:d7:78:7a:ed:3e:ae:
0a:11:78:5b:20:a5:27:1d:78:a3:88:62:5e:36:cf:
05:e0:fd:e1:42:c2:89:97:53:a4:f0:34:7b:a9:44:
23:b8:71:59:da:74:4a:d2:c3:6f:0f:43:22:b1:82:
4c:9e:1c:51:66:2b:24:2d:7e:2b:c0:33:2c:fb:2c:
f4:89:5e:80:b4:8d:f5:e8:76:5d:e6:a7:a4:97:ec:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8B:D5:BA:27:52:27:A5:72:39:7C:DA:22:69:6F:9E:F0:F3:35:9A
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UovVuidSJ6VyOXzaImlvnvDzNZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
222.167.210.0/24
222.167.224.0/24
222.167.232.0/24
222.167.234.0/24
222.167.250.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
91:70:60:4c:b8:26:fa:d2:61:a7:ae:cc:f4:1d:0c:a8:0a:a4:
3a:b8:48:8d:06:aa:42:a1:bb:65:81:2a:0e:7a:98:72:7d:ff:
78:0f:bb:3d:d7:af:5b:12:8b:74:fc:41:a5:91:33:d7:61:08:
36:c9:34:46:ee:aa:d1:16:a1:d9:c1:f2:26:6c:0a:b4:df:db:
ce:91:dd:cc:3f:ea:56:4f:36:ef:a0:c9:d1:56:59:92:3b:09:
a8:d3:70:80:ab:41:b4:76:fd:47:a4:53:02:cf:39:78:ac:a8:
a2:96:2f:d5:2a:3a:e5:d6:c7:53:12:3b:43:5b:74:2f:cf:91:
65:8a:d3:6a:b1:a1:ec:c3:66:ad:5a:15:bc:32:3a:81:b2:45:
a3:04:3f:17:ba:58:25:ff:c4:61:48:ee:bb:8b:aa:d8:ec:dc:
5b:76:04:a3:32:5e:e5:16:ee:d9:08:d7:9d:97:c3:0a:a0:d7:
45:31:e7:a4:5f:a2:64:20:ac:ba:67:70:cf:6d:3b:42:67:6d:
d6:16:41:db:8f:de:c3:8c:8e:c1:18:ed:13:b2:9b:88:73:3b:
c7:27:80:42:44:18:d3:ac:48:5b:8b:ba:11:eb:04:7a:ba:22:
52:45:a3:71:9f:e7:4e:9a:d7:fa:cb:aa:ca:d6:1a:00:98:e5:
b6:93:16:fb
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ/9loSM+ZvRQ30DtpvHUDhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwODE0MDAwNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjhiZDViYTI3NTIyN2E1NzIzOTdjZGEyMjY5NmY5ZWYwZjMzNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35mVxEuyY4llfwWzLiUDL2gDJ7/f
FiFhMTFkPGaRKdM5AGqJ+XzugyYsGyjcXCln0cgn6s++Ke4NjGg2oFEBLkMlu1kQ
hfx0TCqLzOJSaW7oWQoVXDt1DbQE8j/Sfof2IOFBWB5kHibr66lBgNGeL/Xg+Jy/
BzHE411N3nnNSxtkHtEMBqGdRV0Rt7XPJ1bnvMRar3R55gW+DEECXOJQRBaoZQ+d
yADRg8RCboHXeHrtPq4KEXhbIKUnHXijiGJeNs8F4P3hQsKJl1Ok8DR7qUQjuHFZ
2nRK0sNvD0MisYJMnhxRZiskLX4rwDMs+yz0iV6AtI316HZd5qekl+z/vQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFFKL1bonUielcjl82iJpb57w8zWaMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvVW92VnVpZFNKNlZ5T1h6YUltbHZudkR6TlpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAbiIgAwQA
3qfSAwQA3qfgAwQA3qfoAwQA3qfqAwQA3qf6AwQA3qf/MA0GCSqGSIb3DQEBCwUA
A4IBAQCRcGBMuCb60mGnrsz0HQyoCqQ6uEiNBqpCobtlgSoOephyff94D7s9169b
Eot0/EGlkTPXYQg2yTRG7qrRFqHZwfImbAq039vOkd3MP+pWTzbvoMnRVlmSOwmo
03CAq0G0dv1HpFMCzzl4rKiili/VKjrl1sdTEjtDW3Qvz5FlitNqsaHsw2atWhW8
MjqBskWjBD8Xulgl/8RhSO67i6rY7NxbdgSjMl7lFu7ZCNedl8MKoNdFMeekX6Jk
IKy6Z3DPbTtCZ23WFkHbj97DjI7BGO0TspuIczvHJ4BCRBjTrEhbi7oR6wR6uiJS
RaNxn+dOmtf6y6rK1hoAmOW2kxb7
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:36 2026 by rpki-client