Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/uTcAj-hpoGTSb_3s2qYJxCaKeYk.roa
File: uTcAj-hpoGTSb_3s2qYJxCaKeYk.roa (raw, json)
Hash identifier: 21QBe29K1PO59+oURoEI0Mss9upMA1WjOEg6V3gpTiU=
Subject key identifier: B9:37:00:8F:E8:69:A0:64:D2:6F:FD:EC:DA:A6:09:C4:26:8A:79:89
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D283E84B501CD1E648F59E0DB1C0CFF9E
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/uTcAj-hpoGTSb_3s2qYJxCaKeYk.roa
Signing time: Thu 26 Mar 2026 03:44:38 +0000
ROA not before: Thu 26 Mar 2026 03:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 110.34.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 13:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:3e:84:b5:01:cd:1e:64:8f:59:e0:db:1c:0c:ff:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 26 03:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b937008fe869a064d26ffdecdaa609c4268a7989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:35:85:cd:b5:ad:e9:43:1a:69:5b:e1:29:
6f:a9:e9:58:80:c9:ed:fd:ab:10:ef:5c:fa:75:76:
ce:2b:0e:f5:46:e3:c4:a8:45:74:09:3d:38:28:f4:
b7:7c:f4:d7:f5:4e:fc:f4:44:65:81:11:45:fd:0e:
39:4d:56:4c:98:81:9d:4b:cd:d3:57:a9:0d:08:70:
d8:38:fb:25:3d:9f:9c:d7:06:81:8e:0d:e8:cb:d9:
9b:c0:12:d8:27:62:76:a9:af:71:2b:73:5a:68:8b:
73:44:a6:31:ff:3d:87:a9:46:88:c2:39:78:05:5e:
b0:cc:89:fe:49:9a:d7:a6:62:84:a7:b0:7d:e0:5d:
42:a2:2b:67:b0:a2:d3:16:03:26:4d:d2:c7:b4:d5:
99:ab:8c:b5:73:8a:6a:94:85:cb:6b:f6:90:89:62:
12:e3:fb:84:52:a3:2a:15:35:0a:aa:90:26:62:ca:
82:96:3d:19:75:31:8d:43:59:bc:82:61:10:52:a8:
0e:86:dc:6b:f5:83:4b:c8:f0:7e:9c:b9:80:5e:1d:
40:96:4a:3b:e1:70:4c:7e:d1:16:35:50:1f:7d:00:
23:a1:7c:d1:09:3b:23:ff:76:f9:f7:9e:d2:97:a2:
cf:22:36:33:b0:c1:d0:24:a7:0b:04:ae:0a:b2:dc:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:00:8F:E8:69:A0:64:D2:6F:FD:EC:DA:A6:09:C4:26:8A:79:89
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/uTcAj-hpoGTSb_3s2qYJxCaKeYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.38.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0b:48:ba:2f:76:8f:bd:46:c0:00:0e:df:31:12:33:a4:d3:
47:82:60:69:1d:89:c9:b5:29:4a:a0:88:1f:2c:66:1a:c6:9b:
9f:e9:5b:ee:08:c3:39:91:56:e6:88:08:d4:0c:d9:ce:60:05:
8d:15:35:30:f9:c3:86:b4:c0:9a:3e:cb:2c:03:51:65:a3:86:
ee:d5:cd:e6:f7:9e:b6:18:21:6b:f3:fa:21:11:20:1f:c8:9e:
c7:73:e4:81:ca:ce:73:2c:43:dd:32:ca:91:23:a4:3e:49:a5:
23:c8:7c:33:ec:92:ca:58:81:50:e6:8f:4b:1d:a7:0d:1a:12:
9c:f8:cf:07:91:dc:d4:3f:78:f9:9d:9e:16:a8:9f:17:e3:d0:
9b:d0:a2:28:5c:70:70:32:b8:43:86:2e:94:07:d4:1c:c9:d7:
05:0b:c0:2e:c8:78:c0:a2:d2:d2:19:4a:32:1e:f0:b9:36:43:
09:e5:f7:e8:91:8c:94:1c:4a:3f:f5:48:bb:7e:7c:21:36:29:
49:4f:4c:32:85:c4:35:be:63:2c:64:b4:19:59:67:01:66:cf:
e8:65:cc:36:98:98:2a:41:24:e4:93:15:69:4f:bd:ef:6e:50:
ca:00:2f:7c:78:83:b5:dc:8f:df:d0:6c:2c:8d:06:4a:f3:7e:
76:f4:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 00:01:20 2026 by rpki-client