Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/uqXXOolSlqvTKPT7pSjePJUcsE8.roa
File: uqXXOolSlqvTKPT7pSjePJUcsE8.roa (raw, json)
Hash identifier: Itjger7KIRzl1rIBsKQWAXG1azplSZwz6GD+dpKqi0A=
Subject key identifier: BA:A5:D7:3A:89:52:96:AB:D3:28:F4:FB:A5:28:DE:3C:95:1C:B0:4F
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 019FB9293D66B00536AA9F8AFBE29BBA4CA4
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/uqXXOolSlqvTKPT7pSjePJUcsE8.roa
Signing time: Fri 31 Jul 2026 17:11:55 +0000
ROA not before: Fri 31 Jul 2026 17:11:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49801
IP address blocks: 46.245.48.0/20 maxlen: 24
78.111.5.0/24 maxlen: 24
78.111.6.0/24 maxlen: 24
87.247.168.0/21 maxlen: 21
87.247.173.0/24 maxlen: 24
185.166.105.0/24 maxlen: 24
185.166.107.0/24 maxlen: 24
194.34.160.0/24 maxlen: 24
194.34.161.0/24 maxlen: 24
2a10:a440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:29:3d:66:b0:05:36:aa:9f:8a:fb:e2:9b:ba:4c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jul 31 17:11:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baa5d73a895296abd328f4fba528de3c951cb04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:4d:f8:e3:1a:ab:ea:c3:6c:ca:41:f7:29:
b3:63:c4:db:29:5b:45:be:40:88:60:6d:94:4a:28:
19:d8:0a:af:25:9d:1c:a7:57:bf:a0:f6:d5:02:e3:
70:32:2f:c2:ee:c5:c0:06:58:68:c4:d4:a2:3b:4e:
89:72:cc:bb:14:1e:b3:a4:56:5c:f8:42:22:0c:77:
95:aa:79:8b:ae:dd:ad:9f:49:4c:b8:d9:6d:90:73:
29:92:a1:55:2b:0a:31:b4:a9:58:2a:be:94:4f:da:
36:bb:17:e9:8d:98:92:2d:ba:85:03:2a:7b:de:bf:
ca:75:82:bc:bf:72:14:ea:5d:9f:ce:bc:99:4e:45:
07:63:e4:77:ee:d6:a0:87:a9:db:f9:54:c6:45:63:
d7:c5:bb:7e:bf:43:00:ec:1d:c6:c2:92:56:1d:51:
53:47:87:4a:72:6b:72:aa:51:40:e7:2c:fc:be:aa:
f7:6c:fe:c9:32:88:43:20:94:6d:69:ec:c4:ed:21:
58:b3:05:8c:1e:76:f8:60:88:b5:02:63:02:f4:11:
59:3b:c8:55:74:8a:bd:e0:dd:c1:da:57:eb:7d:35:
a3:2b:b7:58:e0:97:0a:af:3a:c8:84:d2:64:82:74:
83:f6:da:58:89:c7:d5:89:06:8c:c3:2c:50:85:16:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A5:D7:3A:89:52:96:AB:D3:28:F4:FB:A5:28:DE:3C:95:1C:B0:4F
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/uqXXOolSlqvTKPT7pSjePJUcsE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.48.0/20
78.111.5.0-78.111.6.255
87.247.168.0/21
185.166.105.0/24
185.166.107.0/24
194.34.160.0/23
IPv6:
2a10:a440::/29
Signature Algorithm: sha256WithRSAEncryption
73:40:7f:5f:cf:25:49:96:19:15:87:f4:6f:c6:79:fa:d8:88:
4b:06:39:65:f4:02:d6:56:0d:35:5b:44:3b:98:9b:01:bb:0a:
40:c2:74:78:16:00:39:9f:ad:a4:1c:3c:89:28:1a:8a:a2:23:
36:01:16:25:4d:25:48:82:cf:5f:47:fe:d0:b3:d6:74:64:8b:
3f:8a:b1:8c:21:6a:ae:20:51:f3:f0:f4:34:36:93:f4:03:8d:
2f:7e:d5:de:5c:00:60:0f:c3:21:8a:b7:c9:b3:d9:4f:d0:01:
11:d9:7a:34:a7:66:f9:d8:e9:23:6e:1e:54:44:1d:54:a1:4a:
0f:f6:37:28:22:99:48:ef:ec:09:b2:7f:41:50:77:a3:83:60:
40:7e:62:15:68:f3:f1:a3:9d:a9:73:15:d6:4e:0b:9b:8c:c5:
07:9e:94:49:63:b2:9f:95:c3:a1:b3:d9:29:ee:f3:6f:b7:34:
2e:46:81:c4:37:a4:2f:9e:1c:aa:0c:4b:e1:4f:9f:a8:df:22:
f2:0f:47:27:9b:1b:5f:ba:d6:b3:c1:a5:28:c9:5e:67:b7:e3:
f3:98:76:cd:09:af:67:82:e5:25:f7:fb:69:3f:ab:62:ff:dc:
82:ad:43:c1:a0:b9:35:14:3b:44:ed:e3:6b:3f:b1:6d:54:56:
62:58:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:33 2026 by rpki-client