Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/UlaLA_aye1yi8ffcgvzHLKF9XII.roa
File: UlaLA_aye1yi8ffcgvzHLKF9XII.roa (raw, json)
Hash identifier: mKeJyK7nxH6LI8VK6NF5seVc7KLN3sT6TkNF69RUdB0=
Subject key identifier: 52:56:8B:03:F6:B2:7B:5C:A2:F1:F7:DC:82:FC:C7:2C:A1:7D:5C:82
Certificate issuer: /CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Certificate serial: 019EEDFA71FB21203867E45E4ACB3D5B5A3B
Authority key identifier: 97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/UlaLA_aye1yi8ffcgvzHLKF9XII.roa
Signing time: Mon 22 Jun 2026 06:17:53 +0000
ROA not before: Mon 22 Jun 2026 06:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 217.198.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:fa:71:fb:21:20:38:67:e4:5e:4a:cb:3d:5b:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Validity
Not Before: Jun 22 06:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52568b03f6b27b5ca2f1f7dc82fcc72ca17d5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:43:b6:e4:77:83:84:4f:6d:df:b9:2a:e8:
fa:f9:a7:b3:aa:7a:9d:2e:c0:78:f1:2f:13:43:db:
8f:88:23:72:c7:63:26:1f:24:d4:88:51:cf:6e:b1:
79:bb:88:42:70:75:d3:ef:3d:c3:5b:1d:20:af:ad:
1e:d1:74:cd:3f:da:dd:57:ac:13:5f:ad:ef:0f:8c:
01:9a:b8:8a:88:f5:45:f5:00:11:3f:66:08:b5:61:
6e:d8:01:e9:af:58:5a:7b:e4:a7:d4:54:2a:81:2f:
3d:85:80:1c:16:79:98:ab:0e:e6:f1:f9:52:4a:f7:
42:1d:7a:28:5b:3b:9e:64:8b:ce:c1:b0:fa:4f:fd:
18:cc:10:ba:31:72:81:5a:47:75:b6:8f:ea:30:4a:
93:76:97:e8:9d:5c:aa:10:56:02:6a:99:d7:da:7f:
2f:dd:49:5b:d0:ae:85:7e:e6:8a:88:9a:46:55:92:
70:54:91:a4:f4:81:17:b6:22:77:06:35:2f:be:42:
03:4a:65:5a:98:7a:a6:d2:df:58:e7:d6:68:0f:82:
09:34:73:a7:f5:1a:42:a2:75:16:4d:6d:6f:0f:90:
11:8c:c6:98:c9:9f:55:83:3d:a2:3e:6b:36:ab:ae:
60:5a:01:3c:04:c9:79:61:dd:0a:6b:ec:94:b3:95:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:8B:03:F6:B2:7B:5C:A2:F1:F7:DC:82:FC:C7:2C:A1:7D:5C:82
X509v3 Authority Key Identifier:
keyid:97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/UlaLA_aye1yi8ffcgvzHLKF9XII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c4:ba:b0:51:60:6f:74:7e:38:e6:bf:ad:62:2d:fe:d0:80:
ba:fd:61:d0:4e:98:c1:dd:dc:4a:5d:c5:06:9e:e7:34:8f:6c:
2b:a4:a0:1a:4e:2b:4f:b9:79:c3:a5:89:8b:8c:fe:c3:0e:62:
d2:8f:80:9e:e5:3a:a1:17:e4:aa:18:43:a8:28:d1:09:29:3b:
28:a1:b7:30:9e:4b:ce:fa:1f:21:01:71:17:d3:74:4b:cd:4a:
96:9c:aa:61:d0:3b:da:bf:f3:92:a7:90:54:91:2b:d2:e4:88:
40:c0:a7:98:41:c2:f4:e9:c3:ee:82:f0:0e:73:a7:a2:d3:67:
ce:9a:e7:a6:3a:e0:79:6e:90:b8:ef:39:df:c4:52:52:8c:d4:
3b:f0:63:3c:48:c0:25:3f:d9:52:70:6e:0a:9e:68:2d:68:13:
47:6a:11:4d:6c:7d:5b:cd:c1:f7:36:34:a3:89:7a:4f:0f:9f:
d6:fe:dd:d2:28:4b:63:28:ff:c2:8e:e2:0b:24:96:41:5c:bc:
cd:2b:f6:ad:68:58:19:b1:de:97:2c:97:25:14:6c:01:a9:b1:
cc:a5:36:30:a6:88:18:59:91:68:0d:26:d0:58:d6:ce:e0:9b:
77:04:66:74:da:d2:82:8e:ee:52:32:b9:50:b5:81:d1:53:9d:
90:29:53:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:51:37 2026 by rpki-client