Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UQJV8RLwHOGfEauPanA391epIm8.roa
File: UQJV8RLwHOGfEauPanA391epIm8.roa (raw, json)
Hash identifier: M0Sp7cGjmUmk/XVSEpJir6psUnT47CsLpUFITZw4gKo=
Subject key identifier: 51:02:55:F1:12:F0:1C:E1:9F:11:AB:8F:6A:70:37:F7:57:A9:22:6F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F3AF5063A8C7DC4D431B2353D6A9FD52A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UQJV8RLwHOGfEauPanA391epIm8.roa
Signing time: Tue 07 Jul 2026 05:02:44 +0000
ROA not before: Tue 07 Jul 2026 05:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54339
IP address blocks: 89.42.89.0/24 maxlen: 24
89.42.92.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:f5:06:3a:8c:7d:c4:d4:31:b2:35:3d:6a:9f:d5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 7 05:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=510255f112f01ce19f11ab8f6a7037f757a9226f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:2c:97:83:6a:53:48:ab:71:17:d7:ba:33:
94:d7:6c:cd:09:cd:87:34:e4:6e:74:9e:fb:d3:5d:
cc:9c:05:e2:ab:dc:4e:ed:84:58:f0:51:7d:2a:63:
85:7a:85:99:47:3e:f3:b7:f9:3d:f1:7b:bf:14:ed:
7b:c7:ad:50:c0:e8:3a:d1:72:15:9f:23:85:d0:51:
39:7c:b7:22:23:38:dc:c6:aa:19:99:4d:a5:df:8c:
6a:86:32:4c:7f:f9:cd:b6:6c:3f:6e:4a:e6:99:a8:
2e:ab:4a:58:39:7e:1a:77:8b:04:95:58:e2:9a:be:
72:cd:67:0f:46:39:61:1c:43:18:5f:43:e3:1e:38:
23:51:bd:05:f2:b4:67:e4:bd:13:4f:78:c8:4b:f1:
03:b5:72:5a:f7:13:b4:97:53:ca:f5:cd:ac:87:28:
94:61:86:55:50:ad:6d:c4:26:ca:47:69:c8:80:40:
03:06:ee:e2:d7:2d:97:2d:03:4d:da:ef:10:9c:26:
86:85:e4:63:59:17:5e:e7:10:5b:20:93:62:60:67:
0d:82:e9:25:d4:58:07:83:77:2b:3e:40:2b:70:2d:
d0:9d:62:4a:38:be:69:64:1d:78:7f:cf:18:35:6d:
12:5e:41:5a:ea:93:6b:05:d0:7e:7d:d0:d0:17:ec:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:55:F1:12:F0:1C:E1:9F:11:AB:8F:6A:70:37:F7:57:A9:22:6F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UQJV8RLwHOGfEauPanA391epIm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.89.0/24
89.42.92.0/23
89.43.142.0/24
89.46.4.0/24
89.47.123.0-89.47.124.255
Signature Algorithm: sha256WithRSAEncryption
37:ae:1d:75:f7:59:6d:f2:8e:a3:75:db:94:8a:bb:a2:0f:5c:
64:6f:e6:38:55:32:b9:2f:98:4a:06:cf:4a:c7:c0:6a:3a:01:
ee:73:e5:42:27:9d:b3:fe:12:05:bc:c9:a0:67:73:33:a2:84:
1b:c3:7f:5d:c7:2e:99:e1:cb:21:53:c0:34:cd:8d:db:f4:79:
13:44:92:5b:8c:b6:c8:33:f0:17:c9:2d:88:2f:36:dc:39:ee:
77:02:f6:35:98:4a:2d:44:f0:51:13:69:77:62:79:f9:2e:42:
6a:f0:17:95:80:6d:27:f0:ad:da:bc:9c:07:e0:22:5c:ae:19:
0f:a2:dd:7d:a5:58:61:2b:ac:54:ab:39:da:97:ea:04:99:9b:
7a:10:8f:ea:d4:70:eb:7d:34:3d:e4:8c:0c:4a:8f:ae:d8:df:
e9:77:66:85:6f:65:5b:6b:da:66:ec:f6:67:f0:b7:c5:12:e6:
c6:b0:03:cd:a1:fa:6b:e4:a0:20:cc:ea:b5:08:98:4d:91:10:
56:3e:7b:e5:14:3b:a0:f3:03:72:a6:54:5e:57:89:8a:53:95:
0e:9e:11:26:48:75:cb:0f:e5:f3:e3:32:f1:29:36:89:6d:1f:
b5:f0:bc:54:d3:90:27:b3:e2:c4:82:d9:2c:54:85:2c:38:e9:
73:aa:2e:34
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ869QY6jH3E1DGyNT1qn9UqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNzA3MDUwMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTAyNTVmMTEyZjAxY2UxOWYxMWFiOGY2YTcwMzdmNzU3YTkyMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpEsl4NqU0ircRfXujOU12zNCc2H
NORudJ77013MnAXiq9xO7YRY8FF9KmOFeoWZRz7zt/k98Xu/FO17x61QwOg60XIV
nyOF0FE5fLciIzjcxqoZmU2l34xqhjJMf/nNtmw/bkrmmaguq0pYOX4ad4sElVji
mr5yzWcPRjlhHEMYX0PjHjgjUb0F8rRn5L0TT3jIS/EDtXJa9xO0l1PK9c2shyiU
YYZVUK1txCbKR2nIgEADBu7i1y2XLQNN2u8QnCaGheRjWRde5xBbIJNiYGcNgukl
1FgHg3crPkArcC3QnWJKOL5pZB14f88YNW0SXkFa6pNrBdB+fdDQF+yiTQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFECVfES8BzhnxGrj2pwN/dXqSJvMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVVFKVjhSTHdIT0dmRWF1UGFuQTM5MWVwSW04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAWSpZAwQB
WSpcAwQAWSuOAwQAWS4EMAwDBABZL3sDBABZL3wwDQYJKoZIhvcNAQELBQADggEB
ADeuHXX3WW3yjqN125SKu6IPXGRv5jhVMrkvmEoGz0rHwGo6Ae5z5UInnbP+EgW8
yaBnczOihBvDf13HLpnhyyFTwDTNjdv0eRNEkluMtsgz8BfJLYgvNtw57ncC9jWY
Si1E8FETaXdiefkuQmrwF5WAbSfwrdq8nAfgIlyuGQ+i3X2lWGErrFSrOdqX6gSZ
m3oQj+rUcOt9ND3kjAxKj67Y3+l3ZoVvZVtr2mbs9mfwt8US5sawA82h+mvkoCDM
6rUImE2REFY+e+UUO6DzA3KmVF5XiYpTlQ6eESZIdcsP5fPjMvEpNoltH7XwvFTT
kCez4sSC2SxUhSw46XOqLjQ=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:52 2026 by rpki-client