Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uiHFUEN6bLtZueRk-GUlRUzWuqs.roa
File: uiHFUEN6bLtZueRk-GUlRUzWuqs.roa (raw, json)
Hash identifier: nmn9hmIgPKJYTTHIeiyGoCTDP2IMVmJxx0XoeV5Szfo=
Subject key identifier: BA:21:C5:50:43:7A:6C:BB:59:B9:E4:64:F8:65:25:45:4C:D6:BA:AB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F3AF506D1E587274651AE10476D3FD5D5
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uiHFUEN6bLtZueRk-GUlRUzWuqs.roa
Signing time: Tue 07 Jul 2026 05:02:44 +0000
ROA not before: Tue 07 Jul 2026 05:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 89.34.224.0/23 maxlen: 24
89.42.85.0/24 maxlen: 24
89.42.89.0/24 maxlen: 24
89.42.92.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
89.43.142.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.47.123.0/24 maxlen: 24
89.47.124.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
93.114.90.0/24 maxlen: 24
93.114.91.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:f5:06:d1:e5:87:27:46:51:ae:10:47:6d:3f:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 7 05:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba21c550437a6cbb59b9e464f86525454cd6baab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:93:f8:96:fa:4b:56:39:6c:c1:99:f7:3e:
6f:5e:37:03:4a:83:79:a7:b4:28:af:06:a4:72:de:
e3:04:18:92:47:4b:da:0e:08:fc:71:12:3f:e8:ee:
d0:e7:13:53:58:43:44:87:a0:e2:b2:38:3a:03:d3:
22:49:ba:c5:b8:dc:5d:52:7c:a7:51:3e:3c:16:9c:
31:39:7f:6d:b0:37:17:14:0f:74:4a:2d:36:a3:f5:
cd:c8:d9:40:c3:5b:77:47:f5:94:6f:3d:a0:64:a2:
34:ef:c0:67:5f:cf:1c:0c:40:00:bd:1f:4c:ab:55:
cd:09:79:d7:df:d8:0f:4f:b9:6c:5e:d6:24:e5:df:
a6:a7:56:a8:8b:c0:41:a7:52:b3:2b:1c:62:9b:5d:
b0:7b:a4:87:29:ac:23:76:19:05:ba:c4:fd:5c:1c:
b0:7f:2a:78:b6:62:3d:41:e9:d4:9d:d0:9f:51:f2:
be:2f:8d:15:84:64:5c:69:b7:8b:ff:7b:17:78:c3:
87:a1:4b:99:aa:b7:50:69:a8:ab:89:b9:80:b1:27:
cb:71:65:4c:80:6f:1f:88:fb:fd:ab:87:9e:9e:54:
3f:74:4f:70:c7:13:31:7e:54:61:29:30:b7:3e:5d:
c3:a0:f6:de:e6:3a:93:e2:e8:92:2b:29:fa:c8:01:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:21:C5:50:43:7A:6C:BB:59:B9:E4:64:F8:65:25:45:4C:D6:BA:AB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uiHFUEN6bLtZueRk-GUlRUzWuqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.42.85.0/24
89.42.89.0/24
89.42.92.0/23
89.43.142.0/24
89.46.4.0/24
89.47.123.0-89.47.124.255
93.113.183.0/24
93.114.90.0/23
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
08:cc:71:28:e0:81:6e:34:2e:3d:b5:ac:39:b2:57:58:76:9b:
07:3a:bf:83:ba:02:f6:56:3f:8b:fd:da:57:bc:6d:21:53:5e:
23:4e:a7:d5:c4:c6:d6:62:80:b4:c4:83:68:a4:e7:05:3a:43:
2a:d4:7d:75:2b:1c:23:b4:96:db:96:05:5a:e0:e8:d8:6e:ae:
a5:80:f3:61:9e:3d:a6:99:b8:e4:5d:dc:32:30:5f:c4:cc:1e:
31:af:88:79:3b:80:3b:21:92:39:45:ec:fd:b7:07:23:2f:c3:
89:be:95:82:b4:9e:6b:54:6f:2f:94:66:65:e1:ba:81:c0:81:
7e:13:9e:d9:81:f2:e3:89:11:5c:42:4c:07:af:09:41:31:c4:
9d:8e:7b:43:11:d0:db:2d:aa:44:70:1e:c9:07:9b:ee:5a:35:
6c:36:fb:84:10:ed:0d:c7:5b:b8:29:a5:9e:26:83:58:ae:7f:
db:38:87:46:ce:1c:0f:e6:35:76:20:2b:b9:41:4b:6b:0e:53:
4d:4d:0f:5a:66:e0:1b:43:62:47:4b:2d:71:44:11:8e:1d:de:
bc:c3:28:5a:29:cf:5e:e1:f9:9e:60:11:bc:2d:fe:a8:2c:2e:
a3:b0:87:f4:e5:9f:41:64:cb:bc:2f:dc:2c:ae:e8:b8:94:8c:
4e:23:23:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:52 2026 by rpki-client