Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/Uqy5I6gNUAaj7vDZBifDuuDE92c.roa
File: Uqy5I6gNUAaj7vDZBifDuuDE92c.roa (raw, json)
Hash identifier: nq/j3wKynpJuyednMGSkYoDC6HwfMHQ1DS8AXytSInQ=
Subject key identifier: 52:AC:B9:23:A8:0D:50:06:A3:EE:F0:D9:06:27:C3:BA:E0:C4:F7:67
Certificate issuer: /CN=9f1a0e261cf6f4a86dca97f12ce36c76662122ac
Certificate serial: 01A110679472C63E2E99F318A961236F5724
Authority key identifier: 9F:1A:0E:26:1C:F6:F4:A8:6D:CA:97:F1:2C:E3:6C:76:66:21:22:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxoOJhz29KhtypfxLONsdmYhIqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/Uqy5I6gNUAaj7vDZBifDuuDE92c.roa
Signing time: Tue 06 Oct 2026 08:49:46 +0000
ROA not before: Tue 06 Oct 2026 08:49:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21473
IP address blocks: 185.98.135.0/24 maxlen: 24
188.95.13.0/24 maxlen: 24
2001:34c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxoOJhz29KhtypfxLONsdmYhIqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:67:94:72:c6:3e:2e:99:f3:18:a9:61:23:6f:57:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1a0e261cf6f4a86dca97f12ce36c76662122ac
Validity
Not Before: Oct 6 08:49:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52acb923a80d5006a3eef0d90627c3bae0c4f767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:a7:59:cc:33:33:f3:cd:ce:de:2a:67:9c:
b6:90:39:d0:f7:c8:de:a7:41:49:bb:3d:29:7a:13:
ef:80:af:87:8e:65:66:1a:5f:d9:99:77:16:28:7a:
ae:30:4d:69:b7:9c:e6:e4:0c:a4:1f:3e:43:72:98:
92:dc:1a:e1:9f:e2:5a:79:8b:1a:51:e4:39:fa:9f:
5a:d1:bd:09:ad:b3:49:07:2f:f2:20:1a:90:6c:6b:
ea:bc:3c:5d:a6:8b:12:5d:d1:26:35:42:e0:c6:8f:
43:9f:c0:f5:74:ea:37:13:71:77:49:90:8b:42:38:
3e:c3:ce:90:fa:21:8b:52:5b:61:e5:bd:41:48:46:
24:f3:42:68:7b:e9:2c:1a:ff:2e:30:3d:8c:2c:83:
d8:7d:fa:07:70:6b:ee:5b:71:92:2c:ff:dc:8a:24:
e3:f7:b5:02:19:05:52:77:cf:51:3f:f4:da:8d:0e:
57:a3:b1:e1:40:72:84:7e:26:e7:c2:71:f0:1d:b7:
c6:c0:b5:1c:2d:66:50:45:4d:92:89:62:51:7d:e7:
b7:77:1d:7c:97:5f:da:e5:1b:31:f1:02:93:ff:67:
29:78:cc:f2:81:48:01:62:e8:01:fc:ae:23:16:0a:
0c:71:23:8b:cb:4d:6b:e7:9c:4d:2f:60:a6:ef:b9:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:B9:23:A8:0D:50:06:A3:EE:F0:D9:06:27:C3:BA:E0:C4:F7:67
X509v3 Authority Key Identifier:
keyid:9F:1A:0E:26:1C:F6:F4:A8:6D:CA:97:F1:2C:E3:6C:76:66:21:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxoOJhz29KhtypfxLONsdmYhIqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/Uqy5I6gNUAaj7vDZBifDuuDE92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.135.0/24
188.95.13.0/24
IPv6:
2001:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:b1:90:21:2d:0f:30:75:77:bf:a1:1e:03:b1:34:fe:f9:0f:
17:43:c0:72:ae:df:13:ff:50:a7:24:bc:81:ce:9c:96:70:7c:
90:16:37:45:cf:1c:65:1a:a3:4b:1c:a8:74:35:37:e1:58:46:
d2:b3:7e:dd:f1:fb:fa:fb:e1:37:bb:c1:d6:5b:94:5d:f9:a6:
f7:b6:e3:1f:e9:3a:dc:1a:79:76:0b:4d:b9:07:64:0e:af:44:
94:3e:9d:69:82:a5:20:45:73:3e:56:4b:37:54:72:50:2d:75:
d4:4f:9a:46:e4:8c:a2:4b:66:bc:14:bf:a8:52:ea:63:0d:9f:
dc:bd:1c:40:75:03:aa:7a:22:04:2e:db:b2:32:99:b9:bf:1d:
5c:bf:36:03:04:a0:70:17:bf:7b:a8:50:3f:9a:71:87:2c:f5:
cb:dc:a9:15:4a:db:73:99:ec:9d:14:db:cf:37:93:d7:9d:74:
4d:00:65:09:7b:e8:e1:bb:24:0d:49:c5:34:3c:c9:9a:46:e6:
d0:a4:96:ff:89:98:76:70:31:a5:cc:77:80:ab:4d:1c:68:94:
85:df:0c:c0:31:39:f8:50:72:01:e3:86:34:f1:00:80:d6:df:
1d:c1:f8:83:5d:55:cf:a2:e6:66:dc:4f:1d:0a:f9:85:bb:94:
09:be:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:28:30 2026 by rpki-client