Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ukfGOSY0ubhdw-dUikQpEbsmqA8.roa
File: ukfGOSY0ubhdw-dUikQpEbsmqA8.roa (raw, json)
Hash identifier: SSIKLSY/WZ7xXPmGQETN02LAgfWz7DUPVYazvDeiBXk=
Subject key identifier: BA:47:C6:39:26:34:B9:B8:5D:C3:E7:54:8A:44:29:11:BB:26:A8:0F
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A134E38FDFCE69C74BC3719F7CD48A6531
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ukfGOSY0ubhdw-dUikQpEbsmqA8.roa
Signing time: Tue 13 Oct 2026 10:51:31 +0000
ROA not before: Tue 13 Oct 2026 10:51:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 87.76.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:e3:8f:df:ce:69:c7:4b:c3:71:9f:7c:d4:8a:65:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 13 10:51:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba47c6392634b9b85dc3e7548a442911bb26a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:96:96:ab:05:a2:79:3e:fa:b3:06:c8:cf:
8b:99:08:a1:c4:de:9e:0a:32:20:48:bb:af:2e:ca:
9c:7d:27:41:09:20:35:a1:9e:bc:ac:e2:21:00:6b:
9e:90:d8:68:0f:96:27:78:fe:0d:d9:39:b2:27:fc:
13:7b:ca:70:68:61:4a:78:51:f5:4f:de:2f:8d:7e:
a4:d3:fb:3f:f6:69:2a:4c:32:09:20:f2:76:6b:62:
75:5f:0b:0f:4b:0e:63:58:1f:63:ee:0f:b2:8a:c6:
78:3f:4c:1a:8c:0a:17:44:ce:56:56:5b:30:b6:f1:
92:4b:14:37:4d:ec:10:d3:66:b5:df:ac:1b:fd:2d:
ed:56:81:d2:a8:7d:68:28:d6:ca:cb:b9:f8:cf:4f:
f8:f4:08:35:62:fa:06:a2:79:ee:4f:9a:6c:7e:a2:
f1:6e:0b:f6:1f:e0:20:3b:2c:d3:d4:be:3d:13:9e:
f8:74:45:00:68:78:62:b6:a7:2c:b0:fe:15:97:ed:
58:87:63:f4:f0:fd:73:b6:33:73:48:97:7a:97:b7:
e2:f0:f6:31:9d:e7:8f:cf:31:74:12:d0:4b:28:92:
fd:4b:c8:31:ef:c4:91:39:9e:10:91:ba:38:7b:c1:
33:6d:ba:cb:1b:be:cb:02:6a:40:79:a8:89:00:b5:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:47:C6:39:26:34:B9:B8:5D:C3:E7:54:8A:44:29:11:BB:26:A8:0F
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/ukfGOSY0ubhdw-dUikQpEbsmqA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:76:2c:e7:05:03:67:00:61:fd:fe:5b:84:ba:63:de:4f:31:
e5:83:4e:b4:b3:d5:ec:95:b9:e6:68:27:ed:d6:c9:2c:57:43:
bd:54:0b:54:cb:f1:25:3f:9f:1c:00:19:ae:63:db:c3:64:69:
1d:49:4e:c0:4d:99:58:e6:12:63:39:91:ca:6e:de:e1:72:c7:
6f:c6:94:93:c3:39:f1:f9:af:a8:99:33:d8:68:25:ed:f0:89:
08:24:e7:c2:47:58:39:92:11:cd:f2:d6:af:f5:32:80:c7:e5:
cd:70:88:0b:32:ba:fb:76:14:58:46:9e:03:be:fb:7b:57:87:
7f:6a:fc:a3:4e:bf:40:f1:05:e5:0f:84:71:74:18:2d:2b:7a:
2c:f1:5a:d4:da:f9:66:a5:07:a7:5b:9f:41:78:e1:b5:c1:10:
37:0b:80:6d:fb:b6:ba:39:70:8d:35:e8:5e:55:13:1f:df:d5:
1f:16:cd:17:42:a2:a4:99:8d:2f:25:c7:0d:09:61:36:47:4d:
c9:24:fb:8c:fb:f0:6e:85:ac:04:36:13:a0:bc:3c:86:33:25:
b3:ef:8f:45:a8:b8:78:af:c0:7b:b4:83:2a:c5:f3:90:9d:77:
d9:76:3b:36:77:a5:8d:98:7f:1d:3d:0f:d1:01:42:1f:ed:21:
d9:7e:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:50 2026 by rpki-client