Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/uTiURM_DMHiv75dNHPrAJFdnAd0.roa
File: uTiURM_DMHiv75dNHPrAJFdnAd0.roa (raw, json)
Hash identifier: sF0ZyLzuBt8uyr+UBykHairkTID8q9WL1Vh7lTAxp1w=
Subject key identifier: B9:38:94:44:CF:C3:30:78:AF:EF:97:4D:1C:FA:C0:24:57:67:01:DD
Certificate issuer: /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial: 019F236914CA335375687B360C6CBBA5EF52
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/uTiURM_DMHiv75dNHPrAJFdnAd0.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394923
IP address blocks: 31.210.148.0/23 maxlen: 23
31.210.148.0/24 maxlen: 24
31.210.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:14:ca:33:53:75:68:7b:36:0c:6c:bb:a5:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9389444cfc33078afef974d1cfac024576701dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:29:b5:26:5a:a7:68:0b:42:fe:e4:d6:72:
7c:e1:85:ae:7e:be:3d:a3:0a:54:13:cf:6b:12:a1:
d5:cd:cd:a6:3f:06:f0:8c:78:de:b0:05:84:66:38:
6d:d0:d8:27:ac:e2:60:c7:f4:04:bc:62:23:d4:93:
d8:5d:91:a2:e9:76:20:82:5a:5e:2d:08:bc:22:a9:
b4:c7:20:a3:af:2f:4a:49:03:f0:78:21:04:30:65:
7b:68:11:32:aa:23:50:b7:a3:81:9f:57:85:f8:91:
2e:dd:a1:69:5c:e9:10:3e:10:9d:67:6d:9d:a2:9f:
25:82:c4:7f:d7:d0:2b:04:07:4e:f7:ea:9f:a6:b3:
0b:c8:57:73:5b:43:56:35:63:fd:db:82:3e:b1:56:
bb:7d:df:b8:cb:f8:ec:5b:de:91:20:9e:2c:36:c8:
71:3e:ee:1a:b4:d9:da:96:29:c2:3d:98:af:a9:27:
1f:bd:89:ce:4e:cf:6c:6c:2c:e0:cc:d6:7c:56:43:
37:66:d9:6a:ad:61:ce:55:8c:11:f2:b1:37:7a:16:
05:8e:ee:ec:9f:d2:79:f1:dc:b6:71:04:97:79:d8:
aa:d5:3c:1c:75:70:10:6c:c2:9a:2d:d0:59:b3:c5:
67:1f:5d:4f:e0:a8:eb:2e:69:f4:e8:d6:78:b4:db:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:94:44:CF:C3:30:78:AF:EF:97:4D:1C:FA:C0:24:57:67:01:DD
X509v3 Authority Key Identifier:
keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/uTiURM_DMHiv75dNHPrAJFdnAd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.148.0/23
Signature Algorithm: sha256WithRSAEncryption
76:c3:a4:01:24:44:13:61:9f:74:2e:5d:e7:89:ef:c5:42:25:
e3:47:99:d4:55:0b:65:ef:3f:f6:5e:5c:bb:5a:ab:70:ca:46:
12:54:44:3e:1e:03:91:e9:4c:68:a0:85:6f:31:1d:3b:d6:2a:
5e:92:d4:d6:9a:14:7f:00:3a:46:01:02:4a:41:72:b0:e9:bf:
0c:30:46:6b:57:c5:81:4a:a6:8a:b0:5e:d4:d5:1d:a9:1c:b5:
04:55:9c:e5:94:c6:cf:7d:87:f8:61:62:44:4c:9b:2d:df:30:
9f:09:da:dd:e2:91:82:7d:f7:18:6a:22:2d:44:50:88:2b:b5:
1c:c0:22:4e:69:bd:84:7d:66:02:c1:c8:7c:93:fc:51:1d:73:
f4:f1:ee:8d:ff:87:53:a3:05:fe:29:f6:0f:44:2a:a1:f5:02:
ec:16:7c:58:8d:eb:d4:ce:78:f6:76:42:3f:8a:e7:80:14:5c:
6c:21:8d:49:e6:8f:05:b0:56:04:de:eb:3d:b3:5a:95:93:40:
a9:08:a3:c9:f5:19:fa:22:1b:cd:c7:5e:cf:d6:b3:b6:64:d0:
27:34:64:23:1a:a2:ae:f4:32:c9:10:ab:4d:fb:76:1a:16:d8:
5a:c7:15:e4:ab:71:fd:82:c2:b2:e5:39:fd:64:f0:2a:30:b9:
0c:a7:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:01 2026 by rpki-client