Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/ubBrtzGmGbSO-WUwJl4ceatGG7s.roa
File: ubBrtzGmGbSO-WUwJl4ceatGG7s.roa (raw, json)
Hash identifier: HzJ4FfYId8f62Ds2rGoMX1JffixOL9SOPWiVHisDEAs=
Subject key identifier: B9:B0:6B:B7:31:A6:19:B4:8E:F9:65:30:26:5E:1C:79:AB:46:1B:BB
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 019F8A5C053A56413136C515A3BE244D6CF5
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/ubBrtzGmGbSO-WUwJl4ceatGG7s.roa
Signing time: Wed 22 Jul 2026 15:05:14 +0000
ROA not before: Wed 22 Jul 2026 15:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20926
IP address blocks: 79.98.16.0/21 maxlen: 24
80.74.64.0/20 maxlen: 24
141.101.56.0/22 maxlen: 24
185.10.176.0/22 maxlen: 24
185.47.240.0/22 maxlen: 24
2a00:6900::/44 maxlen: 48
2a00:6900:f0::/48 maxlen: 48
2a00:6901::/32 maxlen: 48
2a03:5d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:5c:05:3a:56:41:31:36:c5:15:a3:be:24:4d:6c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jul 22 15:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9b06bb731a619b48ef96530265e1c79ab461bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:7b:c5:2e:fb:b3:6a:7e:49:7f:63:82:70:
2b:62:a7:91:1c:d3:50:a7:e7:c7:fc:ec:f2:ab:da:
93:6e:b9:6f:d0:ed:cc:3a:c0:1a:99:4e:af:5e:91:
80:45:f0:89:16:c8:be:06:01:81:02:8b:35:d3:d1:
b9:8d:9d:8c:b2:89:54:26:e5:27:98:49:44:db:b6:
4c:1e:53:a4:8f:52:98:65:7c:e1:f4:49:38:85:1d:
e2:30:c5:3a:bc:93:6f:aa:eb:62:2f:bd:b7:f5:fb:
77:06:e0:20:e3:b9:4b:5b:8b:9d:38:aa:66:57:0c:
cd:97:5a:e3:f6:fa:17:5a:7a:99:c5:d4:54:90:ce:
94:85:29:cf:c9:68:b5:5a:bf:b4:b0:9f:69:db:3f:
36:a3:bc:c8:ab:6e:32:a7:d5:23:c5:58:e5:d9:82:
55:d5:5d:f4:8b:f0:21:50:6c:7b:c7:c1:c6:10:1c:
47:d1:b9:16:ea:85:08:3f:8a:52:4d:96:35:26:87:
a4:b2:32:28:1c:05:c3:f7:dc:89:cd:e2:aa:34:58:
da:a4:b4:71:6e:5f:d5:99:3d:03:e2:42:0a:5a:ff:
54:2e:d5:63:bb:d3:de:f2:66:6a:c2:6e:d5:d5:cf:
31:8e:73:8e:49:81:30:61:b0:4c:43:85:54:2b:2a:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:6B:B7:31:A6:19:B4:8E:F9:65:30:26:5E:1C:79:AB:46:1B:BB
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/ubBrtzGmGbSO-WUwJl4ceatGG7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.16.0/21
80.74.64.0/20
141.101.56.0/22
185.10.176.0/22
185.47.240.0/22
IPv6:
2a00:6900::/44
2a00:6900:f0::/48
2a00:6901::/32
2a03:5d40::/32
Signature Algorithm: sha256WithRSAEncryption
5f:38:83:b6:11:05:4f:c0:64:86:0a:6e:62:7c:3b:b8:a1:e4:
45:a4:c5:22:05:10:d1:f6:f1:5e:59:e8:1a:38:3c:82:a1:f8:
7a:56:ec:96:52:20:26:27:ee:72:18:1c:b5:5e:58:29:5b:1d:
75:71:04:0b:8a:71:21:62:39:ea:e9:b3:d8:9e:a9:93:9c:80:
16:7a:30:28:25:0e:37:4c:a9:b7:e5:09:bc:47:7a:31:4e:73:
0b:22:d4:3b:cc:13:a8:ce:37:4d:88:45:e7:2f:62:f6:b0:b4:
f9:e8:8a:e5:72:aa:92:64:1c:84:23:4b:2d:58:78:6b:d6:b4:
2f:b8:94:25:7e:e2:7c:1e:1c:05:fb:f5:d7:3e:61:44:29:6e:
4a:36:f9:4e:74:92:3a:fb:8c:a9:06:0f:0b:f0:0f:71:6d:1f:
ca:2a:c0:51:70:66:a1:3d:db:b4:11:69:02:20:fd:ce:9b:84:
68:7f:0c:74:82:59:5e:bf:97:a1:56:7a:b4:aa:0c:af:55:f2:
35:54:d8:9a:b8:c1:d1:27:00:c3:68:b3:57:49:6b:1d:f7:68:
ed:90:d1:68:a1:4c:b6:10:30:5e:8a:61:fe:60:4d:54:f5:e2:
a8:27:0e:79:cc:87:40:9d:d4:97:7d:7f:27:9b:55:cd:7b:79:
05:63:58:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:21 2026 by rpki-client