Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/uhJ9E2xHD6VE0XyeXFxt9rFbjbs.roa
File: uhJ9E2xHD6VE0XyeXFxt9rFbjbs.roa (raw, json)
Hash identifier: ByrmQQLK2SZe1G5CS63vjY0S33+wHwZPNkpO65iKwLs=
Subject key identifier: BA:12:7D:13:6C:47:0F:A5:44:D1:7C:9E:5C:5C:6D:F6:B1:5B:8D:BB
Certificate issuer: /CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
Certificate serial: 019F236901B7512B78858BCF8B032828A81F
Authority key identifier: 7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/uhJ9E2xHD6VE0XyeXFxt9rFbjbs.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50779
IP address blocks: 185.106.12.0/22 maxlen: 24
2001:67c:2698::/48 maxlen: 48
2a0c:db80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:01:b7:51:2b:78:85:8b:cf:8b:03:28:28:a8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba127d136c470fa544d17c9e5c5c6df6b15b8dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:c1:fe:82:40:e6:a9:d6:ad:cd:e8:7a:1b:
85:72:91:bf:84:eb:22:c0:1d:17:6a:ed:89:73:86:
a9:e9:17:f3:1e:84:b8:3c:d6:e7:e8:6d:02:61:d2:
02:0b:da:22:ff:68:88:8e:80:76:34:03:ce:47:7e:
e3:30:5a:11:7b:1c:18:4c:b7:56:26:44:06:be:b8:
15:5d:8b:98:fb:6b:a4:19:8c:d0:8e:a6:ab:79:2b:
1d:f7:b7:58:a2:9f:f1:fd:e2:2e:f6:a1:cf:17:b5:
78:a3:bf:57:e8:f5:f1:7c:a5:ca:d8:da:a9:d3:ad:
a1:26:12:84:a1:4d:5f:af:d2:b8:a4:03:b1:95:df:
87:7b:98:98:fe:22:a3:37:40:8a:a4:a3:30:5d:5d:
43:4b:8f:b4:bf:1f:86:79:64:cc:6a:b7:c3:57:bb:
65:3b:51:cc:61:a2:e6:9e:b7:2c:83:05:7b:50:fe:
9d:92:7d:07:f5:7f:08:a5:68:9b:56:48:25:1a:08:
04:a6:c3:ee:c0:81:1a:d8:ab:8f:5f:60:c9:91:5f:
3a:c7:97:35:18:de:4c:41:fa:ab:a2:e2:2c:8e:d4:
01:82:b0:8a:ea:86:e7:a0:c9:36:3c:c2:75:d7:30:
3b:99:2e:5f:4c:84:12:59:60:f0:17:7a:8e:a2:7d:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:7D:13:6C:47:0F:A5:44:D1:7C:9E:5C:5C:6D:F6:B1:5B:8D:BB
X509v3 Authority Key Identifier:
keyid:7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/uhJ9E2xHD6VE0XyeXFxt9rFbjbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.12.0/22
IPv6:
2001:67c:2698::/48
2a0c:db80::/29
Signature Algorithm: sha256WithRSAEncryption
51:13:be:bf:76:86:e0:6c:ba:ab:2b:59:b6:59:0d:22:89:cf:
41:eb:07:e1:24:36:1d:03:60:0b:32:1d:66:52:70:23:b1:10:
a9:a6:c5:47:ea:1a:0a:91:b6:3a:07:87:23:a3:b4:49:3b:81:
fd:22:52:a8:c9:4c:ce:0f:0f:3a:68:c6:ec:20:f9:38:75:a3:
99:bf:a5:36:7a:f6:98:df:31:35:c0:07:61:62:23:47:7e:7f:
61:de:66:20:48:67:95:f2:04:be:81:31:c9:aa:a1:bd:95:e8:
2f:02:90:0b:6a:21:46:0c:c5:a8:54:5f:8a:51:5a:5f:b9:d2:
f4:bb:63:0a:a7:b7:8c:49:8e:df:57:3a:d0:03:0d:bb:27:80:
66:51:e1:b5:66:50:15:a6:5b:ff:2b:90:d8:a4:64:f1:6e:6e:
90:5d:f4:c9:bb:c4:15:b1:1f:03:ba:f4:2d:b6:0c:14:d8:26:
c8:a0:5e:59:ef:92:4e:c0:90:b4:79:99:45:8a:a5:66:2c:9e:
65:0e:18:88:d5:75:31:c3:8a:f5:3e:39:c1:8e:4c:bf:91:1a:
b2:c4:14:57:86:6a:72:1c:ea:d0:45:bc:0d:d7:cb:e6:eb:55:
42:cd:cb:ce:7b:d2:71:d6:82:14:3a:07:bd:b9:dd:cf:16:27:
f2:be:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:43 2026 by rpki-client