Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/UsjASv_2eW8gZiWK0i4FpYu09m4.roa
File: UsjASv_2eW8gZiWK0i4FpYu09m4.roa (raw, json)
Hash identifier: zYD0Z+YqkfnFq/kveLSCYnRURitHXYeIwsl2+hZfX9s=
Subject key identifier: 52:C8:C0:4A:FF:F6:79:6F:20:66:25:8A:D2:2E:05:A5:8B:B4:F6:6E
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019F898E07C5DF9F0BECD4B6ACFED6C7863C
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/UsjASv_2eW8gZiWK0i4FpYu09m4.roa
Signing time: Wed 22 Jul 2026 11:20:14 +0000
ROA not before: Wed 22 Jul 2026 11:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 82.119.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:8e:07:c5:df:9f:0b:ec:d4:b6:ac:fe:d6:c7:86:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Jul 22 11:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52c8c04afff6796f2066258ad22e05a58bb4f66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4e:90:dc:59:cc:75:9f:6f:32:fe:44:4c:2e:
c6:ea:43:ab:88:5b:e8:ab:d6:c0:2a:4c:52:be:bc:
7a:4c:89:ff:1c:1a:2a:02:38:19:b2:ff:ff:fd:4b:
75:ca:52:09:26:a5:b9:99:40:3f:67:3e:dc:51:63:
e1:73:5f:cf:ff:7b:0c:2a:2c:18:0e:e2:19:7d:58:
bb:fe:30:37:8d:da:4f:7f:50:15:b0:33:fc:f7:f9:
ca:96:52:fa:b5:3d:62:cf:b1:6c:31:58:1b:3d:f6:
25:0b:25:dd:25:29:03:af:10:62:35:58:cc:96:38:
4c:e1:e8:81:01:db:17:2e:ed:a9:a6:8d:20:b9:36:
e6:fb:13:b0:6f:b5:6a:64:36:2b:ab:4f:f3:69:0f:
ad:30:ae:92:a6:a2:33:5d:e1:e9:33:ff:ac:b4:25:
b2:3e:bc:c6:fc:63:39:54:ca:00:01:9e:87:e3:d8:
dd:0b:34:fe:3c:d4:cf:8b:11:73:09:2c:0c:8e:92:
0c:ff:ff:5f:7e:c6:dc:c7:0b:7d:f0:9d:b9:76:f0:
88:19:78:8f:0d:7f:26:20:79:19:77:47:e4:55:21:
84:d0:ac:95:40:1d:dc:df:0d:e6:cf:24:c2:42:11:
73:5e:8e:39:59:d6:2c:71:47:41:01:b5:29:ab:b7:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C8:C0:4A:FF:F6:79:6F:20:66:25:8A:D2:2E:05:A5:8B:B4:F6:6E
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/UsjASv_2eW8gZiWK0i4FpYu09m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ad:f2:64:dd:aa:af:81:6f:b2:90:0e:d2:e8:23:c9:d6:bc:
f5:74:ab:3a:28:9e:45:0f:2e:49:f5:b4:04:21:c5:b9:8e:9b:
36:fb:9c:63:a3:ec:88:0b:3d:23:b0:5b:d7:70:ca:51:31:68:
07:96:77:23:5d:d0:95:15:2d:e3:eb:8f:09:c1:42:36:95:b1:
70:91:73:11:66:1a:3c:69:4f:7f:18:d2:8a:5e:0f:d2:13:47:
68:55:d3:03:53:27:70:3d:63:d1:68:d1:7d:5e:65:91:8f:cf:
9c:69:f7:b1:01:7b:e5:ea:3b:5a:2c:6b:4b:17:03:d2:14:be:
56:bd:bd:b0:2b:9e:bf:54:ca:18:a6:2e:89:0b:73:50:d2:ea:
74:f3:59:4c:46:5b:a4:32:38:b1:04:38:57:33:38:b6:b2:f5:
0a:57:15:dd:d5:b5:66:1d:49:c9:ea:c4:84:36:2f:90:44:3c:
9f:0d:b0:26:11:94:a1:70:0b:1f:15:37:24:5b:62:e6:b0:d2:
59:ba:c8:95:36:5e:5f:e4:27:12:d7:4e:27:98:5a:1d:5c:98:
30:af:54:2c:16:2d:4c:19:8c:6f:4c:b5:08:09:11:1a:9a:73:
59:25:7a:39:7e:e9:20:28:2a:90:c8:6f:ae:15:9f:e3:39:2d:
a8:44:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:21 2026 by rpki-client