Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/uBQJIWL215Slh10pYtC2hfOmW6E.roa
File: uBQJIWL215Slh10pYtC2hfOmW6E.roa (raw, json)
Hash identifier: Fz8wa9yReSoXHDz0VQB6kGJWo8LpEP+Z66cA5kA041o=
Subject key identifier: B8:14:09:21:62:F6:D7:94:A5:87:5D:29:62:D0:B6:85:F3:A6:5B:A1
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019F913E6914FDA760087ECBA59FF9DDFC23
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/uBQJIWL215Slh10pYtC2hfOmW6E.roa
Signing time: Thu 23 Jul 2026 23:10:14 +0000
ROA not before: Thu 23 Jul 2026 23:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42861
IP address blocks: 185.157.120.0/24 maxlen: 24
195.10.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:3e:69:14:fd:a7:60:08:7e:cb:a5:9f:f9:dd:fc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jul 23 23:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b814092162f6d794a5875d2962d0b685f3a65ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:f1:de:2f:53:cd:77:83:bf:64:8b:db:d7:
28:46:c1:5b:b1:9a:09:ca:ce:91:58:63:de:9f:a3:
3d:7d:df:10:c9:f2:a6:8a:8f:8d:49:2a:93:9d:93:
5a:64:d2:6c:40:e0:cb:1b:12:e4:0e:97:bc:ae:ac:
f3:67:50:b7:a3:06:d1:e1:e3:a9:7c:94:41:0d:73:
32:ef:b3:ec:cd:f5:bc:67:3e:5c:d2:76:22:bd:8e:
8d:dc:37:89:2b:a7:32:72:23:b1:c2:b0:06:a6:c3:
9d:95:73:ae:53:a9:5a:54:9a:05:20:bd:47:1d:93:
c1:d9:4d:ae:d8:00:2e:55:a4:d1:79:93:78:02:33:
5f:26:a3:3b:94:0f:70:da:84:9c:fb:93:9b:f7:bc:
be:01:53:ed:e7:28:81:58:2c:30:43:37:9b:fe:81:
1e:c4:a9:78:19:7c:db:2e:fb:00:1d:4f:17:64:a4:
bb:ab:55:20:85:85:f8:21:1b:88:5c:f2:9b:0a:a8:
17:4f:39:90:7a:19:1e:fa:44:41:cd:6c:f1:b0:c2:
1a:fb:9b:f3:1d:52:7f:12:22:04:64:b9:40:5b:31:
1a:48:14:9d:c6:3c:6e:55:a7:9e:0c:5c:40:e8:0e:
7b:53:aa:ce:f7:3c:74:81:27:6b:85:00:e5:c8:3a:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:14:09:21:62:F6:D7:94:A5:87:5D:29:62:D0:B6:85:F3:A6:5B:A1
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/uBQJIWL215Slh10pYtC2hfOmW6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.120.0/24
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
08:33:47:6f:7d:68:db:c5:c0:57:c6:b4:e7:9f:65:c9:2b:2b:
7a:7b:06:03:11:9a:ec:39:f7:d6:cc:91:d0:52:64:6f:17:56:
d8:28:7b:7b:e2:a3:a0:60:5c:99:e0:a4:c3:de:2c:e3:7b:5f:
ba:d7:8a:8d:43:c4:c4:56:8c:75:be:1f:b6:b3:51:54:4b:4c:
0a:75:84:c5:5a:be:43:8e:5f:89:81:25:25:9b:77:63:45:af:
99:07:ad:6c:85:26:6c:49:b0:d7:34:e2:3e:6f:ba:35:68:9c:
a3:39:28:6d:39:9f:1a:24:a8:ae:5c:04:2b:05:83:c8:c8:15:
d2:56:0e:96:6e:b1:eb:bd:4f:d5:66:80:ee:6b:2f:90:ee:89:
d9:36:ea:e2:34:ea:33:18:d9:79:a2:12:85:be:f9:cc:33:92:
80:38:6f:1c:a0:28:67:ba:d7:c5:b1:ed:41:da:92:2c:13:f9:
d4:c2:b0:3b:c8:2e:ce:cf:63:4b:b9:1f:2b:eb:ae:32:95:8d:
5b:f5:97:c6:01:93:40:9e:24:50:9d:3e:0e:c1:2b:d9:69:06:
e1:72:a3:53:db:87:9f:23:79:ea:df:7a:1e:43:4c:ea:00:d0:
ab:0e:fc:d7:a3:a7:25:24:06:79:06:3f:a7:bf:2e:83:32:1b:
04:8f:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:13 2026 by rpki-client