Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uQSSmmn85Hxc5bbMm-XBxhduGVs.roa
File: uQSSmmn85Hxc5bbMm-XBxhduGVs.roa (raw, json)
Hash identifier: V1wR7Nrd849/O5bAQR/uadqcDNTEkCpHAqwGtIsltrc=
Subject key identifier: B9:04:92:9A:69:FC:E4:7C:5C:E5:B6:CC:9B:E5:C1:C6:17:6E:19:5B
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F752173AAC81419BA4CE50132F3C63FF7
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uQSSmmn85Hxc5bbMm-XBxhduGVs.roa
Signing time: Sat 18 Jul 2026 12:09:14 +0000
ROA not before: Sat 18 Jul 2026 12:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 93.120.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:21:73:aa:c8:14:19:ba:4c:e5:01:32:f3:c6:3f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 18 12:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b904929a69fce47c5ce5b6cc9be5c1c6176e195b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:fa:d9:b2:c6:58:a8:62:b6:22:34:96:b8:
74:ed:28:47:d4:ef:a0:a2:55:81:f3:11:49:07:df:
d3:6f:d2:9b:c9:a8:f9:09:a4:82:bd:65:7f:d5:06:
59:c3:69:f0:b0:e6:34:0a:3e:8c:13:5c:9c:b1:73:
67:27:79:f0:62:e3:09:85:68:23:28:b4:d9:ac:7e:
3c:9a:b5:5b:ee:0a:20:e5:f1:a6:0a:13:51:e8:65:
66:43:e3:e6:ea:3b:1d:70:c2:e5:84:ac:55:da:a0:
9e:41:f2:ee:30:6c:a9:a5:a1:6d:a5:26:2a:48:cf:
b9:79:54:e3:25:3f:71:d8:27:76:05:57:65:38:03:
ab:18:6e:ca:74:e0:ba:7b:56:a9:c8:dd:f6:ce:31:
28:73:65:b6:54:77:3f:bb:1b:0f:15:51:e7:72:82:
b7:42:e5:7a:e7:93:1c:5f:fc:65:73:b8:b9:1a:58:
5b:c4:f9:01:a6:2b:5f:3a:c6:e1:2d:e7:93:67:12:
26:d5:f4:02:41:ea:67:30:f1:60:84:1c:1e:26:15:
36:53:8e:72:9f:b1:ae:86:da:44:a0:df:08:68:a5:
3a:5e:1a:44:7c:d9:18:bf:94:c1:73:d4:73:e5:c4:
cd:ac:ac:b5:cf:1a:7c:45:65:fc:4d:69:e4:21:5d:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:04:92:9A:69:FC:E4:7C:5C:E5:B6:CC:9B:E5:C1:C6:17:6E:19:5B
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uQSSmmn85Hxc5bbMm-XBxhduGVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.39.0/24
Signature Algorithm: sha256WithRSAEncryption
80:52:ed:d0:c3:93:07:d3:0b:28:0d:2e:b3:66:3e:65:b6:9c:
56:da:c2:3f:63:09:40:11:ac:e3:ff:7d:7a:2e:c3:e4:47:3a:
a4:49:6f:dd:d8:dc:ad:89:f2:49:40:19:1c:46:51:0c:d3:49:
9e:ba:88:ff:d5:7c:e9:27:02:57:b2:10:00:e9:34:13:69:49:
4f:00:44:5b:f2:9e:4b:b4:7e:9d:5b:8b:b9:e1:43:5b:4a:40:
bf:95:43:b4:c0:99:d2:25:fb:21:a1:32:1c:71:8c:f2:2b:e9:
cf:3d:9b:4f:1c:26:62:97:9d:5b:e8:63:c5:4a:a0:85:1b:b4:
3f:95:1a:34:6d:92:29:b2:85:ad:c5:0e:51:fb:47:8c:d2:3a:
97:75:46:0d:40:79:b5:87:99:b4:dd:22:db:a8:d0:87:9d:f7:
ec:96:b8:68:25:bc:7a:37:2b:77:76:71:c7:c4:7b:0e:f1:a8:
33:fb:bf:a7:21:a8:c9:5a:43:5f:fe:53:d7:55:46:da:46:59:
d1:78:bd:5c:e7:a2:98:c5:4c:05:82:5e:3d:a3:55:8c:21:5c:
0b:fc:49:3d:e7:c4:d5:ff:7a:a6:54:ed:52:34:21:f8:be:28:
e7:8e:cb:f1:26:de:b7:3a:9b:a8:be:ac:83:a5:7b:45:24:5d:
5b:a6:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:07 2026 by rpki-client