Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a9c7ce-c1af-47c3-a663-70af17f50f84/1/UbWJRql-R54X8xx-176Iya-XgQs.roa
File: UbWJRql-R54X8xx-176Iya-XgQs.roa (raw, json)
Hash identifier: vedqwYp6IOK2or7wgHOmLYC8cldHEp46HlAc85ZUx+c=
Subject key identifier: 51:B5:89:46:A9:7E:47:9E:17:F3:1C:7E:D7:BE:88:C9:AF:97:81:0B
Certificate issuer: /CN=077fe5ffd5ee45846c1e3caa92c637e99e5758fe
Certificate serial: 019F4B5277D3C4C4B8B9716236502FAEAF6B
Authority key identifier: 07:7F:E5:FF:D5:EE:45:84:6C:1E:3C:AA:92:C6:37:E9:9E:57:58:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3_l_9XuRYRsHjyqksY36Z5XWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a9c7ce-c1af-47c3-a663-70af17f50f84/1/UbWJRql-R54X8xx-176Iya-XgQs.roa
Signing time: Fri 10 Jul 2026 09:18:43 +0000
ROA not before: Fri 10 Jul 2026 09:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197322
IP address blocks: 194.76.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a9c7ce-c1af-47c3-a663-70af17f50f84/1/B3_l_9XuRYRsHjyqksY36Z5XWP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a9c7ce-c1af-47c3-a663-70af17f50f84/1/B3_l_9XuRYRsHjyqksY36Z5XWP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3_l_9XuRYRsHjyqksY36Z5XWP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:52:77:d3:c4:c4:b8:b9:71:62:36:50:2f:ae:af:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077fe5ffd5ee45846c1e3caa92c637e99e5758fe
Validity
Not Before: Jul 10 09:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51b58946a97e479e17f31c7ed7be88c9af97810b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:13:99:4d:91:cc:8e:b7:cc:bb:d2:83:6d:
20:04:db:3b:9c:28:1d:ff:13:1d:09:79:76:0e:2f:
a9:d1:ef:99:1b:9d:f4:5c:4e:89:92:33:cc:93:d2:
95:ad:c2:b4:6f:f6:4e:5d:db:26:37:32:b6:b5:a1:
a3:39:05:71:77:f3:01:2a:91:13:f2:bd:11:50:3f:
d2:8c:59:ef:8f:a9:c8:ba:8d:f9:26:e6:5b:69:7d:
e7:2d:24:eb:08:bd:f1:0a:8e:e5:04:cd:c6:81:7f:
f6:28:0f:9c:90:58:fe:1e:57:66:b9:18:7b:86:e1:
36:85:42:db:16:97:a1:3d:1a:ff:c4:fa:39:e5:93:
7f:53:5f:9e:bd:38:10:bf:f3:93:e7:6c:61:c8:bc:
ce:7e:e2:ff:fd:e1:a9:5f:f5:6f:8b:a9:1f:f8:36:
9e:5c:7a:9b:b0:3d:7a:3f:1a:96:c7:4b:12:14:77:
ec:3a:43:22:12:7d:d2:c2:3d:f3:9b:7e:50:db:6a:
af:07:10:f4:33:e1:8f:f8:14:dd:3e:3a:dd:98:52:
19:72:b7:ec:8d:e2:f6:f7:26:37:aa:6f:24:58:43:
df:b2:1a:84:0e:7d:55:ca:8d:0f:35:e2:99:87:50:
68:55:08:4d:01:0c:f2:68:ef:61:31:19:5d:3a:bc:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:89:46:A9:7E:47:9E:17:F3:1C:7E:D7:BE:88:C9:AF:97:81:0B
X509v3 Authority Key Identifier:
keyid:07:7F:E5:FF:D5:EE:45:84:6C:1E:3C:AA:92:C6:37:E9:9E:57:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3_l_9XuRYRsHjyqksY36Z5XWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a9c7ce-c1af-47c3-a663-70af17f50f84/1/UbWJRql-R54X8xx-176Iya-XgQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a9c7ce-c1af-47c3-a663-70af17f50f84/1/B3_l_9XuRYRsHjyqksY36Z5XWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.187.0/24
Signature Algorithm: sha256WithRSAEncryption
16:be:da:95:62:27:74:02:bc:c5:88:c6:ce:3f:a6:35:23:c1:
48:8e:c6:34:2c:a4:16:86:e1:29:93:18:48:c3:3b:e6:c5:36:
5c:59:a0:e6:e7:33:f2:5a:95:d2:d6:2b:57:bc:53:59:11:1b:
0e:69:f1:42:73:bc:d2:8a:f8:97:5c:6a:5e:9a:b9:33:7e:25:
3f:cd:66:d9:f5:bb:a6:76:3f:2c:b3:3e:6b:00:55:e7:f7:cb:
76:cb:9f:2a:1f:9b:b1:75:76:47:65:ea:d4:b7:e3:29:03:f5:
15:28:91:c9:8b:0b:63:34:ae:25:5f:9c:87:f0:8a:ac:84:bc:
73:5b:23:da:69:b4:06:b9:74:4e:09:92:ce:ed:a8:2d:4b:e7:
5a:5d:44:c5:2e:2b:23:b1:82:62:2f:fb:5e:6a:6c:9b:a0:37:
c0:49:ac:e2:18:81:48:fc:19:a4:3a:71:f8:b2:d2:94:6b:59:
06:80:13:53:88:44:aa:bf:5c:5b:32:57:a9:f3:6a:41:af:a2:
72:a0:bc:d0:f5:55:96:bb:ef:39:85:09:93:55:ec:30:75:42:
04:f4:c7:eb:4d:1a:a4:cd:de:87:61:01:48:b3:f9:55:0f:08:
3e:e5:ed:09:3b:f2:4f:ae:e8:5d:a4:8e:1b:a1:6a:f1:07:7e:
78:80:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:06 2026 by rpki-client