Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/UsGhEaTVOTKiKiirGjznuF2Gaak.roa
File: UsGhEaTVOTKiKiirGjznuF2Gaak.roa (raw, json)
Hash identifier: F1w1woKo1BbT5Id/y5MMOZaDCzO3XoS91p9xrahgbXo=
Subject key identifier: 52:C1:A1:11:A4:D5:39:32:A2:2A:28:AB:1A:3C:E7:B8:5D:86:69:A9
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019F5A7FF74D997C82E613CF4C5BC50535DC
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/UsGhEaTVOTKiKiirGjznuF2Gaak.roa
Signing time: Mon 13 Jul 2026 08:02:43 +0000
ROA not before: Mon 13 Jul 2026 08:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42216
IP address blocks: 185.129.18.0/24 maxlen: 24
185.129.19.0/24 maxlen: 24
185.165.76.0/24 maxlen: 24
194.99.74.0/24 maxlen: 24
2a14:e180:1::/48 maxlen: 48
2a14:e180:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:7f:f7:4d:99:7c:82:e6:13:cf:4c:5b:c5:05:35:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Jul 13 08:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52c1a111a4d53932a22a28ab1a3ce7b85d8669a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:f8:f1:9f:37:04:e8:b5:83:47:8d:24:b8:
e6:47:36:4f:3b:ff:ae:41:38:95:6f:46:71:c0:fc:
6f:f8:b4:1f:33:99:46:06:84:c3:bb:53:f8:91:4d:
3e:b5:2f:ba:aa:68:5e:ee:cd:c1:1c:cf:51:97:fa:
ea:41:ca:4e:3d:31:51:6e:b6:85:11:e8:44:17:52:
c4:79:14:c6:d1:3c:87:1c:a8:ae:1c:7d:0d:9d:2f:
c0:5a:4e:60:6a:4a:d7:d8:ce:96:c5:60:da:ea:3b:
e2:ce:1e:29:1e:ee:a6:f1:1c:30:e5:f3:a2:dd:2c:
ad:a7:59:84:2c:5c:c1:0a:1c:42:6f:37:85:c1:2c:
43:a1:8d:32:d1:0e:0e:2d:1f:94:2e:81:ae:d3:4b:
cc:39:cc:e4:1a:e3:7a:d2:d9:f5:bb:31:15:5c:78:
8a:b5:f6:80:e6:fd:c8:cc:61:a0:e2:b2:96:d3:84:
22:0c:8f:3c:00:5f:61:bf:85:64:00:fa:89:98:2c:
fe:db:e3:92:57:fc:a9:23:8f:6e:66:1d:62:4d:26:
77:b2:18:19:31:86:81:5c:ae:79:9d:0f:13:70:04:
8b:bd:7b:8e:40:f4:61:e7:5d:05:ad:28:4c:0a:cf:
4d:0d:14:2f:ca:43:2f:ae:ea:3a:b2:4b:96:7f:ce:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:A1:11:A4:D5:39:32:A2:2A:28:AB:1A:3C:E7:B8:5D:86:69:A9
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/UsGhEaTVOTKiKiirGjznuF2Gaak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.18.0/23
185.165.76.0/24
194.99.74.0/24
IPv6:
2a14:e180:1::/48
2a14:e180:4::/48
Signature Algorithm: sha256WithRSAEncryption
9b:e3:c7:4c:06:8b:b7:8d:44:ea:be:73:15:1a:93:19:3d:9b:
0f:24:42:65:01:3d:19:32:66:5a:11:6d:d9:f5:4f:6b:8c:72:
1b:93:6c:90:51:b8:d7:18:0e:83:92:78:ce:0e:06:45:40:7f:
c6:00:da:ec:ed:82:9b:e1:ef:8d:19:99:d0:3a:0d:85:ec:e2:
1d:70:93:23:3d:76:5c:e6:d3:6e:8e:3d:3c:e6:8e:95:6e:08:
34:2a:17:3f:a2:c7:b0:6a:5f:eb:42:5f:73:dc:03:9d:2d:de:
3f:77:f1:a1:45:07:f6:68:90:ea:94:cb:9a:5e:62:92:c4:85:
14:a6:cc:f6:3f:76:ae:56:d5:aa:fe:af:f3:1f:30:6a:70:41:
38:6f:30:e2:50:8b:fa:60:b9:d3:7f:a9:79:92:a8:74:0d:d6:
0b:bf:35:5c:86:b4:6b:34:6f:46:97:03:5d:c7:ba:b5:01:e9:
9f:57:b2:b0:c9:af:58:dd:df:46:ee:e3:13:bf:e6:82:f6:1d:
78:23:55:34:7b:55:ba:1d:67:38:16:10:28:4f:ce:2f:59:56:
b4:da:1e:4e:bc:3e:85:2d:9e:86:d1:2d:d7:03:08:37:6b:2e:
a9:47:8f:b8:55:e9:6c:de:bf:1d:77:3d:a0:9a:4d:16:d5:77:
31:a1:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:44 2026 by rpki-client