Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/uTt1-O7JdcMd5DNwFU1zr-UOPQE.roa
File: uTt1-O7JdcMd5DNwFU1zr-UOPQE.roa (raw, json)
Hash identifier: Zjr4fujCXBRskWeIesCak3mrz6dTWdtu0/f99U78B+0=
Subject key identifier: B9:3B:75:F8:EE:C9:75:C3:1D:E4:33:70:15:4D:73:AF:E5:0E:3D:01
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 019F1D728A0BC9B4FA21709073A369C4CD06
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/uTt1-O7JdcMd5DNwFU1zr-UOPQE.roa
Signing time: Wed 01 Jul 2026 11:31:13 +0000
ROA not before: Wed 01 Jul 2026 11:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9085
IP address blocks: 185.53.124.0/22 maxlen: 22
185.53.125.0/24 maxlen: 24
212.75.96.0/19 maxlen: 19
212.180.128.0/17 maxlen: 17
2001:4c30::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:72:8a:0b:c9:b4:fa:21:70:90:73:a3:69:c4:cd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Jul 1 11:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b93b75f8eec975c31de43370154d73afe50e3d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:35:fc:64:ef:6b:cd:b5:d9:ed:b1:d0:3b:
52:07:20:6a:39:88:6d:e7:8d:77:36:2e:16:02:9f:
37:22:a4:e2:d0:30:47:5a:f2:1d:71:1b:2d:7c:6c:
95:99:ba:56:da:3c:06:ed:00:d4:96:e8:da:94:b8:
09:ac:a0:eb:29:13:d5:ef:20:35:17:94:15:aa:0b:
f6:dd:58:ec:2b:c2:da:ff:7c:ce:9c:bb:21:b1:0a:
eb:1f:e0:a2:0c:ec:51:31:f3:d8:d3:d0:06:a2:2a:
a1:29:a8:f0:0c:4f:0f:23:be:a0:0f:e8:72:f3:ac:
51:0f:3a:39:65:ea:a7:1b:5f:18:af:08:e9:bc:be:
72:6c:71:bf:70:1e:5c:56:a5:62:d9:fd:9a:07:ce:
cf:cc:09:d8:4f:0b:05:90:e6:d1:c5:76:3f:96:59:
47:4c:54:f0:b6:92:4c:92:f7:44:b2:6a:e0:99:cd:
a7:5d:25:a8:11:58:1e:53:32:c9:33:8c:a7:ee:87:
0b:21:4d:98:13:ca:3e:92:04:33:73:44:00:73:a1:
11:29:05:21:f4:8e:ae:fd:8e:63:96:56:4c:db:96:
b5:b9:21:5e:57:ea:7b:69:ad:fb:d1:7e:02:61:e1:
eb:69:56:e1:73:7b:d3:35:e9:79:7e:8d:22:63:a8:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:75:F8:EE:C9:75:C3:1D:E4:33:70:15:4D:73:AF:E5:0E:3D:01
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/uTt1-O7JdcMd5DNwFU1zr-UOPQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.124.0/22
212.75.96.0/19
212.180.128.0/17
IPv6:
2001:4c30::/32
Signature Algorithm: sha256WithRSAEncryption
59:3b:0a:ea:d1:68:22:23:ec:be:51:c1:5e:fd:cb:bd:b9:ad:
85:52:53:f5:b9:ec:90:4f:8a:80:58:29:f5:53:11:10:f5:e4:
0a:2e:a7:73:ff:36:e2:48:fa:02:ac:a7:3e:00:fa:ae:ee:da:
18:9e:12:71:d4:94:fc:a4:6d:09:15:6b:e6:07:cb:4f:99:12:
47:aa:3f:55:ba:3a:2e:14:70:e8:c4:e5:fb:4c:7c:31:72:36:
2e:02:bc:45:61:1c:24:08:3b:d1:c2:cc:84:b0:80:e0:33:77:
4a:a6:a8:f0:64:a0:b0:d8:51:dd:f0:5d:bd:04:ab:82:18:c4:
17:b6:a3:76:2d:55:0c:f4:70:1c:bb:94:e2:f5:15:0e:2e:40:
c8:89:f1:56:70:d1:ce:d9:f1:01:55:3e:d6:43:80:7c:17:68:
9a:6f:c9:86:70:a4:d6:14:2b:28:64:94:a7:c7:fb:5b:bf:4b:
d3:71:77:1c:ff:2a:2a:87:c7:35:1a:56:14:f2:27:f5:c2:97:
ff:e2:3f:fb:0c:c8:48:f6:41:61:0b:b8:10:40:85:ef:15:42:
e8:66:ac:d1:7a:4d:c6:24:68:6a:ac:f4:61:35:94:14:ec:48:
4d:46:a5:b1:46:a9:0a:6f:6e:f6:a3:32:0a:e3:01:8f:a3:a7:
84:9e:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:12 2026 by rpki-client