Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/UgtMS63_CIHp4yrDJgi3ZLPBmnI.roa
File: UgtMS63_CIHp4yrDJgi3ZLPBmnI.roa (raw, json)
Hash identifier: WN89G26tYkg2OtwRMyqMK1Q84ryZ7bW/B8p2iEKccX8=
Subject key identifier: 52:0B:4C:4B:AD:FF:08:81:E9:E3:2A:C3:26:08:B7:64:B3:C1:9A:72
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368AAECC018606A43768C2E6AAE2DFA
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/UgtMS63_CIHp4yrDJgi3ZLPBmnI.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15589
IP address blocks: 62.94.0.0/16 maxlen: 24
81.92.32.0/20 maxlen: 24
83.211.0.0/16 maxlen: 24
194.153.192.0/20 maxlen: 24
194.153.208.0/22 maxlen: 24
212.90.0.0/19 maxlen: 24
212.110.0.0/19 maxlen: 24
213.136.128.0/18 maxlen: 24
213.183.128.0/19 maxlen: 24
213.198.128.0/18 maxlen: 24
217.15.208.0/20 maxlen: 24
2001:750::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:aa:ec:c0:18:60:6a:43:76:8c:2e:6a:ae:2d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=520b4c4badff0881e9e32ac32608b764b3c19a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:4f:d2:22:e3:8c:06:4d:aa:92:52:26:b5:
6f:3d:4e:4b:76:95:b6:51:87:29:90:3a:c7:6d:94:
f8:14:0d:d7:71:f6:87:7d:d0:92:03:61:dc:bb:33:
c3:5c:74:c5:1f:cb:72:9c:89:8b:31:ba:95:d2:d9:
14:fa:61:9b:9c:26:14:b2:23:30:02:8d:54:25:b7:
8c:a1:8b:8f:18:a5:e0:81:6e:ee:ff:38:41:0d:db:
16:f8:0b:31:6a:29:14:08:cf:21:15:39:5f:38:3a:
e7:6a:13:b5:46:f6:77:4c:f4:42:e4:2f:1f:c4:fc:
b3:69:a5:72:2f:a6:20:72:fb:2b:11:d0:98:2a:d4:
fd:2a:d7:3c:f7:ab:1b:50:3c:4c:80:19:7d:f5:80:
f6:31:74:95:a5:e0:d0:74:58:9b:46:6c:80:78:9c:
25:e8:e1:47:d1:5d:a5:a4:4a:96:e6:b8:28:05:e4:
68:19:3e:f1:34:48:9e:b9:40:d6:9f:d9:25:7b:4c:
ce:2b:f6:18:c7:a8:33:d7:a4:4e:9b:bf:29:2d:e5:
7e:33:e4:68:44:0a:85:d9:36:cd:77:0f:4c:c8:9a:
2a:ff:fc:e9:b4:a9:43:3d:fb:08:cd:cb:80:6e:23:
66:62:8a:c4:68:04:26:35:d1:2c:a3:46:c3:03:49:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:4C:4B:AD:FF:08:81:E9:E3:2A:C3:26:08:B7:64:B3:C1:9A:72
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/UgtMS63_CIHp4yrDJgi3ZLPBmnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.94.0.0/16
81.92.32.0/20
83.211.0.0/16
194.153.192.0-194.153.211.255
212.90.0.0/19
212.110.0.0/19
213.136.128.0/18
213.183.128.0/19
213.198.128.0/18
217.15.208.0/20
IPv6:
2001:750::/29
Signature Algorithm: sha256WithRSAEncryption
66:b3:59:85:9a:b6:14:de:10:51:09:6e:4b:a0:7b:72:58:a4:
31:4d:fb:64:c9:e2:fa:b2:bd:4f:ea:d3:b8:dc:66:21:d0:a7:
d8:ee:fa:3d:25:cb:9b:82:f1:ec:33:ee:48:13:68:39:7b:23:
cf:26:73:69:7a:7a:90:66:43:37:d8:fb:36:f7:9c:af:f7:2b:
2b:14:5c:74:1d:f9:5d:70:aa:4c:1b:c3:a3:81:88:f9:f0:71:
96:54:b2:1c:bd:2c:05:61:dc:6f:af:51:d9:ab:df:b1:86:06:
24:51:87:73:de:3d:61:08:ba:4b:fc:16:b3:a4:80:ce:cb:a6:
83:70:76:99:f1:5d:02:cb:0f:f5:c1:d3:a2:4a:c2:d9:93:65:
6d:f0:d5:f5:81:4a:a0:27:64:b9:7d:bb:14:9a:7b:19:30:d2:
d6:97:c2:37:7d:62:9c:4b:a5:d5:aa:28:2e:23:ab:a1:e1:b9:
4d:9f:9e:f5:0e:07:96:1d:67:35:bb:96:e4:19:d0:0f:24:65:
4b:14:6c:77:1d:b8:6c:1b:f8:06:65:a0:6c:3b:77:ff:ac:58:
d2:c5:68:21:09:ae:cc:26:51:0b:f2:f1:c4:86:15:6d:98:b9:
96:da:bf:1f:ba:3b:96:82:e6:25:4d:0e:b4:76:ea:f2:22:e8:
f1:7a:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:31 2026 by rpki-client