Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UKGUxP2ZogKFVEfvDLlWyaOWDFE.roa
File: UKGUxP2ZogKFVEfvDLlWyaOWDFE.roa (raw, json)
Hash identifier: i5UtAzaNnbY7mIwAYem7+tz5MNj/ywW0VJSco5zq0TQ=
Subject key identifier: 50:A1:94:C4:FD:99:A2:02:85:54:47:EF:0C:B9:56:C9:A3:96:0C:51
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D21A7926570BD551C16C16865F47037F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UKGUxP2ZogKFVEfvDLlWyaOWDFE.roa
Signing time: Thu 24 Sep 2026 06:29:05 +0000
ROA not before: Thu 24 Sep 2026 06:29:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 82.108.127.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.83.65.0/24 maxlen: 24
195.40.158.0/24 maxlen: 24
195.72.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:1a:79:26:57:0b:d5:51:c1:6c:16:86:5f:47:03:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 06:29:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50a194c4fd99a202855447ef0cb956c9a3960c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:71:3e:0b:11:b1:e2:f5:f4:5d:39:7e:63:74:
83:dc:39:b5:af:99:7d:c2:90:4e:80:eb:ef:85:45:
db:d1:68:6f:52:e3:5e:8a:49:b6:fa:e7:a5:b5:fd:
a7:df:11:19:c0:04:b5:12:d0:a8:01:f5:51:e8:41:
01:bf:68:a9:df:47:64:ed:d4:b0:77:3b:c9:c9:6a:
0c:e1:de:46:52:be:62:2f:0c:3d:58:54:94:c8:54:
3e:4f:97:8d:2b:c6:51:07:bd:10:fa:c9:ef:28:07:
a6:19:a7:82:f0:2b:33:61:31:6d:6d:3a:2d:31:cd:
36:68:fe:b2:2b:bf:a2:b2:9b:d4:60:03:e3:fd:08:
e5:9b:2d:0d:c9:5d:2e:2a:e5:3a:a6:7d:1f:25:57:
cb:65:85:62:41:c7:c4:35:5f:a7:b8:68:f3:2c:a0:
eb:dc:0e:e2:1e:98:10:25:34:36:6b:1e:78:66:03:
a6:8f:e2:5e:42:5e:76:f9:5c:67:57:24:0b:be:2c:
99:2b:eb:ae:3b:1b:02:1c:4a:36:4c:46:30:15:44:
94:3b:c4:6d:2d:90:ef:de:f6:90:01:5e:6e:90:b9:
a3:2c:16:57:ce:f9:bc:1d:32:48:df:fe:33:0e:0f:
41:72:81:24:17:e9:90:86:1a:be:d1:f7:a1:6f:1e:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A1:94:C4:FD:99:A2:02:85:54:47:EF:0C:B9:56:C9:A3:96:0C:51
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UKGUxP2ZogKFVEfvDLlWyaOWDFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.127.0/24
85.189.36.0/24
87.83.65.0/24
195.40.158.0/24
195.72.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:73:77:29:8c:b6:ed:c0:b1:bb:cc:c7:db:2b:01:dd:4e:45:
6d:5e:cd:a4:f3:2f:1c:1e:e7:6c:ab:37:d9:dd:6d:7c:b3:d6:
43:93:91:57:76:25:44:46:cb:c1:d5:5b:cc:b5:ee:20:53:0c:
59:06:5c:59:db:16:51:e2:07:cc:43:4f:5d:f5:4a:8f:1b:a3:
4d:7a:94:5a:0f:42:b8:37:27:51:91:48:14:79:a9:2f:74:2e:
86:10:b7:77:0f:7e:3d:84:a1:0f:f0:9d:b9:5d:49:0f:90:12:
ff:25:d8:f9:cb:dc:6d:b7:78:1d:e2:16:f6:31:31:11:f9:6b:
26:23:90:2b:59:b5:f7:07:97:73:8d:96:46:81:ff:bb:ef:55:
31:f9:6e:d7:a9:08:df:df:a0:f3:7d:66:2b:99:63:7c:9f:f3:
f7:68:a5:1b:79:5f:3f:21:6b:8d:27:e3:9d:15:60:71:a0:07:
4b:96:d3:a9:88:9d:93:26:76:b2:31:5b:d9:78:1a:6b:02:b5:
6c:2a:75:f1:d0:46:1a:b5:10:74:90:57:22:0f:a7:9b:85:5d:
f9:81:64:da:50:6c:53:db:3d:45:a1:37:97:4c:46:eb:93:07:
c1:67:20:86:a5:58:ab:6a:97:13:bc:f2:01:81:23:91:c7:a4:
a3:ea:e8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:04:50 2026 by rpki-client