Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Uh9Mecu5GzKnX2GsOL9ocTxpbag.roa
File: Uh9Mecu5GzKnX2GsOL9ocTxpbag.roa (raw, json)
Hash identifier: N6CmsLkL4zwf53tf37/9NUU6J5Uln5zUOdKxZDIhoXg=
Subject key identifier: 52:1F:4C:79:CB:B9:1B:32:A7:5F:61:AC:38:BF:68:71:3C:69:6D:A8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8F2E67EA7EC4B7DCD504131B2D34D616
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Uh9Mecu5GzKnX2GsOL9ocTxpbag.roa
Signing time: Thu 23 Jul 2026 13:33:30 +0000
ROA not before: Thu 23 Jul 2026 13:33:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 82.109.194.0/24 maxlen: 24
82.110.230.0/24 maxlen: 24
82.110.231.0/24 maxlen: 24
85.189.26.0/24 maxlen: 24
87.83.164.0/24 maxlen: 24
87.83.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:2e:67:ea:7e:c4:b7:dc:d5:04:13:1b:2d:34:d6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 13:33:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=521f4c79cbb91b32a75f61ac38bf68713c696da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:1b:d8:e9:27:c4:26:ed:ac:8a:b6:82:ab:
68:0b:95:bf:49:b7:ed:c6:4c:03:ba:8d:51:27:da:
c8:c1:df:ef:71:df:83:fa:a7:36:1c:ef:36:6c:b7:
49:ac:40:18:5a:f6:78:84:e4:9b:93:18:f9:b9:ab:
4d:38:26:7f:7b:e4:b7:b4:1f:0f:5a:77:5a:45:34:
32:16:8f:f8:e1:90:58:e2:c9:1e:a3:49:67:a1:37:
d0:6f:0d:48:fd:17:a2:7e:09:02:17:64:46:17:33:
f9:76:cd:13:a1:e8:48:91:a5:23:8a:04:78:c7:7b:
75:d4:e9:d5:02:81:5e:34:ad:ce:63:b1:97:f2:70:
03:30:9a:26:22:5c:39:87:d8:c8:70:e3:14:6f:ce:
88:57:21:13:71:f1:c6:92:c6:93:f2:91:92:96:07:
4e:1a:93:9d:02:ee:2c:63:17:e5:96:a4:51:8d:7e:
97:ff:74:fb:1b:dd:00:58:ab:19:70:72:68:d6:2f:
16:b7:2e:a4:97:e9:72:e5:bf:4b:bf:fe:16:ac:89:
f6:4a:69:fd:b1:96:36:3e:db:0b:91:ad:fa:02:56:
6b:96:b8:ff:e9:55:8f:a0:ae:ee:d4:15:d9:6b:b8:
9e:00:38:d7:96:b8:58:d8:8e:e5:32:be:1a:aa:11:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:4C:79:CB:B9:1B:32:A7:5F:61:AC:38:BF:68:71:3C:69:6D:A8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Uh9Mecu5GzKnX2GsOL9ocTxpbag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.194.0/24
82.110.230.0/23
85.189.26.0/24
87.83.164.0/24
87.83.193.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:79:37:91:d3:eb:60:d4:72:73:a3:03:87:d0:4c:d9:31:31:
53:7b:77:6d:25:b0:2a:08:98:15:35:da:d5:64:de:2c:c6:75:
98:74:2d:58:ae:ac:12:8e:a4:6e:48:82:c6:1c:fd:7f:7d:37:
f5:c8:e9:1d:ef:78:70:e1:ad:3c:2f:cd:eb:2e:e6:8d:ec:6e:
39:02:27:c0:8f:c4:78:42:43:2f:44:29:2a:93:c4:0c:a0:0d:
8b:38:68:bf:8f:91:c9:01:34:fd:b3:b4:c8:1a:f5:ff:e1:be:
da:33:55:8e:6f:e6:5f:95:98:d5:10:e8:1a:78:65:1f:35:ed:
b8:51:36:4f:18:06:81:a7:d1:8c:5d:28:c1:fc:60:d6:da:a3:
89:e5:20:d7:0a:50:b2:14:4d:93:c5:a5:04:3a:10:a7:7a:21:
b9:66:8c:0f:64:cf:f2:1f:df:60:83:56:5e:ef:d9:87:5a:e2:
fa:51:ae:f5:0e:29:1b:fb:32:a8:b7:20:25:04:77:44:b3:77:
b3:d8:80:97:ea:49:29:22:4b:da:bc:3c:7f:d5:21:ef:ca:89:
b8:55:2f:69:8d:dc:9b:c8:64:47:79:a3:55:99:47:43:83:d6:
9e:88:d5:6b:a8:38:4b:47:0b:1f:2c:83:9f:f9:b0:bb:e9:fa:
e4:02:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:16 2026 by rpki-client