Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/UJ07a1M-XC-XQKmlBcwTPux-TnY.roa
File: UJ07a1M-XC-XQKmlBcwTPux-TnY.roa (raw, json)
Hash identifier: bOg6Q+myJu9GET6HuRgSyDwdCM8RKO+iu8CQGrW5M98=
Subject key identifier: 50:9D:3B:6B:53:3E:5C:2F:97:40:A9:A5:05:CC:13:3E:EC:7E:4E:76
Certificate issuer: /CN=e755967872876ad238e76c99b6d39c86e57128fd
Certificate serial: 019CBE046CE86D64115775171B09E46B6174
Authority key identifier: E7:55:96:78:72:87:6A:D2:38:E7:6C:99:B6:D3:9C:86:E5:71:28:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51WWeHKHatI452yZttOchuVxKP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/UJ07a1M-XC-XQKmlBcwTPux-TnY.roa
Signing time: Thu 05 Mar 2026 12:41:26 +0000
ROA not before: Thu 05 Mar 2026 12:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206142
IP address blocks: 185.195.80.0/24 maxlen: 24
185.195.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/51WWeHKHatI452yZttOchuVxKP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/51WWeHKHatI452yZttOchuVxKP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/51WWeHKHatI452yZttOchuVxKP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:04:6c:e8:6d:64:11:57:75:17:1b:09:e4:6b:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e755967872876ad238e76c99b6d39c86e57128fd
Validity
Not Before: Mar 5 12:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=509d3b6b533e5c2f9740a9a505cc133eec7e4e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:67:f2:41:64:99:7a:05:b3:4b:27:ae:79:
02:56:cd:3c:7e:5b:30:a2:ff:61:7a:b2:be:7c:df:
e2:ee:2e:d0:0c:f3:dd:af:7c:48:ad:7c:08:68:94:
24:01:35:e6:c7:97:ce:e5:1e:03:06:aa:c0:0c:f0:
0b:64:34:4c:84:fd:cb:71:87:dc:7e:34:15:d1:ae:
cc:34:a2:5c:fb:2e:2e:6d:ca:ff:53:be:6c:17:d9:
cd:5a:af:81:1d:0a:39:0e:06:be:6f:00:28:eb:3c:
87:9b:5e:f0:ac:82:3f:da:9c:d2:12:38:e3:c5:65:
e4:14:74:dc:0f:34:09:97:09:78:4c:1d:5b:38:6b:
a3:a3:d0:28:0e:13:69:77:00:5f:90:da:b8:bd:a7:
9f:b3:64:52:fe:54:a8:a6:f1:ad:52:b0:80:fc:53:
c2:bf:08:8a:41:9d:f4:d7:3a:02:29:7c:74:cb:6e:
09:da:82:1d:54:44:a7:fd:d9:e8:04:c8:0b:a4:63:
ba:4e:ad:58:91:36:3e:ff:d4:1e:48:43:15:f4:4d:
6e:47:65:aa:91:5f:8e:b9:6a:9a:0f:e6:01:80:e1:
40:02:bc:4a:ec:cf:b0:97:5b:83:c2:52:2b:fa:16:
c5:9d:eb:29:8e:3d:3b:bc:4e:13:6d:85:f7:dc:6c:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9D:3B:6B:53:3E:5C:2F:97:40:A9:A5:05:CC:13:3E:EC:7E:4E:76
X509v3 Authority Key Identifier:
keyid:E7:55:96:78:72:87:6A:D2:38:E7:6C:99:B6:D3:9C:86:E5:71:28:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51WWeHKHatI452yZttOchuVxKP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/UJ07a1M-XC-XQKmlBcwTPux-TnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2c36d9-06a0-4163-88e0-589566604c9b/1/51WWeHKHatI452yZttOchuVxKP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.80.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:14:aa:8a:a9:12:2f:ad:56:75:31:70:19:fb:d8:43:6c:78:
0b:10:1f:93:5d:93:c3:67:09:f4:e9:2e:0c:e7:75:12:47:d4:
b9:c1:57:58:ff:6b:77:e5:30:fc:d1:27:51:3c:95:03:39:9e:
39:4b:a4:fd:94:01:df:58:fa:eb:45:2c:58:a9:e3:c6:26:89:
4a:7e:53:7b:36:16:1f:84:8a:cf:de:98:d1:13:a0:22:ad:1d:
37:86:36:31:55:85:00:72:32:ae:47:20:7f:c8:90:26:e1:cb:
fe:ef:18:bc:20:81:2d:b8:19:82:ee:52:ca:d4:65:57:f3:2a:
28:6e:20:6f:d6:35:97:ed:4a:75:fb:d0:39:84:f5:89:3c:8e:
49:00:68:75:38:61:5e:40:07:77:e9:71:0c:3c:ad:83:51:80:
75:b1:c0:64:66:76:17:6b:b2:2c:a9:c8:8a:94:97:ba:be:94:
49:ca:e6:fa:44:f4:3d:77:9c:82:bb:09:a4:33:df:58:7c:63:
d9:d8:5d:f4:fe:07:4d:f8:e9:30:08:0c:6f:1c:8d:ff:e7:2b:
33:41:57:c1:7d:1c:a8:e6:e2:d9:2e:38:15:1a:ba:4f:ea:25:
be:24:48:aa:5f:51:17:ca:f2:d2:26:97:32:c8:8f:bc:c5:b9:
8d:4c:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:52 2026 by rpki-client