Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/Uo4wvgdXfyF3e2k0pZS0H1UzGLw.roa
File: Uo4wvgdXfyF3e2k0pZS0H1UzGLw.roa (raw, json)
Hash identifier: MZrsYUO7qgY/xpSvPUXy1NiJNVe3XMBHtcUlpHocjuI=
Subject key identifier: 52:8E:30:BE:07:57:7F:21:77:7B:69:34:A5:94:B4:1F:55:33:18:BC
Certificate issuer: /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial: 019F4C7DD8DCE8AB257218377986BB0BFFC7
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/Uo4wvgdXfyF3e2k0pZS0H1UzGLw.roa
Signing time: Fri 10 Jul 2026 14:45:43 +0000
ROA not before: Fri 10 Jul 2026 14:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20510
IP address blocks: 85.8.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:7d:d8:dc:e8:ab:25:72:18:37:79:86:bb:0b:ff:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
Validity
Not Before: Jul 10 14:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=528e30be07577f21777b6934a594b41f553318bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:cc:ce:ff:a2:af:38:1c:33:35:6b:a9:ee:
e4:d8:5b:aa:27:f0:32:e1:8e:1b:ff:32:fc:ae:b9:
56:8a:bc:73:cd:c6:68:51:ad:05:3d:7d:b6:2a:81:
7f:7e:3f:9b:d7:02:db:bd:c7:6f:76:cd:e2:af:b4:
4d:97:86:df:a4:cf:36:fa:ff:56:4b:5e:4d:c7:cd:
74:10:f3:72:56:74:e8:1a:8f:f1:a0:4b:23:b8:7a:
de:ac:42:89:97:63:63:8d:60:f2:a0:c1:ce:71:b3:
e3:47:93:2f:25:d3:d2:1e:fb:5a:5a:80:fc:e4:f3:
0e:f1:c1:ad:58:d8:b6:de:43:99:83:8c:a1:be:04:
6f:35:85:3d:62:b7:c7:09:1b:66:f3:ab:19:e2:7b:
bb:66:0a:fd:ad:70:da:35:ea:e0:cf:17:43:b7:41:
aa:15:bd:d0:69:df:ef:00:57:25:00:56:04:4b:98:
ab:5b:d1:7c:ac:7d:03:e4:36:df:2a:55:4b:c8:f3:
b7:2c:72:d0:6a:b2:ef:db:4a:9e:55:65:76:20:fb:
5d:71:4e:e0:b7:f7:24:8e:16:ef:a7:de:7e:fb:92:
b3:fc:9b:67:6d:6d:94:26:4c:9b:46:78:ea:78:14:
08:c1:17:a3:7c:66:c7:8d:17:5d:38:0f:dd:6d:1e:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8E:30:BE:07:57:7F:21:77:7B:69:34:A5:94:B4:1F:55:33:18:BC
X509v3 Authority Key Identifier:
keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/Uo4wvgdXfyF3e2k0pZS0H1UzGLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9b:c1:e9:f1:57:5b:2b:92:32:b4:a5:c1:e0:11:20:9e:84:
bc:da:8d:17:27:b0:88:64:0a:7d:2e:f5:04:4b:c1:36:8c:45:
a3:b4:ca:38:ac:a8:18:52:6a:6b:27:7e:f0:64:fa:fd:67:9f:
de:4e:46:1a:35:15:59:1d:24:4e:d8:35:0a:e4:9e:4f:f3:1a:
fc:d4:0e:c8:29:c2:bd:7d:45:63:f4:aa:b9:1b:ad:58:79:66:
4d:fd:f7:6e:45:33:00:14:ed:9d:eb:c5:9e:9c:05:55:5d:0c:
ec:7c:fd:7b:c3:82:a6:e5:ff:0f:44:18:c8:cb:87:27:af:53:
3f:8c:df:e1:5f:d6:eb:10:9e:45:f0:0b:87:94:e5:03:ca:bb:
24:f2:3b:d9:b7:57:dc:3e:d4:31:15:62:c0:37:5a:62:cb:ce:
59:47:b0:b1:ee:ed:4c:5a:a5:8c:e2:fd:86:c5:46:ae:80:67:
b3:25:06:18:fd:b4:21:32:98:55:0c:58:34:f6:15:fe:5d:9b:
83:8f:4d:0c:65:6b:fb:99:e3:f2:11:31:20:24:12:3f:d4:00:
6d:1f:f5:d8:aa:6d:aa:3a:93:61:c5:cc:60:3c:3d:27:5f:9d:
f5:86:b2:aa:29:81:a6:9f:92:67:22:95:e2:49:96:04:5d:bc:
1e:56:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:41 2026 by rpki-client