Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/nUkgQUNMRu2yt34CpAmuZ7CRd3U.roa
File: nUkgQUNMRu2yt34CpAmuZ7CRd3U.roa (raw, json)
Hash identifier: oYaAcBrnNv8vR9XJmeJGa+sR9kYdUVsLd+oHXCrr0f8=
Subject key identifier: 9D:49:20:41:43:4C:46:ED:B2:B7:7E:02:A4:09:AE:67:B0:91:77:75
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019F483E32E52C40A25DB581FBC8CBC766BA
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/nUkgQUNMRu2yt34CpAmuZ7CRd3U.roa
Signing time: Thu 09 Jul 2026 18:57:43 +0000
ROA not before: Thu 09 Jul 2026 18:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 80.224.192.0/22 maxlen: 24
80.224.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:3e:32:e5:2c:40:a2:5d:b5:81:fb:c8:cb:c7:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jul 9 18:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d492041434c46edb2b77e02a409ae67b0917775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:f3:62:f7:7c:47:99:66:08:79:1f:c9:11:
4a:4d:dd:76:f0:0d:f3:af:12:16:09:6c:4c:d9:ca:
cf:d4:d2:68:75:92:f6:96:58:1f:fc:12:6b:17:b2:
7f:c8:e9:14:45:65:6f:f9:a7:ec:bd:69:dd:12:80:
a9:6e:15:3d:b3:89:0f:af:df:28:2d:a1:49:2c:7f:
b8:c9:72:1c:84:8d:c9:a7:25:c7:dd:f1:77:d4:d5:
21:ba:51:0f:91:04:46:27:22:f2:df:69:83:01:40:
05:73:9e:ad:ca:01:95:83:21:d8:9b:b1:a8:5d:b6:
ba:45:31:c5:19:ff:25:25:92:4f:ed:d8:57:02:0e:
12:6c:d4:75:b0:a3:8a:df:11:fe:c1:e3:cf:c4:d4:
0a:b3:11:39:fe:c0:34:f3:76:f6:9b:ed:ee:03:06:
c7:6d:09:d8:80:8e:8f:23:63:92:83:e4:81:e2:33:
b8:4d:e6:d3:93:11:98:e5:be:14:1b:1a:29:1e:11:
a2:a5:2e:49:4a:e4:c7:24:4f:72:ea:7b:95:f9:b1:
ee:e3:00:f5:73:34:d9:b5:b7:2c:22:5b:b3:8e:c5:
7f:27:dd:4e:71:a2:6b:28:63:32:7b:88:81:6f:cc:
37:e8:c2:45:09:f1:7b:2b:97:b8:bd:80:cd:15:4d:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:49:20:41:43:4C:46:ED:B2:B7:7E:02:A4:09:AE:67:B0:91:77:75
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/nUkgQUNMRu2yt34CpAmuZ7CRd3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.224.192.0/22
80.224.240.0/22
Signature Algorithm: sha256WithRSAEncryption
29:2e:7d:df:ff:dd:a5:53:90:0b:2a:c8:57:bd:44:24:d9:f7:
c1:47:08:a2:5e:aa:f5:40:02:f5:fb:9c:d7:d8:41:ce:b9:f5:
87:00:93:d7:d4:1a:bc:48:74:7d:2e:57:1e:f2:02:69:c1:f1:
4e:78:22:3d:73:39:bf:d9:f4:c0:8f:bd:75:d3:81:c9:24:0c:
64:5e:31:83:5a:14:c3:27:00:4c:ba:f6:7e:07:0b:44:f4:87:
c8:ce:ae:83:82:54:de:17:23:3f:19:59:d1:60:be:ce:1f:6f:
ba:fe:8a:16:cd:fc:d6:c3:38:f3:2d:56:3b:43:5f:da:2d:a5:
27:ea:8a:bb:a4:99:ed:df:dc:77:57:43:0f:98:a0:7f:4d:a4:
6f:d2:ac:18:82:da:e3:70:97:d8:e0:c8:85:a8:a4:f5:7d:61:
df:72:25:c5:6e:57:a7:6f:12:00:f5:ff:33:ea:0f:d6:aa:0c:
1a:df:7b:4b:cc:f8:16:09:3b:8b:54:d0:49:8f:49:92:66:8b:
83:67:35:ff:b1:d0:5d:f5:26:5d:fc:6e:f7:5f:d2:ee:15:a0:
7c:0b:42:a3:9e:5a:b7:19:eb:ed:06:1c:97:c7:43:89:f2:20:
bc:11:96:43:c5:f7:3b:4b:21:77:52:19:8e:00:f5:cb:bb:d0:
12:88:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:37 2026 by rpki-client