Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ucR12nQaE6xem-rA3wM8WEC58lg.roa
File: ucR12nQaE6xem-rA3wM8WEC58lg.roa (raw, json)
Hash identifier: tlJsSb1+n3GHhim2lpZpyqmsxDkCNqWLEQRy+8oWP+s=
Subject key identifier: B9:C4:75:DA:74:1A:13:AC:5E:9B:EA:C0:DF:03:3C:58:40:B9:F2:58
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23693F388BBC958CD0DB763BE27EDCEB
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ucR12nQaE6xem-rA3wM8WEC58lg.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205009
IP address blocks: 45.94.52.0/24 maxlen: 24
45.94.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3f:38:8b:bc:95:8c:d0:db:76:3b:e2:7e:dc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9c475da741a13ac5e9beac0df033c5840b9f258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:cf:4c:3e:ad:93:1f:32:09:e0:ac:e6:03:
c4:72:d5:1f:ee:b1:dc:76:ac:3a:8a:35:cf:fb:a2:
97:5a:ca:52:01:ba:27:c4:09:35:f8:80:19:81:c6:
f5:81:d2:59:0d:5f:ee:52:bb:44:31:82:b3:71:b4:
70:86:c0:32:70:61:37:bc:1c:e1:fc:ab:2d:50:f0:
e7:b7:50:da:b4:9d:96:93:9d:6e:99:d8:ab:fa:85:
c7:ed:bf:40:a5:43:c5:b1:f8:8d:12:53:a6:3a:09:
e7:28:39:d6:df:00:60:d1:8e:fb:da:42:b3:23:04:
c4:9e:b0:2c:b5:cc:71:ca:59:ed:8c:47:15:dc:e3:
36:7b:53:1a:79:2c:23:ea:22:a7:e0:d5:27:23:3d:
fe:12:09:62:31:1a:2c:6a:8e:2d:ea:2c:31:7b:f1:
fc:cf:dc:55:b3:d8:ee:04:be:38:34:e0:fd:c8:e3:
da:98:c1:56:be:a0:6f:75:ab:8e:1d:8c:c5:7a:61:
48:1c:d4:bf:cf:2f:a0:da:92:23:a2:61:7b:37:f4:
7d:7a:b0:9a:3c:35:4d:73:9a:1b:7f:fb:50:52:9f:
41:8f:a4:2c:52:b3:a9:77:58:55:7f:00:40:9e:8a:
8d:b2:4d:df:33:9c:ab:da:7d:da:93:9c:e5:75:0f:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:75:DA:74:1A:13:AC:5E:9B:EA:C0:DF:03:3C:58:40:B9:F2:58
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ucR12nQaE6xem-rA3wM8WEC58lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/23
Signature Algorithm: sha256WithRSAEncryption
66:8e:d5:ef:da:20:c6:2b:e1:e9:97:b8:92:c9:10:13:a2:1a:
7e:5e:f6:39:41:ba:1a:69:78:f3:2e:f4:b0:be:92:43:83:71:
cb:6e:1f:5c:07:51:b7:b6:4b:aa:24:01:38:6f:e2:79:b6:55:
22:24:af:da:a3:24:d6:9a:65:b8:84:64:86:42:02:65:5c:39:
9e:c9:5c:0c:08:b4:15:52:51:5a:4c:da:8a:61:01:8e:21:6a:
17:6f:b7:53:0a:e1:9d:b3:3a:16:28:cc:2f:87:9d:db:3e:f7:
06:d3:da:8c:72:87:a4:66:8d:e9:3e:fd:c9:d8:0f:b1:be:7b:
67:b0:ba:12:97:d6:1f:1d:e2:81:63:c0:d6:ec:24:53:29:d9:
9c:09:c1:6e:dc:97:40:fb:01:25:35:8c:c3:57:46:0b:74:a2:
f5:22:54:b2:32:c4:ce:a8:aa:88:f9:4a:44:54:04:7f:08:83:
32:92:ee:a1:06:7e:2c:a2:1e:22:bf:81:81:11:01:c8:9e:6a:
7e:82:eb:76:89:a0:f2:32:33:71:a6:d9:2e:95:2c:11:71:b6:
fa:5c:68:8c:3e:fe:14:eb:ee:50:22:0c:98:f0:b3:2e:92:c8:
b5:72:88:b9:a2:5f:a0:4d:f5:75:79:65:a7:31:8c:ed:a5:74:
72:c7:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 08:44:24 2026 by rpki-client