Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1-uHXLfEeiYHiTch5MI0Zp7Q1bh4.roa
File: 1-uHXLfEeiYHiTch5MI0Zp7Q1bh4.roa (raw, json)
Hash identifier: G3Wer1Ja0Zg4WiASwJya45QDTKp9SQuCj+KiMND2RVA=
Subject key identifier: FA:E1:D7:2D:F1:1E:89:81:E2:4D:C8:79:30:8D:19:A7:B4:35:6E:1E
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F23689B8D655659FCE4048EE0A30FE285
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1-uHXLfEeiYHiTch5MI0Zp7Q1bh4.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212068
IP address blocks: 139.28.205.0/24 maxlen: 24
2a0d:1a40:7a00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9b:8d:65:56:59:fc:e4:04:8e:e0:a3:0f:e2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fae1d72df11e8981e24dc879308d19a7b4356e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:18:3b:8a:8a:b0:88:95:12:a8:5c:3e:70:
30:a4:1c:aa:fa:68:9a:59:f1:57:a2:74:90:ff:1a:
1e:83:be:92:3a:8c:d2:99:4d:d0:5b:3e:29:70:e1:
2e:b0:10:82:fa:c5:3c:42:c1:5d:81:26:6f:4f:ba:
40:62:28:08:69:7a:16:8f:dd:bd:d5:b7:53:37:f4:
2e:96:09:44:ca:46:d0:e8:32:e9:d0:9c:48:ce:51:
74:c5:58:11:70:c7:8d:35:fe:5d:58:33:54:f7:a3:
dd:15:27:5c:ea:59:28:2f:53:fd:3e:69:e8:77:9b:
a4:e4:47:a5:29:ac:d9:0e:d8:d9:18:d9:fa:cb:56:
86:e5:94:01:1a:42:7e:5b:73:e2:31:2d:ed:b6:e2:
52:0a:f8:8e:ba:b6:e3:f8:56:fc:3f:bb:b1:94:db:
d9:1b:18:68:4b:c2:fe:93:a1:fe:f3:50:6d:9f:07:
2b:2b:43:b9:d3:42:7d:f8:ef:55:19:60:ec:97:1d:
1c:af:00:0c:8e:dc:56:8f:e5:ab:e6:cf:52:01:47:
65:99:5f:d8:43:a1:5b:71:20:2b:7d:47:70:08:4f:
86:52:92:d5:1d:5e:67:c9:62:55:f8:8e:08:50:82:
16:a9:d7:bf:94:2a:38:40:b7:5f:29:8a:b1:d0:39:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:D7:2D:F1:1E:89:81:E2:4D:C8:79:30:8D:19:A7:B4:35:6E:1E
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1-uHXLfEeiYHiTch5MI0Zp7Q1bh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.205.0/24
IPv6:
2a0d:1a40:7a00::/44
Signature Algorithm: sha256WithRSAEncryption
d0:17:31:17:ff:a3:0e:f5:0c:43:ba:b7:be:9c:1e:b0:68:6c:
ec:7f:8b:49:30:20:36:55:b3:8a:c3:f2:77:8f:4a:8e:b7:c3:
e7:cf:bb:e6:2d:87:af:32:1c:7b:07:f3:f9:7a:df:e3:99:19:
de:ab:0a:6a:07:0f:9c:e2:7f:be:d0:f6:39:6f:3f:39:5a:17:
2e:84:b6:cd:a7:ab:4e:42:af:ed:e1:e1:fe:44:29:c3:ff:d1:
92:a3:e3:9c:b0:3a:f8:28:6f:dc:a0:c7:3b:fc:15:cb:83:6d:
98:09:54:4e:02:2f:41:5f:5a:9b:ea:57:5d:ee:f6:6c:17:fa:
d0:ca:cd:c1:5a:27:22:2a:e6:b0:0e:42:46:f0:1a:71:ca:fd:
a6:40:f0:60:c8:fa:3a:6e:47:9d:39:92:0f:55:6c:46:59:bc:
58:f9:82:2e:5d:b0:ad:52:97:38:45:7f:5f:66:1f:22:4f:31:
f5:15:db:fb:1a:4d:d7:f1:d0:ca:7b:80:f5:52:c8:13:b2:58:
e4:3f:e3:23:ba:1c:18:97:a6:b3:f0:7d:12:0d:b7:e1:ac:ad:
f8:fa:c2:9d:ab:79:57:71:31:10:f9:cb:4f:7b:ef:7a:78:8d:
87:d4:59:38:fb:46:92:0f:45:9a:dc:a0:0a:c9:6d:40:a7:8c:
ac:24:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:29 2026 by rpki-client