Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/uLYhHXi716fKyjZfx2gzJ3EGUdo.roa
File: uLYhHXi716fKyjZfx2gzJ3EGUdo.roa (raw, json)
Hash identifier: Ui8rN3SnhBXRoOn5kXrAN5pwwH6pPo/nTDK8l35up3k=
Subject key identifier: B8:B6:21:1D:78:BB:D7:A7:CA:CA:36:5F:C7:68:33:27:71:06:51:DA
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F23689A4FC5DC98D913E81CA105DF675E
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/uLYhHXi716fKyjZfx2gzJ3EGUdo.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210089
IP address blocks: 79.110.169.0/24 maxlen: 24
2a06:1e83:caff::/48 maxlen: 48
2a06:1e86:babe::/48 maxlen: 48
2a0d:1a45::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9a:4f:c5:dc:98:d9:13:e8:1c:a1:05:df:67:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8b6211d78bbd7a7caca365fc7683327710651da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:8f:0b:d6:f6:0c:ea:92:7c:06:6d:a9:54:
64:21:e2:cc:bb:24:5e:27:75:ca:31:85:77:57:ce:
68:d0:c0:24:fb:19:04:71:f1:55:2c:65:87:58:fa:
63:61:f6:96:ca:57:eb:10:9d:82:35:df:e1:f0:25:
63:21:87:1b:4a:85:c1:1c:29:bf:68:77:fc:85:2a:
6d:9c:3a:24:38:44:9f:d2:dd:d2:4e:8c:e3:ba:07:
08:7e:71:86:5a:24:c8:82:e1:f4:69:09:66:f1:e4:
08:ff:0b:fa:29:d7:70:ae:51:1d:5b:46:61:18:9f:
17:1d:ff:b6:09:94:2e:42:05:68:37:64:8a:d3:22:
8c:04:29:91:9d:d1:3c:de:9d:56:83:18:57:88:48:
3b:23:41:d2:f1:f7:c5:6f:70:de:2e:e8:8f:8b:4c:
6c:33:70:a1:91:1c:d5:22:30:57:1f:78:05:4a:86:
16:09:7b:66:71:7a:31:89:c0:38:e4:c6:b8:3b:ab:
e8:71:55:43:f6:b7:17:dc:7c:b1:f1:06:2f:ee:15:
6d:55:06:6d:30:87:e2:fa:08:76:25:cd:7f:a6:66:
00:21:5f:c1:c5:75:4a:25:8a:c5:08:96:a6:3e:07:
a1:b0:16:1a:72:e3:8f:1d:4b:fc:63:94:ef:4b:a5:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B6:21:1D:78:BB:D7:A7:CA:CA:36:5F:C7:68:33:27:71:06:51:DA
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/uLYhHXi716fKyjZfx2gzJ3EGUdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.169.0/24
IPv6:
2a06:1e83:caff::/48
2a06:1e86:babe::/48
2a0d:1a45::/32
Signature Algorithm: sha256WithRSAEncryption
00:7a:f1:83:90:85:aa:d3:c6:f1:47:6e:6f:f6:c6:3c:4e:55:
a7:19:e1:a3:de:17:44:38:01:69:51:86:67:06:8c:bb:f4:cd:
58:2c:da:bd:8d:25:e8:99:f2:ea:85:a4:69:ee:93:49:27:e6:
03:7f:bc:9d:db:ec:41:d6:8b:6c:72:5d:af:32:3a:f3:cd:88:
19:96:1f:36:5e:fa:46:71:a2:a1:da:fe:e4:33:99:1b:e4:f5:
61:d3:59:89:6a:97:e4:6b:f3:ee:c2:79:91:1c:d8:33:6f:09:
5b:1c:d7:af:ef:70:34:fb:82:dd:ef:3b:29:7d:69:b4:16:c9:
0a:36:60:ce:0b:bf:b9:4d:c0:d8:77:f7:9b:52:9e:75:27:c7:
4f:10:b5:81:d1:86:ae:28:cb:05:63:8b:ec:b6:d2:1a:85:f8:
78:42:e9:e5:7d:a5:e9:88:63:cb:ad:00:23:e3:bb:7d:94:39:
83:3b:e8:0a:c8:b9:75:41:5e:a4:4e:d2:5d:cc:81:a0:c4:31:
73:76:8f:1c:4a:85:21:52:8c:3b:0c:dd:0b:c2:e4:f8:3e:1c:
3f:49:31:b0:ae:f1:43:81:da:b8:a2:35:fe:c8:9b:e8:79:2d:
00:04:69:5a:3a:83:f9:76:f8:12:3a:71:8d:78:e3:9e:ea:c6:
0b:3a:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:42:25 2026 by rpki-client