Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/up_4n9Lp5vZ0pW68blQb7h8SkG0.roa
File: up_4n9Lp5vZ0pW68blQb7h8SkG0.roa (raw, json)
Hash identifier: GmaLLFqrP/x4pgyZv+ywc9zn/BT0CMhI9r8ah9CWbhA=
Subject key identifier: BA:9F:F8:9F:D2:E9:E6:F6:74:A5:6E:BC:6E:54:1B:EE:1F:12:90:6D
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F236899D39C3A7AB21445C841B90A97E8
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/up_4n9Lp5vZ0pW68blQb7h8SkG0.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208590
IP address blocks: 79.110.170.0/24 maxlen: 24
2a0d:1a43::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:d3:9c:3a:7a:b2:14:45:c8:41:b9:0a:97:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba9ff89fd2e9e6f674a56ebc6e541bee1f12906d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:84:8a:36:48:24:65:43:51:8c:97:28:ab:
a5:41:f1:3a:2a:2f:eb:fb:7c:7d:d6:b2:af:9c:a1:
39:ab:b5:41:69:79:9a:f5:5c:bd:d5:bc:ec:84:da:
36:c6:23:63:27:0f:f1:e3:1b:4e:5d:24:d6:ff:15:
e6:a6:29:5d:94:98:5f:5a:ca:09:75:39:33:0a:57:
b2:77:55:6b:f3:c9:cb:85:32:d3:b9:ac:6f:55:a0:
c5:d8:c2:bb:60:d6:95:c6:d1:35:62:de:79:76:7a:
4d:ca:74:b9:99:fd:1f:8a:a4:96:94:24:91:81:55:
81:d1:5f:b4:0d:2b:79:de:31:7d:c4:2e:73:b1:b5:
e2:36:72:05:ad:83:46:6e:2c:e2:3b:bc:25:db:88:
08:bc:d6:a9:f7:40:35:2d:2a:c6:42:ed:63:1c:aa:
67:8c:e4:a4:e7:af:0f:d8:8c:60:45:b9:a9:0c:c0:
33:17:60:b9:a8:48:a4:88:a8:a7:4c:f3:09:e2:13:
f1:c0:8f:78:07:1c:ac:2b:fc:8d:5e:7f:e1:07:31:
09:9d:5f:c2:0b:8d:fb:ce:f8:99:77:0e:36:8d:9f:
45:f6:e2:47:ad:1c:a4:9f:f5:90:11:91:2f:eb:f9:
be:0d:c6:26:5e:bd:46:c1:69:73:6b:c5:40:73:d3:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9F:F8:9F:D2:E9:E6:F6:74:A5:6E:BC:6E:54:1B:EE:1F:12:90:6D
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/up_4n9Lp5vZ0pW68blQb7h8SkG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.170.0/24
IPv6:
2a0d:1a43::/32
Signature Algorithm: sha256WithRSAEncryption
66:ae:40:69:20:8c:5c:2c:52:42:c8:72:95:bd:71:6a:ec:73:
99:65:9f:4a:09:d3:52:64:8d:ed:ca:d4:46:5e:97:44:0b:7c:
c6:9c:49:7f:24:8f:19:0d:59:ed:1e:0b:a3:60:20:b2:d4:3b:
c2:a8:55:f1:9d:59:e8:53:b6:b9:0f:54:19:ae:ae:bf:05:40:
3f:2a:1f:1a:f1:ed:06:16:7a:f0:06:e2:d1:24:7c:1d:29:69:
b5:0e:4d:46:c4:73:b9:89:c9:56:ec:8b:61:bc:38:22:cc:f4:
c2:3a:8d:21:82:f6:55:d8:6e:79:2b:36:08:f0:ef:de:b3:e3:
28:27:ee:26:2e:bf:86:fe:a7:1e:da:70:90:fb:42:4c:bf:df:
e1:ca:44:02:44:b1:66:73:a5:0c:75:11:bb:d5:81:4b:0e:38:
4d:dc:23:08:40:8d:3a:59:56:d8:f8:4b:b1:73:08:4a:06:72:
e8:4a:6c:80:dd:56:b3:40:d3:7b:38:ec:38:39:ce:5c:aa:11:
41:ef:22:eb:54:74:61:e0:53:16:05:9d:f2:90:15:c1:60:4e:
0b:e7:8d:29:08:6b:38:7a:3e:4a:b6:22:53:88:b3:4d:c9:62:
38:42:cf:ba:0f:21:e0:a3:43:9e:a8:74:28:04:ef:85:4d:9f:
24:69:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:42:58 2026 by rpki-client