Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/uqb13WcH-sHQrFpv4PbFThoSkmk.roa
File: uqb13WcH-sHQrFpv4PbFThoSkmk.roa (raw, json)
Hash identifier: z4r6mb25fzWJDdqfWlcYfompTywQy1djheMADUOlVYk=
Subject key identifier: BA:A6:F5:DD:67:07:FA:C1:D0:AC:5A:6F:E0:F6:C5:4E:1A:12:92:69
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 019EF396A1FF65E76D6C7B9F2CF2A23C915C
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/uqb13WcH-sHQrFpv4PbFThoSkmk.roa
Signing time: Tue 23 Jun 2026 08:26:35 +0000
ROA not before: Tue 23 Jun 2026 08:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8368
IP address blocks: 45.149.96.0/22 maxlen: 24
81.85.61.0/24 maxlen: 24
91.212.215.0/24 maxlen: 24
91.236.192.0/24 maxlen: 24
95.36.80.0/20 maxlen: 24
195.14.5.0/24 maxlen: 24
212.85.56.0/21 maxlen: 24
217.18.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:96:a1:ff:65:e7:6d:6c:7b:9f:2c:f2:a2:3c:91:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Jun 23 08:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baa6f5dd6707fac1d0ac5a6fe0f6c54e1a129269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:f0:66:08:2f:1a:b4:1b:26:b6:7a:7c:f9:
42:6a:35:c8:23:5c:87:90:5b:65:b2:1b:f3:fb:f7:
ad:77:ee:ca:8f:aa:71:57:45:67:3d:9c:b2:89:26:
3a:fa:ae:82:3e:ba:f9:16:6c:9d:92:bb:1f:e4:ba:
82:dc:09:ff:ea:aa:2c:4a:02:63:af:80:4e:ac:1b:
ed:d5:93:09:e1:42:d3:1d:2b:35:19:b9:04:ef:09:
3c:b7:ee:09:7b:fb:ae:70:bf:53:6a:10:9a:41:39:
d3:4b:6f:25:ee:52:84:ee:c3:ff:c1:5f:65:6b:fb:
87:21:df:ac:a4:49:19:90:54:89:10:15:1d:58:00:
b6:ba:a0:de:c8:8d:ad:bd:84:ee:81:e6:c9:ff:0a:
b7:f2:8a:38:40:3d:c2:4e:03:8a:1d:27:0c:f1:a9:
33:89:6d:5f:32:f9:2f:67:65:81:0a:84:9b:21:76:
9a:e7:35:6f:71:a2:b3:a8:fc:4a:77:7e:bf:fb:bf:
a5:d0:e5:3a:07:65:f3:d8:0a:89:3f:5c:3b:b8:fd:
25:38:9d:9d:19:ec:07:9d:7c:bf:26:1e:d6:8e:bd:
6a:90:c9:f5:80:d2:ed:ec:24:e7:92:7c:33:ec:30:
1b:fb:85:91:37:d5:3e:41:c5:c5:aa:9b:ff:0e:24:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:F5:DD:67:07:FA:C1:D0:AC:5A:6F:E0:F6:C5:4E:1A:12:92:69
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/uqb13WcH-sHQrFpv4PbFThoSkmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.96.0/22
81.85.61.0/24
91.212.215.0/24
91.236.192.0/24
95.36.80.0/20
195.14.5.0/24
212.85.56.0/21
217.18.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c4:7f:bc:e5:20:a1:92:2e:75:6a:4d:f2:04:5c:61:46:0a:
7e:15:d6:73:da:e0:9e:86:2c:43:d8:c3:93:28:6e:d0:00:6e:
4a:65:ed:5b:4e:64:b6:42:1a:6e:aa:c5:36:3e:35:02:fc:4f:
11:e8:21:7a:25:66:f8:81:f6:e8:66:9b:a4:ac:bc:5b:74:98:
ab:df:9f:8f:01:47:5f:fe:fc:2f:4d:21:b3:cc:bb:63:64:1a:
94:bc:54:7a:6c:77:08:b5:9e:60:1f:02:a3:16:a7:d7:48:f3:
e5:cf:d0:fb:0a:d3:59:b2:00:a5:e1:c6:72:ac:5a:33:a9:98:
76:4d:5e:4e:bf:0b:8d:87:f9:e5:90:e3:54:3d:0c:b3:a2:f4:
58:b3:f5:7f:51:11:a7:5c:c7:84:f7:90:74:fd:e0:b7:dd:37:
ef:92:c0:84:7a:48:a5:b1:7f:89:0b:0b:55:2b:ad:7f:dd:f3:
b2:68:58:50:82:95:4e:e7:4e:15:c3:73:b2:99:b1:0a:41:35:
da:3d:3b:a0:9a:25:8d:a5:09:d5:b0:99:a4:ef:e8:af:6a:b1:
66:35:d4:7d:4a:d6:b0:8e:08:6e:b4:20:dd:88:5e:2c:8c:24:
25:c6:9a:4d:9a:b5:1d:6b:40:1b:9f:a3:8b:41:38:b6:18:29:
ef:6e:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:26 2026 by rpki-client