Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/2UujvPjNR__f0FziH24bAPlT5cY.roa
File: 2UujvPjNR__f0FziH24bAPlT5cY.roa (raw, json)
Hash identifier: FuQRfLQdnfucWXl+B5nHItoZmpq/6VaefUhc5NPh++E=
Subject key identifier: D9:4B:A3:BC:F8:CD:47:FF:DF:D0:5C:E2:1F:6E:1B:00:F9:53:E5:C6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019F702D74D4B478F1DEDAFDBF038DF0EB71
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/2UujvPjNR__f0FziH24bAPlT5cY.roa
Signing time: Fri 17 Jul 2026 13:04:14 +0000
ROA not before: Fri 17 Jul 2026 13:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 89.251.25.0/24 maxlen: 24
91.200.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:2d:74:d4:b4:78:f1:de:da:fd:bf:03:8d:f0:eb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 17 13:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d94ba3bcf8cd47ffdfd05ce21f6e1b00f953e5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:54:85:a0:de:9a:c8:62:dd:6d:4a:d1:16:
f3:e6:61:e3:60:4c:f9:de:86:05:c7:c0:eb:57:79:
a2:c6:37:81:23:2a:40:5a:3c:e7:a7:0c:91:e5:be:
1a:f4:01:d5:29:d1:ea:43:16:eb:cf:81:fc:53:66:
c4:25:99:8d:86:fd:f0:e3:e5:85:c7:71:52:78:ff:
03:9c:e9:e8:26:1a:4e:9d:57:a8:7e:36:e7:cf:7a:
ff:e2:81:3f:31:dc:da:a4:d8:9a:e8:63:d5:59:f4:
77:25:e6:6c:5d:f9:60:67:7f:62:69:87:df:9a:e6:
7e:e1:3b:fb:94:bc:02:4c:01:26:95:0c:7a:bf:2e:
70:b7:2c:dc:55:da:d3:5f:ab:a0:7f:5b:b1:ff:12:
38:be:09:9b:d4:01:5b:a4:52:20:e3:d2:bd:b0:78:
c1:77:ce:1a:44:dd:79:97:de:f7:d5:d2:1c:02:12:
92:72:74:45:aa:a6:bd:de:28:ca:2f:d1:5d:6f:e1:
25:16:21:c4:1c:68:99:61:14:7a:f3:69:f4:2f:bc:
e5:66:73:cb:d6:2b:aa:c6:f9:ec:4f:1f:ae:fa:77:
45:61:60:3c:56:45:1f:c3:21:02:cc:7f:ab:2f:e0:
d5:8a:cb:8b:a0:c4:00:82:22:95:eb:60:82:12:c6:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:A3:BC:F8:CD:47:FF:DF:D0:5C:E2:1F:6E:1B:00:F9:53:E5:C6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/2UujvPjNR__f0FziH24bAPlT5cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.25.0/24
91.200.223.0/24
Signature Algorithm: sha256WithRSAEncryption
84:87:ae:d2:55:9d:8a:93:5b:26:c3:78:d6:03:3e:47:66:85:
68:62:03:45:3b:ee:4b:53:9a:8f:fe:0c:89:ba:6f:8d:5b:fd:
e3:2a:1c:c0:87:ba:da:18:ed:3e:71:e1:ca:d9:ae:3e:f3:d4:
d7:ee:76:92:1c:75:87:53:c8:bb:22:f2:17:88:7d:5c:10:22:
fc:b5:59:f3:b7:ec:57:79:9f:01:18:fa:e6:c1:13:08:d9:d5:
69:1d:27:c8:3c:ca:d6:04:79:48:15:24:ad:9b:eb:01:b3:2e:
d9:a1:eb:c3:1e:94:c1:94:0e:a9:c4:04:bb:d7:57:5e:82:bb:
95:0e:45:e3:28:dd:dd:42:15:d5:31:d8:50:5d:e0:16:ba:24:
52:0d:f8:b5:8e:b3:30:d2:40:1e:d8:19:8f:82:c3:52:bb:eb:
37:eb:88:ef:54:f0:c9:9e:fa:73:df:55:15:b8:4f:ca:30:68:
e0:90:df:c3:19:27:4a:22:29:12:8e:88:f0:cb:c9:54:15:e0:
15:4d:f7:49:14:80:35:a8:00:40:95:7c:d5:78:4d:fa:ed:20:
b9:cb:75:54:6e:70:35:21:d4:78:a8:5f:e8:78:96:5a:24:e8:
2b:f7:ca:31:2e:d0:b9:06:a1:b9:b1:2a:c5:13:cf:0b:8d:b2:
bc:eb:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:51 2026 by rpki-client