Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/UZHROKRbeKeXoNGtonlC9p4lTmg.roa
File: UZHROKRbeKeXoNGtonlC9p4lTmg.roa (raw, json)
Hash identifier: lMN0nuxZ8/V4fqe40J/1tKin3F0WmMK1wyo7JVeN9hs=
Subject key identifier: 51:91:D1:38:A4:5B:78:A7:97:A0:D1:AD:A2:79:42:F6:9E:25:4E:68
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236940BBEE6D48ACE9B8EEF0859CA2EB
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/UZHROKRbeKeXoNGtonlC9p4lTmg.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 77.36.124.0/22 maxlen: 22
81.161.4.0/22 maxlen: 24
91.237.44.0/22 maxlen: 24
93.120.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:40:bb:ee:6d:48:ac:e9:b8:ee:f0:85:9c:a2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5191d138a45b78a797a0d1ada27942f69e254e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:1d:9a:e8:d1:d5:ba:0d:bf:1c:d9:db:f0:
0a:43:77:bf:13:0f:b9:d6:55:1d:3d:2e:b8:82:2a:
69:a1:40:8c:93:5f:ba:de:90:ec:01:28:fc:01:e4:
d2:d4:8c:1e:4e:82:12:a4:44:d4:64:ee:11:81:a9:
8e:81:6a:db:f2:61:f6:9c:43:b4:71:06:1b:52:cb:
4a:1e:6d:3e:7e:70:06:83:6e:1a:2a:07:01:25:fa:
72:31:05:b2:6c:e7:2c:cf:ef:f7:3c:94:8a:c5:55:
64:f7:bd:e8:ae:78:ed:97:6c:fb:bb:f8:43:0e:64:
02:2b:f0:6d:8d:26:5f:16:d3:6a:6c:02:89:87:56:
c0:50:be:27:b6:23:9e:8f:ed:32:76:7e:8c:48:7b:
c1:97:28:f8:5e:78:db:3e:7d:64:9b:ff:d5:8d:ba:
86:bd:a5:74:27:b2:6d:15:d9:5b:58:02:d9:d7:b1:
12:47:05:e3:9a:b3:92:48:06:61:9b:1b:e8:48:ca:
52:d2:bc:70:92:40:58:b6:9c:a2:f1:19:ad:31:6f:
44:49:61:3d:12:28:f2:87:5a:3c:24:89:05:90:04:
c9:5c:a6:25:b3:98:24:08:8c:62:53:1b:b9:73:b2:
1b:52:68:1c:52:30:de:d1:d9:a0:9b:dc:1c:39:6f:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:D1:38:A4:5B:78:A7:97:A0:D1:AD:A2:79:42:F6:9E:25:4E:68
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/UZHROKRbeKeXoNGtonlC9p4lTmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.124.0/22
81.161.4.0/22
91.237.44.0/22
93.120.96.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d2:b2:3e:c9:b6:3b:b6:69:23:cf:4e:85:db:f9:7c:67:7c:
2f:85:9e:39:a8:19:40:da:00:a6:18:81:1a:40:18:1d:91:b2:
07:06:64:40:be:08:5c:2c:eb:f4:9d:a9:c8:fe:da:f5:60:cf:
bc:d4:87:0b:a4:4a:a3:3d:c7:0c:fe:76:c2:cf:6b:49:f0:39:
9d:8e:42:08:a1:97:d4:28:2f:05:17:5a:f1:3b:11:5c:a5:4b:
9e:be:47:7d:fd:fc:01:34:45:92:5a:e3:09:41:fb:fd:78:cd:
6c:7e:7f:87:60:05:cf:21:75:28:dd:68:cf:bc:aa:88:00:35:
b5:c9:59:d7:1f:75:52:7c:52:b7:99:68:9a:35:94:62:c2:92:
40:ee:e2:43:72:60:49:fc:99:df:a9:56:02:6e:ad:81:93:60:
47:b6:ac:be:09:5c:bb:f0:9c:1c:35:c3:55:32:63:db:df:b6:
f0:ff:fe:0c:ef:1b:5c:12:bf:5f:7b:2a:f4:66:47:e5:b9:88:
f1:c3:50:97:80:0b:6e:d6:d0:ff:d5:2e:02:1a:86:37:c9:de:
71:6d:64:e4:3b:15:09:7f:62:c9:15:73:48:b8:de:b5:5b:b5:
13:35:20:ed:82:c1:51:1a:67:49:3e:9e:0b:da:7d:e9:c4:d5:
2d:9c:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:03 2026 by rpki-client