Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/UaDo_BT2LcEP_zURCB9RbFxkQbA.roa
File: UaDo_BT2LcEP_zURCB9RbFxkQbA.roa (raw, json)
Hash identifier: wqnHfwG1lUfRQ7Htl0lN1tjaK6i63SCJO0QAnE5rZNQ=
Subject key identifier: 51:A0:E8:FC:14:F6:2D:C1:0F:FF:35:11:08:1F:51:6C:5C:64:41:B0
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 019FFFE99D8488822200B137870A97F41A9D
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/UaDo_BT2LcEP_zURCB9RbFxkQbA.roa
Signing time: Fri 14 Aug 2026 10:55:27 +0000
ROA not before: Fri 14 Aug 2026 10:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219521
IP address blocks: 185.165.77.0/24 maxlen: 24
2a14:db80:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:e9:9d:84:88:82:22:00:b1:37:87:0a:97:f4:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Aug 14 10:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51a0e8fc14f62dc10fff3511081f516c5c6441b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:f2:bd:75:b1:53:28:c5:12:73:bd:f2:a6:
3d:9d:72:e1:7f:3d:32:fa:4d:88:60:5f:2e:bd:6c:
4f:c7:8e:95:74:bd:e2:14:87:fc:20:fa:f7:0f:bf:
4d:25:86:df:39:52:d8:8e:84:5c:60:f5:8d:18:b8:
96:e2:a5:3d:12:68:ff:80:9e:9c:db:03:74:ca:8a:
f2:18:93:fd:4f:c8:13:90:c7:4a:44:a9:71:c7:28:
ae:a5:73:cd:28:e8:61:c1:59:ed:d7:e4:18:38:12:
49:98:be:7e:8f:9b:6e:c3:36:93:c2:73:e0:76:92:
8e:ee:73:00:77:53:6e:4a:79:3c:55:8e:26:fa:55:
a2:97:fc:0d:48:2e:ae:4b:0c:e4:7c:73:35:5f:3e:
eb:2b:8b:13:3c:95:03:70:95:d3:44:5f:62:53:10:
3f:ee:c0:37:3b:18:53:12:ad:fe:f2:04:bc:8f:00:
13:48:bc:13:a5:bc:bb:ee:a4:af:dd:85:8d:b6:c7:
77:c5:2b:da:11:fe:68:5e:9e:e7:bb:40:e7:8a:a1:
30:a9:12:51:54:b5:ad:bf:c2:08:a0:26:fd:61:c8:
d3:61:8d:8d:85:47:3c:75:7a:28:69:12:30:69:43:
92:22:da:ac:15:b1:cc:47:8f:45:73:3b:b4:dd:1d:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:E8:FC:14:F6:2D:C1:0F:FF:35:11:08:1F:51:6C:5C:64:41:B0
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/UaDo_BT2LcEP_zURCB9RbFxkQbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.77.0/24
IPv6:
2a14:db80:16::/48
Signature Algorithm: sha256WithRSAEncryption
bd:45:0e:89:cd:26:83:83:70:5f:9a:7e:ee:17:5a:34:cd:e7:
62:4e:c1:1c:07:ce:66:31:5c:fd:25:60:d6:95:d6:82:bf:74:
c0:b2:cd:6b:79:5b:00:eb:10:88:25:31:72:5b:89:42:26:67:
83:c5:86:12:c2:14:98:5d:c9:58:f4:b5:fc:d3:aa:3c:8e:10:
3e:53:f9:1b:30:f2:e8:ab:6e:73:92:5b:ed:be:f5:83:d3:0b:
74:20:e3:57:77:21:5f:fb:35:9f:d4:94:3a:02:61:00:82:c9:
ee:ad:eb:9b:65:fc:64:5b:fa:97:7c:76:2f:b0:9a:2f:2f:cf:
30:ab:83:a1:db:89:d9:0b:0f:72:0c:29:7c:fd:ae:48:ca:f6:
3b:6d:d8:2c:d8:01:11:0e:6e:eb:fc:d4:7c:df:50:24:aa:51:
9a:97:0d:4e:d5:d9:57:2c:96:cf:3f:c2:24:f3:08:63:b1:95:
e4:60:d8:36:4d:bc:d9:35:cc:01:7c:8c:f7:2e:a5:be:94:bb:
bc:23:00:9b:66:6e:b8:5e:36:4c:49:0d:d7:aa:ee:d8:3a:42:
15:f7:13:4d:f2:f6:67:bb:63:a9:8f:8a:93:d1:86:fb:21:ca:
f6:d7:1f:ad:3b:bf:27:62:65:27:ed:5c:ee:40:a0:3f:d3:94:
bf:35:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 20:02:36 2026 by rpki-client