Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uBQAcfucioitEFPMA5HSOlNc6Yc.roa
File: uBQAcfucioitEFPMA5HSOlNc6Yc.roa (raw, json)
Hash identifier: CaU447Nm5Ue9WrzLUJWudOzo02H5i/r0S5E3UwcYYrc=
Subject key identifier: B8:14:00:71:FB:9C:8A:88:AD:10:53:CC:03:91:D2:3A:53:5C:E9:87
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FCB98CBFF8C9611C4C3953D426A586A83
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uBQAcfucioitEFPMA5HSOlNc6Yc.roa
Signing time: Tue 04 Aug 2026 07:06:56 +0000
ROA not before: Tue 04 Aug 2026 07:06:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146871
IP address blocks: 77.67.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 07:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:98:cb:ff:8c:96:11:c4:c3:95:3d:42:6a:58:6a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 4 07:06:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8140071fb9c8a88ad1053cc0391d23a535ce987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:37:89:da:2b:ca:9c:27:d1:b9:8e:c9:a1:
e3:a2:37:a6:fc:5c:d7:ae:7a:de:f6:72:8a:45:25:
00:f6:de:40:40:c4:9e:57:da:13:a0:ee:44:b4:f9:
c4:dd:00:dc:fa:d5:8b:2a:a7:cd:1a:db:cd:c3:93:
08:3b:ba:7e:1a:25:50:4f:26:69:3c:fa:d5:62:6f:
16:8e:57:cf:2e:3c:96:44:81:b1:48:c3:87:53:3d:
85:21:9f:31:e7:c6:96:3b:c6:a6:86:ae:c4:81:a7:
0f:19:76:95:2d:ec:1c:47:86:a9:ef:57:16:d3:ca:
fc:74:2a:ad:2e:74:18:77:5c:7e:c8:56:6a:e8:ec:
e2:ca:02:e1:56:65:3e:5b:62:0f:20:72:0c:b9:ca:
69:dd:b4:f8:5b:91:e6:99:70:4a:ea:53:f1:13:d6:
bd:a5:ec:fa:b5:f2:ec:49:83:03:ac:8a:5a:8b:6d:
c2:b5:57:cc:dc:cc:a6:60:34:f8:0b:2c:8d:90:ff:
bd:1e:15:21:b9:96:71:75:0e:4f:59:2d:f0:67:80:
cf:9e:28:5e:c2:ec:9c:1d:18:3f:9b:ba:aa:8c:13:
70:50:0e:d1:d0:09:00:d4:31:ad:ba:f6:45:b6:01:
0e:9b:7d:27:53:0f:75:fc:36:90:51:98:22:48:18:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:14:00:71:FB:9C:8A:88:AD:10:53:CC:03:91:D2:3A:53:5C:E9:87
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uBQAcfucioitEFPMA5HSOlNc6Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.49.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9d:ef:a3:34:47:8b:53:9a:ef:fe:57:64:3c:21:6c:82:77:
81:41:22:52:7b:d7:fb:74:e7:d2:87:88:40:d8:5e:a1:a8:b3:
1d:fc:3d:16:51:a8:d2:df:d3:92:6a:c7:cd:df:c6:b5:72:cd:
78:88:00:85:bf:73:69:f7:9a:75:b6:56:00:75:ac:9d:49:8c:
cb:19:58:99:ef:3d:c2:5a:9d:ef:50:d1:74:fc:0c:b7:d8:82:
94:02:cd:4e:12:05:f4:53:ba:94:b1:4c:a6:70:a4:14:47:91:
a8:9d:cb:0b:48:c7:7b:c3:7c:9c:09:09:3d:98:f4:85:c8:b4:
d1:fa:23:88:98:67:d5:9b:b1:6f:ba:33:5d:42:4d:64:56:59:
6b:52:99:ec:df:83:bc:a2:e5:a5:8c:6d:95:0b:a4:61:84:c6:
72:37:94:31:65:8a:32:a2:8d:2f:e4:ba:66:20:9c:3f:1e:0d:
f8:cf:25:e6:6a:ed:b7:48:bc:19:b8:f8:b1:c0:75:6d:c6:31:
be:ed:fa:4a:42:e0:e0:68:b5:5e:9f:0b:3d:7a:dc:b1:5c:4c:
79:07:34:b3:68:e8:a3:4a:29:d2:b4:db:24:02:d1:df:fc:c3:
fe:05:75:9e:d9:ca:a2:b1:73:1a:5c:43:32:c9:e9:77:af:74:
ac:81:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:23 2026 by rpki-client