Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uDGEjlVZOXJDx-ABljg5gIb4E_g.roa
File: uDGEjlVZOXJDx-ABljg5gIb4E_g.roa (raw, json)
Hash identifier: OInMUeY8FlQqcW7foHWRXIdByhZnOoI64tIIkDuVxvc=
Subject key identifier: B8:31:84:8E:55:59:39:72:43:C7:E0:01:96:38:39:80:86:F8:13:F8
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EE26D36342112463F5A676868CBDE4900
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uDGEjlVZOXJDx-ABljg5gIb4E_g.roa
Signing time: Sat 20 Jun 2026 00:27:48 +0000
ROA not before: Sat 20 Jun 2026 00:27:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215703
IP address blocks: 195.162.253.0/24 maxlen: 24
212.189.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:6d:36:34:21:12:46:3f:5a:67:68:68:cb:de:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 20 00:27:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b831848e5559397243c7e0019638398086f813f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:3e:f1:53:e1:4b:66:26:cb:79:f1:96:7c:
9c:af:2d:37:00:0f:b5:41:23:3d:95:52:d1:f3:63:
f5:99:00:16:4d:9b:60:79:6e:a0:de:fb:8b:7c:1b:
af:c3:79:93:22:60:7c:7a:e5:2d:ca:86:fa:e2:a0:
5a:b4:7e:0d:09:90:f1:49:ff:01:3c:79:4d:74:ac:
5f:08:71:df:ed:ab:a6:a7:4a:2b:94:83:a0:8c:bb:
79:49:7b:cd:00:08:d7:60:5b:cc:4c:aa:76:82:1e:
51:6a:09:64:b3:1c:da:c6:1b:d0:7d:f9:db:0e:e0:
09:0e:77:03:95:85:9e:ae:f9:ec:f9:be:25:08:98:
10:d9:fa:05:c9:dd:5f:26:a0:76:c1:1d:40:ff:8c:
08:8f:42:c6:c8:0d:cb:8f:4d:f2:ba:b5:c9:c2:38:
ab:52:6f:90:85:21:54:fc:48:e2:b7:a4:04:f6:34:
fe:c9:4d:29:b5:e0:c9:6c:5d:f1:0e:9f:1a:e5:7c:
a4:8c:8f:62:b2:b9:8a:41:8f:e5:3a:b3:5f:cd:7d:
af:96:46:1c:a5:b8:94:f2:61:f3:51:60:65:ce:ca:
36:85:2a:44:21:a1:86:ed:53:94:0c:29:fb:c7:ac:
67:b9:95:ed:bc:b0:75:ce:2f:bd:05:4a:c5:1d:5f:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:31:84:8E:55:59:39:72:43:C7:E0:01:96:38:39:80:86:F8:13:F8
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uDGEjlVZOXJDx-ABljg5gIb4E_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.253.0/24
212.189.119.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e6:43:b3:b0:27:a7:5d:e1:8a:bb:34:51:0f:a0:ce:66:b1:
1f:74:9a:f4:55:e3:de:bd:04:9e:a4:7c:78:d3:7f:49:a3:79:
00:fc:6c:32:51:2d:13:1a:9f:e4:c6:06:65:65:3f:6e:82:a7:
d2:2d:31:4d:4f:6f:84:19:f2:e3:c0:4a:44:a4:a8:81:5d:2f:
77:6c:8f:fc:ee:ee:7a:75:60:3e:05:0e:ad:89:dd:ad:1d:5f:
23:4c:ef:9f:46:21:0b:a1:14:79:0a:da:81:c3:9a:cc:9c:df:
f0:f7:c9:d8:40:41:40:1c:86:c2:7a:92:84:5c:00:ab:91:ca:
1e:ea:fc:71:9b:f3:60:aa:af:5e:2a:e9:74:60:62:32:cb:d1:
4e:29:d9:b9:21:ae:71:0e:2a:18:8f:bf:11:aa:5c:b1:45:79:
19:eb:71:c6:b0:55:6a:92:9f:ef:28:c4:53:38:e5:7f:bc:61:
81:70:7f:e5:9a:a4:18:08:85:f7:7a:b1:1f:47:6b:4c:8f:d2:
52:1d:04:9c:d0:4c:71:6f:4a:f5:3c:bd:cc:5d:ad:10:f5:1c:
15:d3:01:86:0b:4b:ea:ad:5f:11:fc:cc:b7:65:23:44:04:39:
3c:71:21:f4:b3:76:cb:7c:9a:36:ad:c7:96:13:4a:10:5a:a7:
91:9c:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 02:19:51 2026 by rpki-client