Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/aupSOX3USkXN209_uXBIrvQgidc.roa
File: aupSOX3USkXN209_uXBIrvQgidc.roa (raw, json)
Hash identifier: Yd7eVOfPyBjTgZEtH6ZRooED1fILM1hjfMgfZkaNx4o=
Subject key identifier: 6A:EA:52:39:7D:D4:4A:45:CD:DB:4F:7F:B9:70:48:AE:F4:20:89:D7
Certificate issuer: /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial: 019F23685E7BE5ED11E518A7675C924EF7D4
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/aupSOX3USkXN209_uXBIrvQgidc.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 81.87.0.0/16 maxlen: 24
83.138.32.0/21 maxlen: 21
89.207.208.0/21 maxlen: 21
193.60.0.0/14 maxlen: 24
194.66.0.0/16 maxlen: 24
194.80.0.0/14 maxlen: 24
195.194.0.0/15 maxlen: 24
212.121.0.0/19 maxlen: 19
212.121.192.0/19 maxlen: 19
212.219.0.0/16 maxlen: 24
2001:630::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5e:7b:e5:ed:11:e5:18:a7:67:5c:92:4e:f7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aea52397dd44a45cddb4f7fb97048aef42089d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:69:e6:d3:45:06:89:ca:54:88:c1:2f:ee:
8c:f0:5d:19:4d:99:08:3d:66:93:cc:a2:46:38:9c:
9e:87:ee:fb:9b:28:e3:d3:f8:c8:87:68:5c:b2:ba:
c6:1e:79:34:ce:97:99:24:6b:86:11:56:29:6c:8a:
b6:96:61:1c:e8:af:c7:ef:07:36:d3:79:25:67:77:
d2:6c:9c:9c:ff:e0:39:cd:fd:46:09:f5:45:22:7e:
ed:8f:81:49:86:9c:46:a8:69:06:2e:73:1e:c1:b6:
f8:d8:5c:e0:73:11:36:f7:a8:f1:6a:37:bf:18:a9:
1c:b8:1f:d6:45:a6:ee:c0:88:e6:0a:e6:e3:9d:6b:
42:11:e9:56:2e:71:c5:34:61:45:b4:29:36:63:0b:
11:94:e9:c1:ec:01:3d:62:33:d5:f9:b7:8d:01:66:
eb:c6:be:61:95:0c:02:06:f9:6b:f2:ea:e3:eb:66:
1f:64:8c:f0:f5:d7:33:a2:72:c9:65:02:45:2d:3b:
cd:de:48:6f:6a:cd:1b:f8:09:ff:81:1e:b2:fa:58:
4d:49:4c:e2:04:20:47:a0:5e:cd:17:a7:de:3a:01:
44:e3:e3:77:75:b7:7a:11:2d:64:d4:99:ac:bb:c5:
61:82:cc:3f:13:7f:8c:88:8b:2f:4c:d5:7c:4a:5e:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EA:52:39:7D:D4:4A:45:CD:DB:4F:7F:B9:70:48:AE:F4:20:89:D7
X509v3 Authority Key Identifier:
keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/aupSOX3USkXN209_uXBIrvQgidc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.87.0.0/16
83.138.32.0/21
89.207.208.0/21
193.60.0.0/14
194.66.0.0/16
194.80.0.0/14
195.194.0.0/15
212.121.0.0/19
212.121.192.0/19
212.219.0.0/16
IPv6:
2001:630::/32
Signature Algorithm: sha256WithRSAEncryption
da:6b:2c:14:09:57:41:9f:60:d3:ab:df:d8:7d:5e:16:54:90:
42:ce:15:89:d3:cc:92:1c:89:e7:15:f2:84:44:ef:02:33:87:
5a:75:6d:e0:35:f1:c2:80:dd:83:5a:f5:b8:dd:50:fc:d7:f7:
99:d9:85:4a:38:53:6c:9a:60:bb:8b:31:3d:26:c1:d8:3e:c4:
5d:ed:a3:72:9d:a4:2d:18:b5:9d:8b:6d:33:6d:c2:3d:76:36:
91:c4:20:c5:64:b0:31:3b:87:d7:95:d0:c9:45:58:8e:67:24:
d4:4d:95:71:26:e3:3f:25:10:cf:e5:61:a0:29:88:07:a2:63:
0f:43:7a:33:86:a9:38:61:fd:eb:e3:c4:29:18:e1:7d:f5:d5:
f5:47:b6:83:93:e5:5a:b1:4e:9f:c5:43:ac:08:52:9a:c1:98:
03:d2:4c:e8:75:f0:97:d2:90:c8:c4:39:a9:62:9a:a3:bd:f8:
83:b6:03:c1:e8:e9:3b:84:cc:35:c2:eb:c3:59:0c:5c:33:cd:
d6:c7:44:ad:8b:03:58:fa:21:30:ba:c3:cb:a3:c3:ca:20:a9:
6a:6e:1e:61:08:ee:06:1c:7d:35:e2:5d:cf:0e:a0:02:2f:8a:
df:44:53:9e:fe:92:20:7e:91:09:11:46:61:3f:bc:0d:8d:79:
d3:4f:e3:60
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZ8jaF575e0R5RinZ1ySTvfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMTdiNGM5ZjAxZGE4MzQ2OWE5ODUxZjk1MTA2ZTM5NmZk
MjVlNjQwHhcNMjYwNzAyMTUxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWVhNTIzOTdkZDQ0YTQ1Y2RkYjRmN2ZiOTcwNDhhZWY0MjA4OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGJp5tNFBonKVIjBL+6M8F0ZTZkI
PWaTzKJGOJyeh+77myjj0/jIh2hcsrrGHnk0zpeZJGuGEVYpbIq2lmEc6K/H7wc2
03klZ3fSbJyc/+A5zf1GCfVFIn7tj4FJhpxGqGkGLnMewbb42FzgcxE296jxaje/
GKkcuB/WRabuwIjmCubjnWtCEelWLnHFNGFFtCk2YwsRlOnB7AE9YjPV+beNAWbr
xr5hlQwCBvlr8urj62YfZIzw9dczonLJZQJFLTvN3khvas0b+An/gR6y+lhNSUzi
BCBHoF7NF6feOgFE4+N3dbd6ES1k1Jmsu8Vhgsw/E3+MiIsvTNV8Sl6jCwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFGrqUjl91EpFzdtPf7lwSK70IInXMB8GA1UdIwQY
MBaAFEAXtMnwHag0aamFH5UQbjlv0l5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUJlMHlmQWRxRFJwcVlVZmxSQnVPV19TWG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvYXVwU09YM1VTa1hOMjA5X3VYQklydlFnaWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvUUJlMHlmQWRxRFJwcVlVZmxSQnVPV19TWG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwMAUVcDBANT
iiADBANZz9ADAwLBPAMDAMJCAwMCwlADAwHDwgMEBdR5AAMEBdR5wAMDANTbMA0E
AgACMAcDBQAgAQYwMA0GCSqGSIb3DQEBCwUAA4IBAQDaaywUCVdBn2DTq9/YfV4W
VJBCzhWJ08ySHInnFfKERO8CM4dadW3gNfHCgN2DWvW43VD81/eZ2YVKOFNsmmC7
izE9JsHYPsRd7aNynaQtGLWdi20zbcI9djaRxCDFZLAxO4fXldDJRViOZyTUTZVx
JuM/JRDP5WGgKYgHomMPQ3ozhqk4Yf3r48QpGOF99dX1R7aDk+VasU6fxUOsCFKa
wZgD0kzodfCX0pDIxDmpYpqjvfiDtgPB6Ok7hMw1wuvDWQxcM83Wx0StiwNY+iEw
usPLo8PKIKlqbh5hCO4GHH014l3PDqACL4rfRFOe/pIgfpEJEUZhP7wNjXnTT+Ng
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:33:23 2026 by rpki-client