Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ugwrkIpRq29-B9wfVBIteF2KEoM.roa
File: ugwrkIpRq29-B9wfVBIteF2KEoM.roa (raw, json)
Hash identifier: ukdyYgg1YHtbbV6wUaA9eMuBYuW9pmY61DiHuvFC67g=
Subject key identifier: BA:0C:2B:90:8A:51:AB:6F:7E:07:DC:1F:54:12:2D:78:5D:8A:12:83
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019E832827D0C529129A68FF1702B5E25A5B
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ugwrkIpRq29-B9wfVBIteF2KEoM.roa
Signing time: Mon 01 Jun 2026 12:28:27 +0000
ROA not before: Mon 01 Jun 2026 12:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211849
IP address blocks: 80.66.75.0/24 maxlen: 24
87.251.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:28:27:d0:c5:29:12:9a:68:ff:17:02:b5:e2:5a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jun 1 12:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba0c2b908a51ab6f7e07dc1f54122d785d8a1283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:66:ae:c9:9d:f1:a8:80:c4:64:fb:d3:67:
d3:b5:51:15:8f:5f:7d:b3:4e:3a:96:93:66:a9:3f:
20:97:9e:e1:72:91:48:28:a2:b5:90:46:49:97:e9:
78:6a:7b:cc:6d:d2:11:01:a5:a2:07:98:ce:5d:ab:
a4:34:d2:84:0c:83:3e:d3:ab:e8:f6:e0:01:92:f6:
18:47:ed:a9:fd:3f:b5:00:28:19:cf:65:91:db:a9:
aa:c8:75:28:4b:93:22:c2:41:2f:73:bb:6c:6a:ee:
82:4f:e0:9d:96:bf:14:bd:4a:6c:e8:cf:4a:74:2d:
11:c7:f3:69:e8:15:43:8f:44:82:89:5b:f7:86:d3:
6d:2a:54:81:04:58:4d:7a:20:9d:4c:73:66:34:1e:
5f:c3:06:bc:3a:84:76:94:84:d8:b1:2f:72:e1:ec:
a5:c8:8d:e7:c3:de:06:50:4d:dd:ab:44:7d:1f:6c:
33:98:af:01:5a:b7:05:93:90:55:94:43:7a:ea:96:
fb:51:a7:3b:7e:02:f0:55:dc:ba:e9:67:ab:08:9d:
f9:e3:69:5a:c3:17:f8:6a:2d:16:5b:87:17:70:0d:
45:b3:8d:48:12:bf:d4:1b:59:c4:6c:4c:30:31:d3:
46:99:11:32:b3:0b:a0:c4:f9:92:99:70:85:31:83:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:2B:90:8A:51:AB:6F:7E:07:DC:1F:54:12:2D:78:5D:8A:12:83
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ugwrkIpRq29-B9wfVBIteF2KEoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.75.0/24
87.251.79.0/24
Signature Algorithm: sha256WithRSAEncryption
21:04:17:1e:bb:fb:e9:87:98:97:9b:d6:43:16:2a:8b:8f:91:
48:75:56:29:71:42:b2:41:19:f8:12:99:55:05:d2:5a:a2:38:
2f:7c:14:e6:18:82:16:13:f1:d0:cd:85:c7:7b:04:1d:a9:d2:
4d:b2:f6:cb:37:f8:34:e1:e3:9d:41:d0:57:10:db:27:8d:4d:
c7:9b:5f:ab:9c:82:4e:7f:63:fb:22:22:02:ac:c2:ba:77:c9:
c4:39:0f:7c:ec:7d:ca:a6:09:e9:5b:e6:f0:2e:a0:16:0f:c1:
da:11:d1:50:b3:d9:35:27:a3:62:f4:ae:93:d0:80:d8:dc:89:
64:08:da:a8:c2:2f:dd:2a:b0:74:28:15:b9:d9:19:bb:12:bc:
b7:c0:89:35:b4:5a:18:a1:08:0e:da:7f:f4:85:f1:11:b2:93:
c2:a1:1f:84:c1:ba:73:f0:61:f2:0f:f6:6d:5b:65:41:ab:46:
de:de:58:f9:23:00:9e:ad:7f:b5:f5:de:18:11:65:b6:c2:63:
41:d5:62:20:8d:05:2a:d4:06:89:36:fb:de:f3:80:82:5e:47:
cf:17:c5:7b:99:22:04:37:8c:c7:2a:17:14:89:72:a5:95:56:
50:58:5d:87:48:61:f8:9e:22:5d:d1:25:aa:43:90:60:e3:70:
3c:1d:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:40 2026 by rpki-client