Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/uuES_PcZXr2vk7rE0waAU72niOI.roa
File: uuES_PcZXr2vk7rE0waAU72niOI.roa (raw, json)
Hash identifier: Ux0drPWZ+FLaKeJZ/qGZJUNqwBVkgEdlC6vkuferM7c=
Subject key identifier: BA:E1:12:FC:F7:19:5E:BD:AF:93:BA:C4:D3:06:80:53:BD:A7:88:E2
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 019E3FF674547B57707440C077C726CDEC1C
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/uuES_PcZXr2vk7rE0waAU72niOI.roa
Signing time: Tue 19 May 2026 11:19:36 +0000
ROA not before: Tue 19 May 2026 11:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43833
IP address blocks: 80.254.224.0/22 maxlen: 22
80.254.224.0/24 maxlen: 24
80.254.225.0/24 maxlen: 24
80.254.226.0/24 maxlen: 24
80.254.227.0/24 maxlen: 24
89.29.192.0/21 maxlen: 21
89.29.203.0/24 maxlen: 24
89.29.255.0/24 maxlen: 24
193.177.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:f6:74:54:7b:57:70:74:40:c0:77:c7:26:cd:ec:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: May 19 11:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bae112fcf7195ebdaf93bac4d3068053bda788e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:57:ec:5b:e5:16:fa:58:96:a1:39:6e:77:
ce:2a:2e:0e:03:51:b9:4c:9e:55:9b:c7:29:37:1b:
b8:18:68:60:cb:76:99:bb:af:67:d9:87:fe:b4:65:
55:8d:63:9f:5b:49:65:68:70:09:f0:e9:dc:11:df:
cc:77:d7:dc:56:97:1b:b5:52:ab:c4:ad:96:62:77:
15:92:f4:d2:c8:6b:a0:73:87:d5:49:a2:dd:6d:d1:
22:96:8b:af:ef:a5:35:69:c3:91:c5:94:da:2a:dd:
23:ab:9e:82:81:cd:68:a9:d2:c1:a9:8e:67:71:e9:
13:6b:39:02:c2:e0:0c:87:08:8d:61:5d:18:96:eb:
94:a4:bc:46:95:01:1b:1a:17:0a:ce:56:94:e0:07:
c8:92:aa:ed:c7:7d:84:13:28:6f:5a:63:14:8a:10:
58:e5:7a:a8:d9:96:a2:1f:03:0c:32:3c:fb:34:ef:
87:47:c5:be:5e:21:25:08:95:19:6f:43:74:a3:bf:
49:67:64:0a:9a:c3:5c:ec:f6:ee:c7:97:6c:25:bf:
84:83:85:01:e2:d6:60:a1:01:df:4d:4c:91:98:b9:
c1:5c:a1:1d:12:5d:b3:5d:d3:1a:25:2d:83:bb:ef:
ea:4e:87:47:e7:9e:1f:a1:f6:d0:8e:c7:15:0c:07:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E1:12:FC:F7:19:5E:BD:AF:93:BA:C4:D3:06:80:53:BD:A7:88:E2
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/uuES_PcZXr2vk7rE0waAU72niOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.224.0/22
89.29.192.0/21
89.29.203.0/24
89.29.255.0/24
193.177.212.0/22
Signature Algorithm: sha256WithRSAEncryption
39:74:ab:5a:36:fc:67:96:8b:11:ff:b3:3c:a0:79:40:23:1f:
be:ae:c0:9a:37:91:14:ef:7f:b4:d2:a2:12:c3:91:4c:1e:c4:
2c:a6:17:1c:46:8c:86:81:89:65:b0:e0:ba:5a:8a:97:48:a1:
f6:e6:72:07:3f:87:cc:4e:89:51:36:20:dd:01:43:96:af:8d:
42:85:7c:60:40:ff:c9:22:79:55:0c:af:40:31:a2:5c:fe:2d:
88:ed:cf:6e:e7:53:2e:c8:63:f9:62:32:c6:75:14:db:88:d8:
0c:44:f0:ec:4d:ed:66:eb:4c:2a:a0:d3:2c:31:84:c0:aa:3a:
4a:1a:bd:76:f5:d1:28:e2:8d:2f:6c:c6:0d:66:d8:8b:10:9b:
b6:2c:64:92:85:4e:b4:46:69:8f:2d:a2:10:16:6c:a9:7d:72:
b5:13:e4:df:c7:f9:82:d8:b7:6c:f3:50:ad:61:c0:a1:a5:f3:
6f:49:ad:0b:52:19:e6:bd:fd:9c:81:bb:1a:87:61:5d:03:48:
e3:21:d0:41:eb:aa:f7:8d:b8:c1:c5:ab:a3:6c:a0:c1:11:92:
d5:3e:7c:b0:1f:56:80:66:a9:55:52:41:11:de:1d:a2:61:12:
9b:91:95:4c:05:60:d2:3e:3f:b6:ba:79:af:b6:f5:78:7d:56:
21:70:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:18:15 2026 by rpki-client