Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/UiJd6YTZpwcRxL_MZ8S7bv8c500.roa
File: UiJd6YTZpwcRxL_MZ8S7bv8c500.roa (raw, json)
Hash identifier: 3gXPtJg8GpqC0O+77QNOsj779ZWJdMvL9obpa2jP6Jk=
Subject key identifier: 52:22:5D:E9:84:D9:A7:07:11:C4:BF:CC:67:C4:BB:6E:FF:1C:E7:4D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A0424DCCB00A02D5B4D782D59A7ECED42A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/UiJd6YTZpwcRxL_MZ8S7bv8c500.roa
Signing time: Thu 27 Aug 2026 08:19:49 +0000
ROA not before: Thu 27 Aug 2026 08:19:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216314
IP address blocks: 77.47.179.0/24 maxlen: 24
195.178.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:4d:cc:b0:0a:02:d5:b4:d7:82:d5:9a:7e:ce:d4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 27 08:19:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52225de984d9a70711c4bfcc67c4bb6eff1ce74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:a3:3e:da:dc:e8:97:25:a2:e7:e5:7d:2c:
ee:df:e4:1b:c3:1f:12:d0:67:b7:12:a5:95:a7:59:
f5:9d:ab:00:e9:76:07:13:3b:f6:57:9e:f0:62:e5:
ab:40:a6:86:fd:e7:d2:f8:5a:3d:24:d7:fd:96:bd:
3e:bd:6d:cf:f6:9f:89:ea:fe:92:a5:50:df:a4:4d:
5e:d2:84:c6:83:74:be:fe:a2:b7:33:4c:fd:19:83:
9c:18:f4:0e:56:57:a2:85:ee:4a:a9:74:06:29:f8:
a1:a4:01:37:e2:b9:25:3e:e7:a9:37:98:04:2a:d2:
27:ee:5d:f2:ac:a2:2b:67:30:37:b1:e5:4f:d5:29:
f6:74:a6:60:c3:2a:2f:d2:1f:db:19:70:86:58:5c:
ce:c4:27:52:48:c7:a1:ee:7a:65:72:59:6f:36:19:
ac:85:b1:78:cc:91:b7:03:96:9a:e8:33:0a:86:84:
9f:9c:10:62:5c:70:77:f7:7d:f9:3e:07:36:61:30:
e9:48:56:35:d4:e0:63:68:e4:bf:9b:d7:68:7e:dc:
63:3e:a6:4a:f2:24:b2:f5:e2:ab:16:6d:0c:2e:31:
89:80:bb:84:6b:49:9a:e3:cc:88:2c:1f:a4:60:9b:
69:96:af:28:44:a8:9e:92:f5:23:f4:d3:e7:d4:1b:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:5D:E9:84:D9:A7:07:11:C4:BF:CC:67:C4:BB:6E:FF:1C:E7:4D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/UiJd6YTZpwcRxL_MZ8S7bv8c500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.179.0/24
195.178.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:73:29:15:b6:4d:44:d4:64:ae:4c:cf:dd:3b:8c:cc:da:f4:
58:5e:2b:26:27:aa:f3:a0:d4:fe:10:96:a5:82:fb:5d:b3:6d:
c9:31:ca:3b:cd:79:de:8e:9d:29:e8:1f:4c:35:86:44:97:e5:
97:9d:2b:07:84:d5:63:c6:89:42:0e:d8:a6:0a:1d:0b:68:1b:
b0:f7:b9:08:4b:aa:2b:d7:c1:6d:e9:d5:e3:6e:a7:41:d3:a5:
36:fe:6e:69:78:60:e5:01:f5:15:a5:75:7d:d4:53:b1:c4:c5:
f7:eb:d9:65:0f:93:95:7f:05:fd:07:f8:12:56:39:95:7b:87:
31:f4:d2:a9:52:6e:a5:6c:01:23:9b:fb:89:b7:74:41:1e:98:
ad:80:97:36:6f:9d:88:30:58:72:48:cc:70:ec:c9:c9:d0:16:
35:3d:29:0f:5f:98:65:fa:2f:d1:63:0e:7e:00:f2:c5:d9:32:
0b:71:06:31:12:c4:69:e6:c7:7f:09:06:24:90:ef:d9:1c:48:
84:86:7d:c7:1c:8f:0d:f5:96:a7:13:51:93:3d:18:4a:be:c4:
ea:06:a6:51:c8:71:7f:90:46:fc:89:10:63:ea:7c:1b:f6:17:
b6:04:a9:68:10:99:2a:6c:05:84:ef:ef:66:90:47:29:f7:da:
b2:18:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 03:02:02 2026 by rpki-client