Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa
File: UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa (raw, json)
Hash identifier: 2bdOr/wIOcULD+99fYfl0oPnDBufy+6gGb+f1589cJ0=
Subject key identifier: 51:92:9D:CA:26:2E:10:98:0A:D4:25:DF:E2:58:5C:ED:99:1F:28:F5
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019EDD758BB77A669DA327F069DFF3CA4360
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa
Signing time: Fri 19 Jun 2026 01:18:48 +0000
ROA not before: Fri 19 Jun 2026 01:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198160
IP address blocks: 31.22.73.0/24 maxlen: 24
185.79.19.0/24 maxlen: 24
185.230.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:75:8b:b7:7a:66:9d:a3:27:f0:69:df:f3:ca:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 19 01:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51929dca262e10980ad425dfe2585ced991f28f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:92:29:73:15:6a:34:54:1b:1e:3c:e8:1b:
66:21:7f:35:f2:36:30:07:30:a3:13:81:27:23:b7:
dc:a3:aa:78:16:b7:fd:f3:dd:e9:c3:bc:b7:3c:e0:
90:7f:3f:35:a4:a5:90:fc:83:7a:2d:7b:6e:c9:f5:
2e:ef:33:f5:f6:03:47:39:4d:fb:3b:aa:0e:ff:13:
c3:bb:7a:be:c8:40:a3:79:90:27:2d:cb:db:90:46:
27:fe:e6:eb:a4:e5:5a:ff:01:e6:3f:d3:b7:c3:86:
05:40:9d:e6:e7:db:b0:82:fe:a2:30:52:20:97:d6:
51:90:d7:44:54:b9:7e:1e:8f:66:6c:29:14:85:10:
6f:0a:6e:19:6f:8a:c7:72:27:61:4f:9f:7d:d1:b3:
b8:31:14:db:f7:cd:01:35:2a:47:f7:f4:1b:fe:ec:
9a:11:ed:1d:dd:a7:bf:89:50:38:e7:b5:a0:ba:93:
33:80:17:a7:c8:22:0a:2e:85:ee:6b:37:f9:03:19:
b0:ec:13:a8:be:c4:37:de:07:aa:ca:b1:54:f4:98:
06:61:9d:84:1d:e1:eb:35:c6:73:64:4c:09:7a:b7:
bc:74:5f:58:75:a7:f5:16:f5:de:65:d7:49:47:77:
8b:db:ae:40:15:5c:68:da:72:6a:f2:be:34:cb:ca:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:92:9D:CA:26:2E:10:98:0A:D4:25:DF:E2:58:5C:ED:99:1F:28:F5
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.73.0/24
185.79.19.0/24
185.230.160.0/24
Signature Algorithm: sha256WithRSAEncryption
99:64:50:2a:8d:97:7d:72:11:d7:c7:de:80:ef:0d:4b:cb:93:
94:5c:4a:42:05:bd:fb:c3:8e:d6:bc:ba:af:c3:50:36:65:0c:
42:26:d2:ac:ae:5b:f9:40:10:b3:a4:f9:48:51:59:02:e9:5c:
44:c7:eb:20:e7:21:c4:22:56:be:c8:42:5c:00:14:87:73:6d:
37:35:2d:c9:70:9e:20:b9:aa:51:27:42:70:f8:0a:62:a0:c5:
9e:dd:0b:04:72:b5:64:d0:b1:67:e5:bb:81:59:7e:1e:a3:7c:
bd:2d:a6:25:58:bf:04:c9:0e:fd:17:0b:a1:a2:6c:ff:fd:c6:
eb:c6:87:87:3e:cd:2c:a2:3b:e9:d4:e7:14:e1:e7:71:71:df:
08:cf:e0:e6:48:b3:c7:ba:c9:21:f4:bd:52:ab:af:5d:33:4a:
93:28:fc:db:02:68:0e:63:c7:f4:ca:a1:23:12:ab:50:7f:b9:
40:fe:0a:a4:a8:4c:63:c5:4b:bb:4f:04:46:31:0f:32:c3:2a:
d0:9b:a5:a3:21:2c:1f:1b:fc:fd:46:74:74:e2:6c:e7:a9:ec:
84:5b:d0:a2:da:2d:25:a6:6d:1b:1e:2e:47:ae:cd:f1:eb:46:
25:8f:19:b6:43:72:f5:76:74:43:e4:eb:b3:08:4b:50:c7:24:
42:41:23:b5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ7ddYu3emadoyfwad/zykNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYwNjE5MDExODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTkyOWRjYTI2MmUxMDk4MGFkNDI1ZGZlMjU4NWNlZDk5MWYyOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBWSKXMVajRUGx486BtmIX818jYw
BzCjE4EnI7fco6p4Frf9893pw7y3POCQfz81pKWQ/IN6LXtuyfUu7zP19gNHOU37
O6oO/xPDu3q+yECjeZAnLcvbkEYn/ubrpOVa/wHmP9O3w4YFQJ3m59uwgv6iMFIg
l9ZRkNdEVLl+Ho9mbCkUhRBvCm4Zb4rHcidhT5990bO4MRTb980BNSpH9/Qb/uya
Ee0d3ae/iVA457WgupMzgBenyCIKLoXuazf5Axmw7BOovsQ33geqyrFU9JgGYZ2E
HeHrNcZzZEwJere8dF9Ydaf1FvXeZddJR3eL265AFVxo2nJq8r40y8qFOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFGSncomLhCYCtQl3+JYXO2ZHyj1MB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvVVpLZHlpWXVFSmdLMUNYZjRsaGM3WmtmS1BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHxZJAwQA
uU8TAwQAueagMA0GCSqGSIb3DQEBCwUAA4IBAQCZZFAqjZd9chHXx96A7w1Ly5OU
XEpCBb37w47WvLqvw1A2ZQxCJtKsrlv5QBCzpPlIUVkC6VxEx+sg5yHEIla+yEJc
ABSHc203NS3JcJ4guapRJ0Jw+ApioMWe3QsEcrVk0LFn5buBWX4eo3y9LaYlWL8E
yQ79Fwuhomz//cbrxoeHPs0sojvp1OcU4edxcd8Iz+DmSLPHuskh9L1Sq69dM0qT
KPzbAmgOY8f0yqEjEqtQf7lA/gqkqExjxUu7TwRGMQ8ywyrQm6WjISwfG/z9RnR0
4mznqeyEW9Ci2i0lpm0bHi5Hrs3x60Yljxm2Q3L1dnRD5OuzCEtQxyRCQSO1
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:05 2026 by rpki-client