Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uwvFadinIJqP4RnnMjV5cjG3PrU.roa
File: uwvFadinIJqP4RnnMjV5cjG3PrU.roa (raw, json)
Hash identifier: jlSG9Qf0Fb1E9YGWC26FhEE5/GdLh9cvGAS1iG0obEU=
Subject key identifier: BB:0B:C5:69:D8:A7:20:9A:8F:E1:19:E7:32:35:79:72:31:B7:3E:B5
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019F1D97A082E1A113BE4B7EA7020321B6D2
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uwvFadinIJqP4RnnMjV5cjG3PrU.roa
Signing time: Wed 01 Jul 2026 12:11:43 +0000
ROA not before: Wed 01 Jul 2026 12:11:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213711
IP address blocks: 212.16.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:97:a0:82:e1:a1:13:be:4b:7e:a7:02:03:21:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 1 12:11:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb0bc569d8a7209a8fe119e73235797231b73eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:13:72:44:dd:40:a6:38:1a:02:6d:c3:38:
61:44:3c:86:3a:3c:f8:24:28:bd:6d:80:fe:a6:b1:
ab:f0:89:8f:1b:29:eb:f0:ff:67:f0:d5:2a:47:6d:
dc:50:a5:6f:12:15:f0:32:a5:31:ee:04:93:6b:71:
bd:ef:84:68:da:c7:84:95:b9:9c:4d:a5:68:06:bb:
1c:d0:53:3d:23:fb:24:d2:4a:e4:e1:f2:e4:2a:66:
7c:7e:6d:79:bb:b2:2e:ba:1c:4f:1b:80:21:98:f0:
1a:ab:a9:00:01:9e:52:50:9f:63:fe:a9:13:66:62:
81:14:26:ed:ef:a2:a0:3d:3f:50:97:1b:b1:91:35:
8f:34:44:63:69:4e:85:4e:58:ee:a4:01:30:83:b7:
7b:e7:22:c3:a2:be:ec:46:26:5c:13:6b:c1:2a:d8:
49:f1:6a:55:19:6c:e4:b0:97:d0:de:46:8d:76:53:
5b:b2:7e:d9:cf:7d:d1:f1:d4:3d:c4:59:2c:82:37:
2d:77:22:86:44:83:c0:74:a5:56:cd:00:f9:ba:d0:
1d:71:84:6a:56:d1:81:19:88:66:2b:b9:f1:7c:b0:
c1:a8:1e:33:25:ea:dd:b1:ea:5a:dc:cb:df:4f:f8:
3a:d3:1f:de:f1:3c:5a:39:14:69:e0:28:06:a3:b7:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0B:C5:69:D8:A7:20:9A:8F:E1:19:E7:32:35:79:72:31:B7:3E:B5
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uwvFadinIJqP4RnnMjV5cjG3PrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:78:34:52:ae:8c:e7:c7:7d:ca:37:8a:b1:ae:b6:5c:4c:48:
30:c8:a8:13:e4:10:70:04:65:7a:d7:54:6b:15:53:39:91:66:
23:aa:46:8c:da:bd:43:5d:ef:72:1b:48:d1:59:38:d9:27:7b:
f4:6f:1a:8d:0e:2d:41:2d:da:33:74:e4:00:e6:55:62:69:fe:
1a:18:59:12:a9:bc:88:90:4e:55:5d:5e:ee:8e:59:1d:6f:35:
73:b3:3c:ea:d5:fb:ad:08:af:98:63:26:7b:5a:78:f0:f0:cf:
0c:b3:43:2f:06:35:e6:e8:5f:86:17:a3:68:bf:56:57:b6:af:
7f:d8:e7:94:02:53:d3:c6:27:b9:dd:4b:1e:40:8c:ad:73:a0:
92:ff:51:5e:c6:ab:95:4f:f5:dc:b3:95:54:4b:e8:df:6c:67:
e0:c5:14:7d:2c:48:b5:28:05:3f:bc:53:88:8c:2e:1c:8c:80:
0f:d0:11:a5:d0:0d:0f:02:24:21:15:82:ed:35:e9:27:6d:15:
08:8a:d6:e4:0d:c2:a1:0d:21:6e:aa:a5:03:14:a7:cf:63:9c:
fd:52:e7:fc:37:9d:08:82:02:ca:99:70:3c:ba:4d:a1:d0:2b:
0e:e8:74:11:dc:48:7f:be:ed:39:11:9c:42:d5:69:98:35:95:
a5:7d:e9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:26 2026 by rpki-client