Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/uKunhyk3XJsedoH46lY9fnPCTVA.roa
File: uKunhyk3XJsedoH46lY9fnPCTVA.roa (raw, json)
Hash identifier: Aw48trw5KZXSgLxSh/nXOd1ecpyxN9Qk1fCKZrKnssE=
Subject key identifier: B8:AB:A7:87:29:37:5C:9B:1E:76:81:F8:EA:56:3D:7E:73:C2:4D:50
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368ED7C428D400AD3BF4F464A4D6166
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/uKunhyk3XJsedoH46lY9fnPCTVA.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43763
IP address blocks: 79.132.32.0/19 maxlen: 19
95.171.128.0/19 maxlen: 19
213.176.192.0/19 maxlen: 19
2a00:ba80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ed:7c:42:8d:40:0a:d3:bf:4f:46:4a:4d:61:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8aba78729375c9b1e7681f8ea563d7e73c24d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:05:a6:ef:41:44:6a:05:a9:f4:a7:81:4f:
9a:15:1f:11:9a:04:ef:1e:e7:b5:11:33:d8:c3:d0:
fa:4b:95:8a:92:2d:7d:a1:26:3e:f5:63:f2:2e:9e:
35:b6:59:37:79:28:26:92:30:68:5c:3d:e9:d3:67:
40:3b:f0:0d:a1:dd:02:f6:f5:0f:3c:76:7d:b0:13:
61:77:7b:7a:f3:94:d5:c1:21:9f:de:5d:1d:de:f6:
a5:11:27:d1:be:fd:55:c6:6b:74:ff:95:ae:2d:e7:
f7:aa:64:6c:63:97:a4:df:db:07:2b:13:86:66:9a:
04:16:b6:2b:3d:bb:da:68:dd:f7:28:92:22:1b:d2:
e4:05:27:1b:07:eb:a1:d5:67:48:48:dc:e4:c8:b7:
ee:1c:fa:69:8a:eb:8d:68:fd:c1:13:23:9f:a7:64:
e2:13:54:22:50:0e:30:e8:46:57:71:c8:b9:a6:17:
23:fb:fb:77:00:57:8c:73:73:2e:b7:56:3b:4d:8a:
de:88:bb:23:45:3b:39:90:43:4e:32:de:3b:9b:88:
fe:0c:eb:29:82:a8:be:ec:bd:b6:23:d0:5c:f6:11:
fc:d6:f3:5b:3f:c8:d2:1d:04:9b:66:e5:b6:38:0c:
d1:49:9e:e3:98:a3:95:24:5c:25:40:9f:ff:c9:f6:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AB:A7:87:29:37:5C:9B:1E:76:81:F8:EA:56:3D:7E:73:C2:4D:50
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/uKunhyk3XJsedoH46lY9fnPCTVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.32.0/19
95.171.128.0/19
213.176.192.0/19
IPv6:
2a00:ba80::/32
Signature Algorithm: sha256WithRSAEncryption
35:6e:6c:26:f0:12:92:aa:9f:2a:79:44:35:bd:46:d9:28:82:
f6:8e:f6:61:9f:73:e1:91:6e:a8:91:5c:55:db:60:dc:0f:35:
08:9b:fa:0e:d3:09:b6:a4:cf:d3:d0:c8:06:d5:e3:72:aa:95:
70:7c:ac:f0:65:ca:ac:a4:ed:7c:3a:36:d0:50:1e:c4:89:d2:
6d:e9:f6:51:3c:d7:ac:b6:d3:18:af:b2:c6:8b:78:38:ed:ed:
c3:4b:77:c0:dd:27:a9:a5:b9:7e:4c:34:6b:c5:80:25:b0:0c:
17:85:79:29:3e:7b:ee:83:fc:a3:6d:c5:b3:27:73:1b:f1:60:
62:aa:dc:a9:b0:bf:e2:c8:8f:52:b0:d6:bf:95:dc:01:0d:6d:
df:67:ab:0a:33:6d:92:af:5f:98:b3:d6:52:df:eb:f6:d1:b0:
68:78:95:55:f1:83:ed:31:ab:37:01:13:20:70:aa:41:54:7a:
ff:40:91:f3:80:13:bb:b8:52:32:73:2a:f8:d9:b4:33:54:b0:
44:a4:b2:02:03:70:2b:a0:2d:ef:64:15:9f:77:21:03:32:bd:
06:da:d8:3b:13:f2:a3:e0:4b:34:93:0a:f1:6f:48:5c:66:d1:
ab:28:f9:67:ed:5c:6d:a8:d7:ef:24:8c:28:fa:4a:46:4f:a6:
85:be:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:53 2026 by rpki-client