Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa
File: uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa (raw, json)
Hash identifier: xUsnHAqc45PDBJI9W1Q0WWyWxZ/wh0Cqvc+48QO7JKE=
Subject key identifier: B8:A2:36:45:CF:99:6E:05:01:6C:95:F6:FC:35:9C:43:CF:E9:E5:E1
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019F23685475073C7DBDA364B11AC2A04F5E
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196726
IP address blocks: 79.173.68.0/22 maxlen: 22
94.243.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:54:75:07:3c:7d:bd:a3:64:b1:1a:c2:a0:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8a23645cf996e05016c95f6fc359c43cfe9e5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:67:03:45:d2:38:f1:d9:4d:4c:0c:02:f4:
72:8c:9a:22:a3:28:21:2e:6a:bc:e8:60:ac:41:44:
58:ce:74:bc:cb:57:ea:20:71:73:97:a6:91:d9:a8:
02:fe:4f:22:da:5d:1f:cd:f8:9b:14:bd:db:f1:14:
68:44:7b:91:4c:b9:1e:9f:ea:fe:e6:bb:cc:59:86:
ae:3b:d7:37:4e:0e:43:e3:98:d9:2a:38:4f:27:fc:
9a:56:63:1b:39:06:e0:8a:ba:42:14:19:44:08:3a:
8d:5a:08:b9:3b:ce:86:5c:cc:f1:bb:c5:f3:9b:b0:
ab:ff:85:be:22:c3:3c:1f:2f:a3:b4:f2:cb:ec:21:
0e:90:26:2b:73:1a:af:a3:a6:4e:c2:36:d6:94:01:
a3:82:1b:16:ee:3e:36:05:98:4e:2c:05:df:b0:12:
96:23:f8:90:b5:d3:16:39:c9:71:82:fd:21:2b:93:
be:d5:6c:82:02:67:2d:dc:c0:9a:c2:81:bb:54:25:
4d:94:82:35:73:50:de:ff:9a:0b:10:84:57:44:f2:
d9:bf:64:10:c4:da:7a:27:07:79:d4:23:28:72:1e:
cd:1b:f1:84:42:60:0f:e3:0c:f0:da:0b:74:33:76:
99:7c:5b:bc:6b:89:4b:3c:4c:c1:d8:ea:9a:45:1d:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:36:45:CF:99:6E:05:01:6C:95:F6:FC:35:9C:43:CF:E9:E5:E1
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.68.0/22
94.243.216.0/22
Signature Algorithm: sha256WithRSAEncryption
13:a9:f4:cc:f7:4e:32:5d:9a:7d:bf:37:a5:50:ba:e7:ac:db:
13:3e:d6:29:a8:95:0c:c0:eb:eb:fb:73:85:d5:9a:43:ba:71:
19:98:4f:b5:5f:9f:c6:33:8f:ab:e8:05:90:5b:8e:38:dc:02:
90:fe:0d:52:01:af:4c:1c:b0:4a:94:7f:97:81:f5:38:70:cc:
ab:e4:e8:46:26:d3:66:56:2f:ad:e0:b0:a2:52:30:fd:72:01:
54:d4:6e:bf:3c:f5:88:40:7d:79:c8:70:bb:57:f1:9c:bf:7d:
1d:94:ab:15:34:ce:3a:2d:d2:7e:0d:c6:41:39:c6:fc:36:62:
90:d2:b8:b8:ee:9f:93:e8:16:41:b1:e4:29:cc:ff:a4:4d:ba:
ea:ab:54:35:66:4c:d3:84:30:24:c3:81:00:78:88:f7:bd:cd:
ce:b6:35:e3:92:0f:15:8a:e0:d1:3b:d1:80:7b:c4:02:3f:79:
e7:6e:86:dd:f3:a3:a9:0e:bf:a8:4c:eb:65:75:b7:6b:11:3d:
cc:fa:8a:ea:de:a9:65:fe:6b:f7:1e:77:92:3d:bb:8c:6a:1a:
e6:72:16:3f:fa:36:40:bd:ed:48:c5:07:99:a3:01:2f:db:af:
fa:28:a0:41:12:56:97:82:01:cc:91:ca:ae:05:2e:ba:29:91:
c5:1d:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:17 2026 by rpki-client