Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/uGvI-YJiBZm_CX_Mfcpj7BMd7qY.roa
File: uGvI-YJiBZm_CX_Mfcpj7BMd7qY.roa (raw, json)
Hash identifier: hudIU2XaMQ5FOKPriX4aD5JP7Gpmax5hlY7F7k4okbo=
Subject key identifier: B8:6B:C8:F9:82:62:05:99:BF:09:7F:CC:7D:CA:63:EC:13:1D:EE:A6
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 019FB722230A7E40B8F88AAC61879D35B437
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/uGvI-YJiBZm_CX_Mfcpj7BMd7qY.roa
Signing time: Fri 31 Jul 2026 07:44:55 +0000
ROA not before: Fri 31 Jul 2026 07:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196954
IP address blocks: 130.255.120.0/21 maxlen: 21
145.63.192.0/20 maxlen: 20
185.63.124.0/22 maxlen: 22
2a04:9740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:22:23:0a:7e:40:b8:f8:8a:ac:61:87:9d:35:b4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Jul 31 07:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b86bc8f982620599bf097fcc7dca63ec131deea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:93:14:91:84:a9:b3:2f:03:aa:cc:25:3a:
f9:34:9d:6e:bb:8f:e7:70:3b:1d:3b:fa:de:79:c6:
5c:53:da:a5:0a:57:31:6c:67:bc:f0:6f:af:39:52:
55:3e:4e:3e:fb:58:79:e1:aa:10:15:40:ef:b1:54:
89:54:05:6f:37:cf:f9:9f:e4:e9:09:a3:76:f6:59:
4f:ec:ad:c7:e4:58:da:f4:f3:64:1f:df:fd:ab:f8:
d0:65:3d:35:05:ac:43:53:0c:fe:73:85:b1:06:7b:
69:2f:9d:8e:3b:32:cd:48:ed:e5:77:bc:37:aa:bc:
61:ad:a9:61:de:99:3a:6f:7d:12:7c:40:1b:e7:60:
e3:c5:f7:de:3a:c0:5e:a6:5f:a1:86:f3:01:5d:40:
7c:5e:9c:e7:1b:5a:00:41:d2:5c:ea:bd:c8:65:92:
a9:1e:84:79:12:4f:45:97:66:25:13:6a:c0:cf:9a:
a8:11:c6:58:dc:a6:19:b5:89:a9:b4:29:e8:66:c9:
05:48:9b:35:9f:4f:2d:fb:10:ae:56:6d:88:aa:03:
40:8e:7e:65:9e:d2:ce:f6:3c:62:b9:c9:a9:fb:21:
37:c7:be:f3:8c:90:95:97:2e:99:61:f9:2c:c9:84:
c7:ea:b8:34:4e:4c:4d:68:de:8e:b7:67:72:bf:9a:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6B:C8:F9:82:62:05:99:BF:09:7F:CC:7D:CA:63:EC:13:1D:EE:A6
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/uGvI-YJiBZm_CX_Mfcpj7BMd7qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.120.0/21
145.63.192.0/20
185.63.124.0/22
IPv6:
2a04:9740::/29
Signature Algorithm: sha256WithRSAEncryption
6e:e3:e2:e0:24:50:73:17:2f:ce:f2:14:1d:51:ee:e4:6e:68:
45:9a:c3:32:4a:aa:a6:c6:be:b1:33:d2:84:9b:b6:71:16:20:
6b:95:5f:e1:6b:8b:b9:72:c7:57:7e:55:92:0c:3f:d6:31:2e:
70:65:4b:6c:52:c2:13:b8:94:08:6a:d7:5a:60:46:97:ab:9f:
ab:48:d1:3e:f7:30:e7:3b:43:87:56:d2:4d:c8:56:ec:ae:7c:
8a:a5:7b:05:50:44:45:41:17:2c:95:79:22:95:31:64:61:f9:
80:2a:60:e1:ee:74:a1:e1:46:a1:dc:35:f3:ba:1f:15:f8:97:
ec:38:13:51:fd:25:a6:de:cc:fe:75:1e:f3:69:d3:6d:fd:91:
96:c1:99:c4:df:86:bc:8a:19:e6:7e:7f:f6:82:96:9b:80:58:
7c:be:30:b9:83:55:ac:a0:e2:a3:3d:06:fe:24:88:f7:2a:37:
71:ee:26:ef:dc:a2:54:a0:3a:57:4e:16:34:0d:f9:da:3f:b8:
b2:80:0a:8a:c1:2d:f8:dc:2c:5f:68:18:55:4a:bf:f3:24:8b:
7f:56:3b:f6:6c:b9:6c:11:0a:3f:76:0d:e3:31:67:2c:eb:a2:
6c:f7:17:c4:70:25:8e:d7:23:2a:8b:e8:56:b2:9b:83:4a:bf:
30:90:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:49:49 2026 by rpki-client