Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/uVcuCHAgJMvLilrNVzFPzeXMYK4.roa
File: uVcuCHAgJMvLilrNVzFPzeXMYK4.roa (raw, json)
Hash identifier: 2E2U/fKjjkBxH4j8wm0zVVc215zNEeJmiD5ZpLV3U4s=
Subject key identifier: B9:57:2E:08:70:20:24:CB:CB:8A:5A:CD:57:31:4F:CD:E5:CC:60:AE
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 019FA8D2ED7080575F8EAA4210B3264CA428
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/uVcuCHAgJMvLilrNVzFPzeXMYK4.roa
Signing time: Tue 28 Jul 2026 13:03:43 +0000
ROA not before: Tue 28 Jul 2026 13:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 85.11.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d2:ed:70:80:57:5f:8e:aa:42:10:b3:26:4c:a4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Jul 28 13:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9572e08702024cbcb8a5acd57314fcde5cc60ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:e0:c6:65:ee:d5:3e:f7:14:25:8a:11:28:
b4:1c:68:fe:b9:2a:d8:e3:38:39:44:4e:1f:2e:b9:
db:95:55:a3:c7:73:08:66:47:21:9b:c8:a6:06:25:
f9:14:dc:66:ec:f1:f9:55:92:a9:95:b7:78:9e:0f:
7d:35:ba:56:13:c5:37:f9:83:f0:3b:40:85:e6:18:
4e:8e:fe:78:76:a8:69:27:84:15:32:7e:66:60:31:
e1:a7:ed:e1:81:7c:8f:4c:77:d1:22:5f:42:20:ac:
a6:95:29:3d:a6:e6:29:c5:69:18:51:7f:e2:d8:24:
4e:ee:8c:d5:91:60:65:b7:38:b6:e9:a4:99:cc:3a:
2d:b8:f6:34:a7:82:1a:32:96:3a:6c:b0:dd:4d:89:
78:7c:11:8a:1d:50:77:5f:63:e7:61:74:a4:59:fc:
b1:f9:e3:0c:3c:85:b3:37:23:e8:e0:91:7a:94:44:
53:ee:23:3a:6e:72:54:3e:d6:e6:51:cd:5e:e8:58:
99:76:98:15:66:54:51:3c:82:64:f9:84:ee:8a:04:
27:3e:d5:be:71:67:b3:59:af:26:f7:d1:cf:b0:5f:
df:2b:b9:ef:ef:1b:d0:cc:92:97:55:31:36:d6:e1:
d7:ef:39:c7:d4:5f:ad:ea:fb:e5:d6:02:ff:40:c7:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:57:2E:08:70:20:24:CB:CB:8A:5A:CD:57:31:4F:CD:E5:CC:60:AE
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/uVcuCHAgJMvLilrNVzFPzeXMYK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:be:67:43:0b:d1:5c:2e:16:c7:30:c6:5d:b5:70:e4:c7:e0:
aa:55:ff:9a:38:47:9c:1f:5a:28:a0:7e:82:29:a6:fa:06:d0:
55:4f:14:d0:82:fb:08:37:42:bf:98:f3:1f:fa:19:bb:6b:7d:
6d:4a:26:c4:34:67:fb:ba:74:89:14:2b:e8:ee:69:55:a0:68:
d3:a1:9a:ae:b7:ea:6a:cb:1c:33:fa:ff:61:20:99:0e:06:02:
2c:92:2a:3c:1c:18:2d:64:7c:ad:e7:d9:d7:b3:e5:cb:df:cb:
82:0e:42:a3:4a:5e:ce:e3:2c:42:2d:ed:1a:d1:43:b0:39:70:
0b:ea:00:95:9e:06:33:88:0a:44:ab:f9:18:e2:64:bf:88:1f:
a2:dd:f5:15:2a:ef:40:bc:1b:9d:a6:06:76:4a:fb:79:b4:3b:
cd:85:86:35:b2:f3:d4:a9:b9:6d:2f:55:bc:f0:e0:36:66:7f:
ec:fa:d2:65:bf:f6:90:17:43:4d:29:9d:18:d3:0b:fe:0c:8a:
d9:b2:95:99:94:13:51:05:cb:6d:0c:77:56:ca:b6:12:33:25:
80:a8:0a:a3:52:ab:87:0a:c2:3d:dc:5a:9f:53:69:f1:92:30:
6d:86:16:87:01:96:61:19:6e:f6:b1:67:43:f0:88:94:5f:ae:
f4:80:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 16:48:39 2026 by rpki-client