Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/UGPRCcRwCxmD212yXnFn6rGxyZs.roa
File: UGPRCcRwCxmD212yXnFn6rGxyZs.roa (raw, json)
Hash identifier: Rr/MnDTFXlxKNuJFFVDipyDc937yhBa1XA4JFiwrOyg=
Subject key identifier: 50:63:D1:09:C4:70:0B:19:83:DB:5D:B2:5E:71:67:EA:B1:B1:C9:9B
Certificate issuer: /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial: 01A038A0F5904E4EF9C641C04B35A39EDD0C
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/UGPRCcRwCxmD212yXnFn6rGxyZs.roa
Signing time: Tue 25 Aug 2026 11:14:27 +0000
ROA not before: Tue 25 Aug 2026 11:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31424
IP address blocks: 195.20.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:a0:f5:90:4e:4e:f9:c6:41:c0:4b:35:a3:9e:dd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Validity
Not Before: Aug 25 11:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5063d109c4700b1983db5db25e7167eab1b1c99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:94:8a:06:d7:bb:dd:ed:90:c3:c7:09:ea:
3c:bb:81:f0:37:7e:8a:82:0a:86:28:31:98:ce:16:
a8:7b:78:25:f2:70:75:6b:e2:74:d9:61:1b:a5:82:
b5:d6:63:06:3b:21:26:eb:45:09:09:6b:9b:da:66:
73:08:b1:e3:e4:ba:19:cb:0a:08:4f:cc:ea:f1:54:
b7:42:c4:a9:f0:4d:44:ac:33:32:e6:47:39:d6:b4:
a0:e4:25:6d:5b:dc:04:8b:21:17:24:49:30:cb:90:
6b:4c:02:e8:82:ca:38:f2:90:48:a4:46:e6:c1:2e:
1f:5a:d1:e2:16:d5:20:4a:2c:f6:0b:4c:c7:6e:63:
fa:40:9b:4f:eb:17:e6:05:af:8c:7a:0e:e8:bc:4f:
a2:dc:45:8a:4b:0a:f9:10:12:11:4d:83:ac:3b:2f:
6b:4d:60:60:3f:52:b0:88:de:ee:25:49:3c:7e:c0:
1f:bf:b4:a0:33:e9:91:b0:9d:e4:ca:c8:c7:59:cb:
b5:80:66:64:d2:6b:f4:0c:aa:95:9e:ae:ef:86:f0:
3d:08:df:8c:52:ac:d1:29:7e:a1:40:58:8f:44:7b:
1c:00:90:f6:4a:40:46:d8:50:79:1a:8d:2b:02:35:
9a:a9:30:1a:c1:94:a5:1b:35:cb:2c:6d:ef:21:bf:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:D1:09:C4:70:0B:19:83:DB:5D:B2:5E:71:67:EA:B1:B1:C9:9B
X509v3 Authority Key Identifier:
keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/UGPRCcRwCxmD212yXnFn6rGxyZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.157.0/24
Signature Algorithm: sha256WithRSAEncryption
11:08:21:98:16:39:56:17:34:1a:6e:22:8b:0e:f2:ab:da:f8:
29:a3:71:75:55:33:43:20:86:49:bf:11:da:bb:a7:73:2d:f8:
bc:ec:d0:b0:5c:ce:46:e8:18:14:c5:ec:f0:a1:9c:c4:fb:d4:
9b:51:f5:e8:ed:5e:96:83:56:15:ad:5e:f0:57:1a:89:80:e1:
4d:b8:6b:c5:2f:3c:8b:45:b5:0e:bc:fc:29:7a:5e:88:e4:b4:
88:5c:ad:2e:42:4c:43:1c:cc:a2:a2:ce:08:1b:a6:95:e5:a5:
d6:32:4e:8d:0f:2a:14:25:89:f2:b7:ce:b1:90:ee:e7:47:83:
a9:62:d7:95:a2:0b:80:c7:bb:41:39:fe:97:7c:35:9e:6c:9f:
bc:3a:f9:28:65:fc:7c:8c:d8:a2:bc:9e:3e:7d:1e:e6:03:aa:
03:8c:e1:22:a7:3b:4a:37:45:d0:7d:aa:17:dc:12:ea:39:47:
9d:27:f8:b0:15:38:12:63:43:30:68:f1:a2:17:41:2f:6d:32:
5c:0a:3f:e2:53:31:dc:7a:62:43:b1:9c:52:64:f8:89:f8:39:
1b:18:9d:b9:c9:35:3e:7c:d6:76:cd:d0:b0:23:19:e3:16:ff:
a5:35:76:fc:65:a9:b4:ca:a2:ef:3d:9f:67:73:92:3c:88:10:
7a:29:13:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:15 2026 by rpki-client