Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UccI0dm6jXP5EhFbbtqbX_nXwXk.roa
File: UccI0dm6jXP5EhFbbtqbX_nXwXk.roa (raw, json)
Hash identifier: qpM1g2wzOnm7b2qkmwwUZxn0tKAruva1mPFWglM3/SM=
Subject key identifier: 51:C7:08:D1:D9:BA:8D:73:F9:12:11:5B:6E:DA:9B:5F:F9:D7:C1:79
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E87348BF3DAA8C08E2421884AAD97EC96
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UccI0dm6jXP5EhFbbtqbX_nXwXk.roa
Signing time: Tue 02 Jun 2026 07:20:28 +0000
ROA not before: Tue 02 Jun 2026 07:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 81.5.156.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.140.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:34:8b:f3:da:a8:c0:8e:24:21:88:4a:ad:97:ec:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 2 07:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51c708d1d9ba8d73f912115b6eda9b5ff9d7c179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:db:62:b3:07:cc:9f:ad:32:e3:bb:b8:6a:
59:68:8a:c4:14:02:f7:c9:e0:a4:a9:96:1d:8f:d5:
a7:76:b4:28:2f:79:e5:4c:99:0e:d0:c0:70:de:d6:
c9:44:51:5e:f2:d6:68:3c:ad:4c:6b:2f:e7:26:fe:
b9:1e:ef:9d:6a:1e:1f:2f:9d:ed:06:a3:08:51:64:
68:6f:d3:90:39:c2:1a:46:d5:db:0a:c1:3c:9e:63:
19:9c:ca:3f:a0:e8:8f:34:0c:4f:73:8a:c9:c9:07:
c5:16:cf:c3:7b:ad:ea:4a:f7:51:53:24:67:b0:40:
a1:81:bd:34:ae:73:c5:2e:f4:80:48:68:d0:5c:0f:
5f:a1:97:b8:13:bc:34:ad:16:bc:67:c1:f5:f3:90:
67:b7:e6:bb:10:69:54:53:7e:15:74:7d:80:e0:f1:
4f:62:53:2c:58:15:d2:be:25:e2:99:9b:03:28:37:
f2:18:20:4e:67:fb:82:09:02:7a:d0:68:b8:78:c2:
d4:cc:e8:b3:31:4f:55:6f:a7:14:56:a5:fc:b6:3f:
e7:ff:7b:9a:26:44:db:de:c6:01:68:f3:d1:0f:db:
d5:6f:ff:34:4b:7d:ec:77:3a:b9:f2:6e:a1:18:75:
6a:2c:0f:b4:74:7a:38:9b:c2:0c:99:23:85:4e:7b:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:08:D1:D9:BA:8D:73:F9:12:11:5B:6E:DA:9B:5F:F9:D7:C1:79
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UccI0dm6jXP5EhFbbtqbX_nXwXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
82.152.111.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.137.0/24
82.153.139.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.240.0/24
82.153.250.0/24
89.213.153.0/24
109.176.209.0/24
109.176.211.0/24
109.176.216.0/21
109.176.249.0/24
213.152.61.0-213.152.62.255
Signature Algorithm: sha256WithRSAEncryption
4c:30:3a:ed:d4:f2:89:92:1b:97:a2:79:b3:29:f3:45:dc:74:
f7:10:b8:5b:17:93:b2:ac:23:f2:e1:88:f9:4c:5d:38:b0:4a:
f5:1c:9a:6a:1a:5a:2e:2a:37:f2:72:1d:c1:04:ee:53:8b:67:
b2:87:46:d9:b0:50:09:a1:3e:d2:2d:ec:5b:01:7d:cc:8d:9e:
e8:b6:39:32:8f:dd:04:d2:67:bf:27:72:da:75:e0:78:8f:b7:
44:d3:f9:f7:76:f3:8d:a9:79:66:11:de:90:d6:b3:52:ba:3a:
8b:1b:d7:50:b0:e2:d0:80:a8:8f:03:5f:61:04:9f:cc:7b:16:
b6:e9:27:e7:d6:b9:11:20:35:75:44:cb:63:35:48:3e:9f:21:
b3:24:b4:0d:5d:06:86:99:14:a9:9b:a4:da:89:c4:07:a0:12:
7d:82:55:0f:7d:09:69:9d:8d:c1:d8:13:22:2e:8c:ca:93:2e:
21:09:fe:43:1e:bc:52:91:c0:53:33:11:87:5b:83:38:ae:fa:
a8:eb:fd:58:a4:74:0c:56:12:2d:1c:d9:95:f5:c5:92:53:65:
64:09:1e:c8:d4:bb:6e:77:81:b4:16:c7:83:b3:b0:7a:11:e8:
3d:93:8b:9a:c8:11:06:e6:86:b9:80:cb:30:bc:8d:62:8f:c9:
8c:83:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:11 2026 by rpki-client