Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UttjQQ0y15-m4F48T44xCa0sPlg.roa
File: UttjQQ0y15-m4F48T44xCa0sPlg.roa (raw, json)
Hash identifier: v6LBrPa9FUl2/1uPVtq+W7o4UT895VFNro5qoG0nZ8A=
Subject key identifier: 52:DB:63:41:0D:32:D7:9F:A6:E0:5E:3C:4F:8E:31:09:AD:2C:3E:58
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368CAA6C418B749B2276282B34D3E97
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UttjQQ0y15-m4F48T44xCa0sPlg.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 82.152.12.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:a6:c4:18:b7:49:b2:27:62:82:b3:4d:3e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52db63410d32d79fa6e05e3c4f8e3109ad2c3e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:85:3f:a0:e5:1a:07:1a:1f:88:49:98:7f:
b6:8a:ed:ff:dd:11:e4:0f:f7:9d:4a:ff:81:9b:b8:
4c:22:ab:65:27:c1:d7:8e:c9:9d:a7:bb:76:31:31:
93:62:b5:93:f8:e9:6e:f9:0c:b4:88:c0:63:40:7e:
8d:28:3f:53:0d:62:50:cf:b2:aa:e5:c3:55:1b:2a:
05:0b:13:74:28:24:0b:11:a7:5c:a6:4b:88:85:5b:
36:9a:ee:ca:3d:a7:47:ba:4d:6d:77:c5:1d:43:80:
1d:d5:f1:5b:b7:22:c9:fb:cd:47:60:d9:50:f9:1d:
9d:2c:32:54:26:ad:4b:59:e4:d2:24:dd:00:ec:78:
b9:16:c7:f6:30:aa:43:2f:38:25:df:64:52:7c:07:
df:5f:0f:6d:2c:ad:c3:62:10:ea:a7:ba:b7:fd:d5:
3a:db:a6:19:73:4c:bc:3d:58:a3:60:3e:a8:d7:74:
f3:d9:c3:49:42:cd:a0:5d:29:17:cf:2f:18:88:13:
eb:64:bd:88:c4:85:9e:f5:a0:71:43:a9:2f:b4:a9:
2a:9a:9e:2f:97:fc:19:20:2e:06:82:ac:c7:4d:b6:
10:25:0a:a0:a9:e3:53:3d:d1:7b:3b:50:4b:4f:4a:
44:b5:a1:9a:5b:f9:ba:bf:d8:b8:f9:f3:f7:aa:11:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DB:63:41:0D:32:D7:9F:A6:E0:5E:3C:4F:8E:31:09:AD:2C:3E:58
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UttjQQ0y15-m4F48T44xCa0sPlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
109.176.248.0/24
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d7:62:df:e0:a0:0c:39:aa:6a:d8:fa:9e:21:f9:38:df:f0:
44:4d:41:2c:5a:4a:e3:35:4f:b0:6c:ea:2f:bc:f6:51:dc:b4:
6c:5a:19:d7:72:06:70:d1:88:08:29:52:3d:42:c1:0d:f2:c3:
b2:b6:51:88:d8:f0:04:09:62:ff:a8:42:e3:b8:1a:13:8c:85:
14:13:51:2c:7f:92:91:a3:6a:3b:6c:a7:68:bc:ac:ca:c5:b9:
cb:85:65:19:0a:38:3f:07:65:04:6e:2e:54:bf:2c:23:84:8b:
1a:47:4a:2c:da:c4:c5:57:6d:45:85:7f:07:80:0f:b8:d5:e5:
e4:49:63:63:ed:ab:4f:0d:46:e7:24:67:c6:39:70:72:de:42:
09:6b:01:ee:9e:c1:3e:b1:87:45:f5:ad:49:ad:9c:17:4a:1a:
60:6e:31:bd:60:49:99:f5:24:c4:3f:a4:0e:01:cc:fc:f9:22:
be:04:f7:58:ef:57:44:3b:9d:02:73:39:67:dc:5d:ea:01:b6:
8f:af:22:4c:37:14:15:49:40:1b:b5:59:ab:7d:c0:2b:fc:f5:
d7:5f:5a:3e:a1:b5:62:ae:8e:02:44:a2:da:71:2b:f4:61:1e:
b4:dc:2f:23:c1:d1:f4:24:d5:27:3a:02:85:3d:b9:e4:17:61:
2d:36:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:48 2026 by rpki-client