Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/u5Wmno2-hRjI1PGqDV0RbxneBGk.roa
File: u5Wmno2-hRjI1PGqDV0RbxneBGk.roa (raw, json)
Hash identifier: ZgouBkK7QM2gimm4i/uzf3BPl4ttezFbD0eANUUCaes=
Subject key identifier: BB:95:A6:9E:8D:BE:85:18:C8:D4:F1:AA:0D:5D:11:6F:19:DE:04:69
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019FC8071762E45AC5C206DEA5E36CC6F039
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/u5Wmno2-hRjI1PGqDV0RbxneBGk.roa
Signing time: Mon 03 Aug 2026 14:28:55 +0000
ROA not before: Mon 03 Aug 2026 14:28:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 62.76.164.0/24 maxlen: 24
193.232.88.0/22 maxlen: 24
193.232.204.0/23 maxlen: 24
193.232.220.0/23 maxlen: 24
193.232.222.0/24 maxlen: 24
194.190.210.0/23 maxlen: 24
195.19.168.0/22 maxlen: 24
195.19.172.0/22 maxlen: 24
195.208.80.0/22 maxlen: 24
195.208.86.0/23 maxlen: 24
195.208.88.0/22 maxlen: 24
195.208.92.0/22 maxlen: 24
212.192.56.0/22 maxlen: 24
212.192.60.0/22 maxlen: 24
212.193.184.0/22 maxlen: 24
212.193.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:07:17:62:e4:5a:c5:c2:06:de:a5:e3:6c:c6:f0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Aug 3 14:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb95a69e8dbe8518c8d4f1aa0d5d116f19de0469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:d1:63:7e:73:a4:2e:84:57:29:e3:6b:9e:
2d:2d:f7:8a:ca:f8:00:b5:49:bc:e6:25:c8:d5:6f:
6b:45:ee:4f:f1:1e:95:38:e4:ac:02:56:6f:73:ab:
5a:97:cc:5a:31:fd:c4:81:9e:00:02:2f:67:2b:83:
4a:62:8b:92:33:44:5c:3b:7b:e4:b5:4f:06:ab:d7:
65:b4:7a:6e:da:90:25:12:24:95:b2:1d:fb:54:1e:
1a:b8:9e:e0:e7:75:d1:c8:17:f0:5c:0e:14:c5:e7:
c2:ce:a9:1c:0e:3c:ff:ed:85:5a:bf:bb:07:fb:57:
5b:f0:47:af:47:f4:11:ea:04:58:2a:01:47:66:23:
55:62:09:1b:32:5e:c1:eb:63:1b:55:b7:17:d3:3e:
76:65:01:24:05:0b:4e:eb:b3:6c:88:72:28:ab:5c:
d6:bd:81:61:63:e8:78:97:20:7c:6b:a6:50:96:af:
14:d6:36:56:2b:d7:a6:e2:96:36:48:80:37:c7:31:
be:aa:1b:12:47:d8:53:ab:b3:6a:8e:3f:9d:8b:e4:
6d:d2:d0:11:f4:3e:dd:1d:05:9c:da:fe:a7:ca:40:
93:29:f4:f2:ac:69:96:89:46:a8:d5:bc:f7:4b:c8:
03:87:e2:1c:e0:e6:1f:a3:a4:6f:bd:2f:51:20:14:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:A6:9E:8D:BE:85:18:C8:D4:F1:AA:0D:5D:11:6F:19:DE:04:69
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/u5Wmno2-hRjI1PGqDV0RbxneBGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.164.0/24
193.232.88.0/22
193.232.204.0/23
193.232.220.0-193.232.222.255
194.190.210.0/23
195.19.168.0/21
195.208.80.0/22
195.208.86.0-195.208.95.255
212.192.56.0/21
212.193.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:f1:50:86:08:43:f6:71:22:67:a0:2f:47:83:90:b9:57:d8:
8e:3a:a1:0b:bf:24:54:9d:7d:80:5c:2b:85:2a:c9:6b:aa:4f:
3b:62:43:79:ed:cd:63:e0:59:99:ba:b9:9d:c2:1b:5f:39:25:
d7:46:72:83:9f:b6:21:82:fd:b8:26:aa:27:17:bc:65:4e:90:
e0:b8:72:9a:4e:10:55:b9:b0:5c:f7:52:19:94:26:c6:c2:40:
ed:87:a5:f8:84:5c:13:f0:17:c3:6b:c1:0b:80:fe:2b:23:f9:
07:b9:47:a4:b0:79:6b:ce:43:6b:9e:59:ad:a6:41:b4:a3:c1:
c4:a7:4d:b5:e9:b0:ab:3d:16:17:8e:80:64:2f:b2:ef:29:94:
c9:98:dc:3e:e1:29:c7:ba:2f:c5:47:2d:2a:27:00:ad:dc:15:
06:87:7f:0c:70:8a:0e:39:ab:93:f1:28:c8:c1:b0:2f:5f:ec:
8a:86:c5:10:28:c7:4a:5a:ef:6d:82:7f:43:06:62:05:41:3c:
16:e9:67:c2:e6:28:b3:93:58:a0:06:ed:ec:c3:82:c8:1c:41:
61:f5:57:d5:de:25:98:e0:56:0e:f3:be:b7:be:b6:90:2c:74:
8c:fa:a0:82:a9:b8:16:25:dc:db:bb:09:68:98:71:be:f4:a9:
63:08:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:42 2026 by rpki-client