Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8a37c9-f927-4e3d-81cf-b69b1668e2bd/1/UT1GTcwdRVpR_70lZHEXiXHoRQY.roa
File: UT1GTcwdRVpR_70lZHEXiXHoRQY.roa (raw, json)
Hash identifier: ZVeBN+yTaXM/3fAg4GJcbjKVGpnaeKOIPM6Zm+idKEo=
Subject key identifier: 51:3D:46:4D:CC:1D:45:5A:51:FF:BD:25:64:71:17:89:71:E8:45:06
Certificate issuer: /CN=7237dc74d1220c25cdc63d6f93de5fcc4fc5b9ca
Certificate serial: 019E82658C638A23E5EF7D8BCBACAC8B090B
Authority key identifier: 72:37:DC:74:D1:22:0C:25:CD:C6:3D:6F:93:DE:5F:CC:4F:C5:B9:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjfcdNEiDCXNxj1vk95fzE_Fuco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8a37c9-f927-4e3d-81cf-b69b1668e2bd/1/UT1GTcwdRVpR_70lZHEXiXHoRQY.roa
Signing time: Mon 01 Jun 2026 08:55:53 +0000
ROA not before: Mon 01 Jun 2026 08:55:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13030
IP address blocks: 194.116.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8a37c9-f927-4e3d-81cf-b69b1668e2bd/1/cjfcdNEiDCXNxj1vk95fzE_Fuco.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8a37c9-f927-4e3d-81cf-b69b1668e2bd/1/cjfcdNEiDCXNxj1vk95fzE_Fuco.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjfcdNEiDCXNxj1vk95fzE_Fuco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:65:8c:63:8a:23:e5:ef:7d:8b:cb:ac:ac:8b:09:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7237dc74d1220c25cdc63d6f93de5fcc4fc5b9ca
Validity
Not Before: Jun 1 08:55:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=513d464dcc1d455a51ffbd256471178971e84506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:53:16:1a:22:d1:81:ae:ea:ae:32:65:bb:
40:a9:a0:1a:74:90:89:9d:3b:85:ac:c7:9e:b6:7d:
39:38:b4:ed:e3:d1:25:ec:2c:e9:52:d8:72:34:5d:
d4:78:77:ba:1b:b2:f5:cf:e4:07:64:98:21:93:06:
f4:08:a0:3f:4c:51:b1:cb:34:2f:ea:7b:c3:4c:c0:
40:94:c7:6c:c0:02:26:b6:f9:5b:41:d9:4a:65:61:
a0:5f:75:34:a8:6f:5f:a9:26:d4:c2:85:c9:3e:82:
0e:2c:8d:91:b1:68:44:32:bd:56:20:f1:c8:30:5b:
e7:d2:59:02:bd:6b:57:57:eb:c1:3f:c8:48:7b:f4:
d8:3c:d2:61:8d:c4:7d:3f:53:59:35:87:e9:03:b0:
7f:44:96:6e:2c:9d:0f:0c:b2:40:f7:89:17:6c:9d:
de:a7:c7:b8:7f:1c:aa:9a:d5:f9:4e:43:d3:c0:4a:
85:63:a3:ad:46:a2:cf:dd:14:3e:7c:cd:11:52:44:
3b:55:25:f6:1b:40:33:63:12:3e:d5:86:00:62:79:
41:c8:c2:d8:f5:54:93:fe:a5:0b:e6:10:95:7e:3e:
ef:b3:7b:ab:14:c5:57:7a:66:8e:4a:cb:78:9b:a3:
14:62:67:b2:21:77:4f:2c:74:9e:77:32:fb:78:f7:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:46:4D:CC:1D:45:5A:51:FF:BD:25:64:71:17:89:71:E8:45:06
X509v3 Authority Key Identifier:
keyid:72:37:DC:74:D1:22:0C:25:CD:C6:3D:6F:93:DE:5F:CC:4F:C5:B9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjfcdNEiDCXNxj1vk95fzE_Fuco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8a37c9-f927-4e3d-81cf-b69b1668e2bd/1/UT1GTcwdRVpR_70lZHEXiXHoRQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8a37c9-f927-4e3d-81cf-b69b1668e2bd/1/cjfcdNEiDCXNxj1vk95fzE_Fuco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:56:ab:ac:23:be:15:51:3c:86:ba:66:b1:58:0c:d0:92:e5:
4f:e6:b0:ed:c3:a0:af:8a:6c:17:cb:b9:94:08:bf:8c:dc:c8:
55:fc:1e:0d:4c:b5:49:4d:8c:4a:4b:75:5d:84:c2:56:e2:03:
89:71:ae:71:c7:63:6c:ff:d8:27:84:03:07:13:50:1f:c4:e8:
83:1b:69:65:a7:3a:22:86:8f:ba:ce:64:22:ad:73:05:31:26:
7c:c6:5d:40:27:ad:de:78:f7:dd:b9:bd:80:69:4c:2e:9b:c3:
b6:5b:34:7c:19:ed:cc:19:23:1f:ac:a9:42:de:18:41:a4:62:
ca:9b:40:3f:a9:9d:3f:ba:b5:96:1c:62:af:d8:dc:f4:fd:db:
f4:60:2a:47:48:36:9a:fa:e2:1a:c4:44:70:9c:2e:7f:50:66:
43:86:21:2d:55:82:37:ec:2e:cc:d9:c0:0d:b7:26:72:b8:cc:
a1:0d:ae:9f:87:c9:bf:f6:9b:a6:b1:bd:c2:7d:72:ee:9e:91:
e4:e9:68:3c:29:80:a0:ab:09:fe:de:b4:58:25:61:89:47:c9:
c9:19:bf:78:ba:8f:13:0e:ba:33:00:ea:61:25:fa:5e:f3:10:
33:da:4b:dc:77:30:c5:02:f7:74:71:7a:44:40:d1:0d:41:c8:
8f:6b:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:04:05 2026 by rpki-client