Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uIGEX1uisDiuuVZZhWcgyqQjp5c.roa
File: uIGEX1uisDiuuVZZhWcgyqQjp5c.roa (raw, json)
Hash identifier: qEH3nEE6ROKF4XaVabIDjB31cX/MesmVhkpaxYWS0lI=
Subject key identifier: B8:81:84:5F:5B:A2:B0:38:AE:B9:56:59:85:67:20:CA:A4:23:A7:97
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FDC7BD94911DD7D974F93449C984ED769
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uIGEX1uisDiuuVZZhWcgyqQjp5c.roa
Signing time: Fri 07 Aug 2026 13:48:51 +0000
ROA not before: Fri 07 Aug 2026 13:48:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 89.40.92.0/24 maxlen: 24
178.239.198.0/24 maxlen: 24
178.239.204.0/24 maxlen: 24
185.192.70.0/24 maxlen: 24
185.228.225.0/24 maxlen: 24
194.32.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:7b:d9:49:11:dd:7d:97:4f:93:44:9c:98:4e:d7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 7 13:48:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b881845f5ba2b038aeb95659856720caa423a797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:30:f8:61:05:ab:c7:66:0b:a5:15:21:7a:
c2:ec:95:db:85:59:fc:d7:57:45:95:51:16:4a:0a:
9e:d9:3f:01:fc:34:63:50:f8:9d:97:4b:40:9a:c1:
ba:13:c6:4b:d0:57:20:cc:14:9f:61:85:65:d1:f8:
f4:06:a4:26:c5:23:f7:7a:36:4c:3a:07:09:7e:f1:
57:e3:8f:e5:5d:22:ed:03:50:6d:77:e1:9e:e4:c8:
4e:9d:b3:7c:36:48:72:a3:3b:89:10:e4:23:6b:37:
11:cf:9f:b8:75:c6:fc:aa:31:2f:0a:9c:d5:07:26:
3a:84:c9:65:69:6b:fa:0a:58:11:65:60:e0:77:15:
31:ce:4e:a1:60:a7:95:48:fd:82:d5:dc:60:c5:3b:
b6:f0:9c:8a:09:6b:a2:8f:e4:a2:e8:c8:1d:78:98:
83:a3:58:49:ac:58:93:c6:f8:42:80:88:6e:7a:a4:
5e:b4:b3:5e:f0:8b:9c:e2:6b:e8:b1:d0:54:1f:d6:
cf:9c:a9:7f:f7:cd:8a:88:df:48:f7:ec:cf:1c:c0:
ed:54:06:5d:d1:ac:25:fb:3b:84:89:a1:9b:64:32:
9a:73:93:3a:c0:8a:8b:0d:ab:b7:55:66:09:fb:95:
cd:d4:57:26:1d:be:50:91:c0:2c:ff:86:58:1a:e4:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:81:84:5F:5B:A2:B0:38:AE:B9:56:59:85:67:20:CA:A4:23:A7:97
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uIGEX1uisDiuuVZZhWcgyqQjp5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.92.0/24
178.239.198.0/24
178.239.204.0/24
185.192.70.0/24
185.228.225.0/24
194.32.120.0/24
Signature Algorithm: sha256WithRSAEncryption
50:16:67:b4:ab:00:4f:08:05:e2:ee:d7:b0:66:fb:51:b1:78:
b9:c0:d5:23:6e:a6:48:de:a7:cb:79:cf:be:32:1f:63:e6:de:
cc:f7:90:cf:b9:24:a8:62:50:bc:14:d0:16:b9:b1:5b:3e:a6:
96:3c:ab:28:ac:71:b1:4c:12:6d:d4:2d:56:a3:e5:57:72:7b:
74:ad:93:ca:a1:a9:c5:0c:29:a5:0d:8f:31:dc:b5:f8:0c:32:
06:29:48:d1:ee:81:b3:f7:49:ce:15:ad:81:1a:32:5c:94:42:
18:a3:0b:a4:9d:5c:35:f5:6c:e9:26:a9:79:9b:4a:6e:2f:d9:
96:cd:31:82:2d:19:6e:9d:b6:3b:25:de:5a:07:78:3c:9c:61:
cb:1e:2e:df:47:73:e7:a4:8b:92:1e:67:7c:95:95:ed:72:58:
34:a7:04:59:1d:6c:ce:cb:f7:c5:e9:2c:fd:a7:a7:7b:12:8d:
45:e1:a3:3c:3b:41:26:f9:ac:8a:f5:8d:77:30:e5:f4:92:27:
ff:a3:d0:b6:ae:73:00:14:de:fa:05:97:ce:6f:8a:c3:b8:64:
80:7a:48:2b:50:c3:7e:37:e2:24:08:0b:93:86:77:99:47:12:
1b:4a:eb:a8:95:33:29:c3:10:0b:c4:5f:7f:72:f1:70:61:f0:
bc:d0:00:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:34:23 2026 by rpki-client