Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/ugdaZFijHYOlbpSUgTHvHNMkx3I.roa
File: ugdaZFijHYOlbpSUgTHvHNMkx3I.roa (raw, json)
Hash identifier: xF9mxjozl+pvQpm1H66f/KhL1MOe8lYaF6cLypnqfxo=
Subject key identifier: BA:07:5A:64:58:A3:1D:83:A5:6E:94:94:81:31:EF:1C:D3:24:C7:72
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019FB9049E588168940EDEAADF236B7BCA1C
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/ugdaZFijHYOlbpSUgTHvHNMkx3I.roa
Signing time: Fri 31 Jul 2026 16:31:55 +0000
ROA not before: Fri 31 Jul 2026 16:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 143.246.42.0/24 maxlen: 24
168.222.252.0/24 maxlen: 24
168.222.253.0/24 maxlen: 24
168.222.255.0/24 maxlen: 24
208.92.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:04:9e:58:81:68:94:0e:de:aa:df:23:6b:7b:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Jul 31 16:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba075a6458a31d83a56e94948131ef1cd324c772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:05:a9:8c:d1:cf:56:f1:93:e0:73:0c:6b:
94:32:55:1b:3e:1a:50:42:7f:26:77:3c:86:61:a6:
2f:88:31:36:4c:4d:7c:ad:59:b4:8f:d8:12:5e:8d:
bc:5a:b1:f4:af:b0:8d:01:90:15:30:fd:33:98:f3:
aa:58:df:d0:bc:4e:2f:86:5f:09:69:b3:9b:1d:cf:
d0:d0:0d:3a:65:b4:96:15:bf:2c:8c:43:4f:6e:e0:
5c:d4:46:1a:ca:aa:e0:e8:77:81:6b:5c:12:44:3c:
b7:18:9c:9e:c1:39:57:18:b1:bd:89:23:d6:2e:31:
5e:f5:39:44:1b:c7:d9:3d:35:6f:ad:0c:47:dd:dc:
7d:f7:1c:94:53:07:6d:8b:57:7c:8b:95:9f:7d:bf:
74:0d:be:a4:12:48:d9:dc:f2:9d:22:28:6f:8f:ea:
ed:ef:f2:9b:82:fd:3a:c6:4f:ac:d4:03:11:a0:ee:
fc:fb:85:8b:ad:2e:d4:67:e7:d2:b5:72:ed:d2:68:
65:51:e4:98:33:fa:ae:60:d7:84:4c:30:47:2a:e2:
13:52:0e:a6:83:d3:59:b5:bb:f5:9c:5f:b9:a1:3a:
4f:71:6e:c4:c2:e7:01:dc:00:d6:4b:83:4a:a0:af:
df:fd:d2:6f:12:0f:40:fb:32:8c:58:43:e4:03:69:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:07:5A:64:58:A3:1D:83:A5:6E:94:94:81:31:EF:1C:D3:24:C7:72
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/ugdaZFijHYOlbpSUgTHvHNMkx3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.42.0/24
168.222.252.0/23
168.222.255.0/24
208.92.226.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7e:8a:83:eb:91:ab:cb:a1:38:8d:bf:e7:43:95:cc:db:0a:
c9:8d:3e:d2:a6:10:dc:d9:b2:6b:09:89:b7:8e:97:6a:64:7f:
f4:34:53:76:7a:e1:ad:d6:33:82:b6:75:c5:e1:3e:04:e4:97:
ea:4a:c4:c0:94:1c:48:93:36:ff:f3:9f:52:59:9d:8c:82:b3:
a9:64:31:1e:5c:6e:51:90:3a:ed:c4:ba:0b:9a:82:99:af:0b:
25:b5:5a:a6:f3:e2:50:27:d8:33:5e:b9:a5:3f:8a:19:3d:a4:
60:66:bd:81:4f:e9:21:78:50:e8:e1:ee:ea:4e:97:e1:6b:94:
67:64:f5:f9:58:ca:9a:55:c4:f0:0b:cd:b7:71:fd:11:bd:b2:
8a:a2:2d:68:a3:c6:c6:af:cd:f9:9a:b0:71:58:be:2d:18:06:
c5:c4:58:b8:57:c2:4e:30:ec:e4:0a:fb:fd:14:44:33:7f:9f:
fd:54:b8:7e:06:1d:3a:ac:d6:51:00:d5:6a:a9:d7:4c:1a:35:
7a:87:6c:65:60:8c:36:c7:2b:e6:26:89:eb:82:f5:5f:33:b9:
b3:e9:19:70:a7:71:0a:48:ea:29:14:0c:66:ef:34:dc:c7:a3:
38:98:77:40:ee:41:92:ef:ef:4d:6c:4d:1c:24:ef:f6:19:5c:
b2:f6:1b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 08:36:19 2026 by rpki-client