Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/uHcHm-Q2inkIqyesgnfD4jPip48.roa
File: uHcHm-Q2inkIqyesgnfD4jPip48.roa (raw, json)
Hash identifier: 4PMfdYi17AF2Wi/23XG4oqCHUKA2wU+FYFq+eyTKfzA=
Subject key identifier: B8:77:07:9B:E4:36:8A:79:08:AB:27:AC:82:77:C3:E2:33:E2:A7:8F
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 01A09ECD918986C9DB9F671B05482A6B93DC
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/uHcHm-Q2inkIqyesgnfD4jPip48.roa
Signing time: Mon 14 Sep 2026 07:24:27 +0000
ROA not before: Mon 14 Sep 2026 07:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197695
IP address blocks: 79.174.77.0/24 maxlen: 24
79.174.78.0/23 maxlen: 24
79.174.80.0/21 maxlen: 24
79.174.88.0/21 maxlen: 24
89.104.64.0/21 maxlen: 24
89.104.74.0/24 maxlen: 24
89.104.94.0/24 maxlen: 24
89.111.152.0/22 maxlen: 24
89.111.168.0/21 maxlen: 24
168.222.142.0/23 maxlen: 24
195.24.70.0/24 maxlen: 24
195.24.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:cd:91:89:86:c9:db:9f:67:1b:05:48:2a:6b:93:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Sep 14 07:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b877079be4368a7908ab27ac8277c3e233e2a78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:5a:da:d9:02:10:00:83:42:03:7e:42:7c:
b1:b9:07:63:7f:9f:31:0a:cf:b1:2c:2e:9e:9d:42:
bd:ae:80:fd:39:f4:b3:70:19:3f:61:93:12:93:8a:
63:b2:1f:38:a3:21:d7:c7:41:34:9e:8e:c9:6c:00:
ee:de:10:4d:d3:aa:11:4a:8b:dc:80:9d:17:ae:98:
b1:f5:33:cf:9a:c2:34:d1:c1:c7:47:9d:5f:c6:f1:
12:de:80:21:3a:e2:56:e9:05:41:f0:6d:44:65:a9:
43:d6:84:8e:5f:a7:c7:95:b1:65:74:34:1b:68:11:
cf:71:7b:30:f4:7e:3a:11:0d:bb:3d:3c:3c:cc:5f:
ee:f0:9e:53:e1:f0:04:0e:b4:98:85:42:33:9f:c1:
dd:2a:50:04:ce:51:8c:90:6a:8d:0b:13:dd:30:fd:
5b:ae:c6:ad:fe:eb:1f:75:2c:55:0d:a5:5c:24:69:
b7:06:81:e0:4b:98:1d:ab:e9:6e:2d:6b:e4:e8:ce:
91:5c:00:68:2d:d8:ba:a7:63:02:06:53:48:ca:14:
21:6d:2e:84:77:ec:5a:ad:31:a6:dd:55:5c:81:4f:
76:31:f0:9a:d7:89:cd:03:94:d8:8a:c5:07:a5:3f:
e3:d1:81:b5:a3:bf:12:40:7a:3d:be:43:9c:79:3d:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:77:07:9B:E4:36:8A:79:08:AB:27:AC:82:77:C3:E2:33:E2:A7:8F
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/uHcHm-Q2inkIqyesgnfD4jPip48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.77.0-79.174.95.255
89.104.64.0/21
89.104.74.0/24
89.104.94.0/24
89.111.152.0/22
89.111.168.0/21
168.222.142.0/23
195.24.70.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:80:9a:67:bf:1d:26:7c:c3:64:2e:7c:00:ba:59:09:97:32:
2a:b2:b3:b0:aa:a3:79:0d:f1:6c:e5:1c:59:0a:b9:3e:c6:14:
55:33:d1:0e:62:b7:e0:62:bc:b9:9f:93:05:87:1d:6b:b8:fe:
15:4b:97:b7:b1:3c:2e:cf:d8:64:8b:be:2a:da:b9:9a:9e:99:
e8:03:fc:2e:9a:07:64:1f:86:ba:97:e9:9a:be:2b:8b:c2:e5:
62:ae:0f:32:09:99:6f:84:a9:0d:12:43:e2:5a:a7:7d:07:87:
16:2d:76:c9:71:e4:5e:ef:d5:e4:f1:71:27:49:be:fc:e2:79:
8b:cd:01:02:9b:37:25:a1:a7:36:1c:0b:2f:42:c9:de:5d:0a:
ba:2d:d3:0d:77:02:2e:5c:54:f6:10:16:83:b7:d0:1b:f3:98:
18:81:e0:7d:88:10:51:d8:c1:9a:f9:54:a8:b9:7e:8f:f0:7b:
cb:91:1a:86:e3:b4:bb:4f:0e:1d:8e:29:e1:5f:0b:81:82:e7:
54:39:ed:45:6b:d5:f5:95:f4:77:ac:c5:33:6e:d7:1f:37:65:
70:cb:77:7f:a2:55:9c:d9:7a:0e:d6:1f:63:71:30:67:73:91:
c5:2d:2b:08:af:53:85:2c:89:f7:14:67:90:44:6b:f4:09:27:
65:a7:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:02:44 2026 by rpki-client