Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/upydEV0ODv-v9FNJbhEvu18F0-I.roa
File: upydEV0ODv-v9FNJbhEvu18F0-I.roa (raw, json)
Hash identifier: VtfCIO/Gdxc9uNwon4WUJ3pKbdYHJr5iyQxDnmDVVgE=
Subject key identifier: BA:9C:9D:11:5D:0E:0E:FF:AF:F4:53:49:6E:11:2F:BB:5F:05:D3:E2
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 019F6A02A6FFC188A186DAB1DAE2105F0D50
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/upydEV0ODv-v9FNJbhEvu18F0-I.roa
Signing time: Thu 16 Jul 2026 08:19:46 +0000
ROA not before: Thu 16 Jul 2026 08:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 109.160.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:02:a6:ff:c1:88:a1:86:da:b1:da:e2:10:5f:0d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jul 16 08:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba9c9d115d0e0effaff453496e112fbb5f05d3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:28:66:06:a6:47:17:12:a7:b5:73:76:19:
2b:ff:fe:06:85:8c:59:33:22:86:45:96:54:fb:4b:
e1:fe:72:cc:47:50:91:6a:6d:58:ff:ae:9e:13:3c:
96:92:9c:7d:c7:7a:e5:31:37:bf:5b:f3:8e:d7:be:
48:59:51:fb:45:46:fb:31:e8:87:61:ae:65:82:01:
a0:f2:eb:f7:43:51:fd:cc:d3:50:f8:f6:f2:ad:72:
6f:dc:ff:be:56:9e:5e:b3:a0:28:b5:51:a3:7b:05:
05:c2:61:95:cd:f5:51:6e:2c:23:0c:8d:c1:2d:4b:
36:6d:3d:53:6d:f1:53:eb:98:37:32:2d:0e:77:63:
cd:93:ff:3e:a3:a5:9a:bb:cd:30:df:88:ef:f4:8f:
fa:e9:a4:7e:31:55:0b:a7:8d:09:24:85:eb:ee:c3:
0c:04:48:a6:31:28:bf:79:c9:f8:be:15:33:40:d0:
77:48:27:5c:a4:5e:f8:53:02:28:60:26:0b:42:4f:
2e:25:dd:34:2a:f4:43:db:ca:ac:86:14:ac:7a:24:
94:e1:1a:68:35:d8:0f:24:28:f6:aa:c4:72:a0:88:
af:26:a0:ce:d9:eb:f4:5a:a5:07:57:ea:af:b1:d1:
e5:c9:87:f1:ad:d4:67:03:a0:ae:03:30:9c:94:0f:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:9D:11:5D:0E:0E:FF:AF:F4:53:49:6E:11:2F:BB:5F:05:D3:E2
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/upydEV0ODv-v9FNJbhEvu18F0-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a7:bb:d1:01:b9:bb:09:cc:45:51:52:21:59:55:7b:3c:2e:
5f:b4:75:f0:23:d0:44:7d:34:ca:67:02:30:a7:43:14:bc:5a:
1d:b5:93:d3:0e:09:0f:86:e0:34:14:33:9b:86:af:44:92:31:
37:0b:a9:20:f6:a4:47:84:ab:4a:c7:96:6c:ed:95:d3:ea:9d:
6c:0e:04:c3:03:30:20:14:db:10:f7:27:24:19:51:88:b0:0c:
22:86:98:fd:71:fc:81:b9:e2:6c:18:cb:5b:e2:ca:1a:9a:95:
00:16:0e:36:86:57:4f:6a:7a:64:05:3b:3c:3d:16:a8:0c:d6:
e8:a4:f1:e6:8c:07:1e:35:72:44:bc:59:08:25:36:22:39:a3:
b4:b0:e3:7b:b7:f9:46:f1:d1:43:2f:40:2e:11:3e:d9:b7:48:
10:c9:51:c7:41:1c:99:6a:54:36:1b:aa:c9:73:d1:54:b3:50:
58:36:97:56:ab:a2:d2:38:51:66:42:e5:69:f5:ea:d1:a6:de:
bf:24:59:41:c1:62:20:cb:8b:5a:40:4f:c3:e5:60:35:cb:de:
c3:15:2c:1d:91:8f:45:f9:8f:cc:f3:70:09:4e:3c:64:4f:c9:
93:14:9a:60:ed:13:81:44:23:f1:59:2e:54:eb:20:00:ae:cf:
74:87:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:01 2026 by rpki-client