Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/uaYE5V2zqlkxFilciFUOq7CjWZw.roa
File: uaYE5V2zqlkxFilciFUOq7CjWZw.roa (raw, json)
Hash identifier: PCiK7eyJf1Lc5VeA8orNlbLV1UFE7CUmS9PTtgP0Kig=
Subject key identifier: B9:A6:04:E5:5D:B3:AA:59:31:16:29:5C:88:55:0E:AB:B0:A3:59:9C
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019EBE2B08B5DDD19C7925F30AEA748B90C9
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/uaYE5V2zqlkxFilciFUOq7CjWZw.roa
Signing time: Fri 12 Jun 2026 23:29:11 +0000
ROA not before: Fri 12 Jun 2026 23:29:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60253
IP address blocks: 92.205.80.0/21 maxlen: 21
92.205.156.0/22 maxlen: 24
92.205.192.0/20 maxlen: 24
188.121.32.0/19 maxlen: 24
188.121.60.0/24 maxlen: 24
188.121.61.0/24 maxlen: 24
2a00:116a::/40 maxlen: 48
2a00:116a:100::/40 maxlen: 48
2a00:116a:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:2b:08:b5:dd:d1:9c:79:25:f3:0a:ea:74:8b:90:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jun 12 23:29:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9a604e55db3aa593116295c88550eabb0a3599c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:81:35:5c:e5:0f:22:ff:5a:83:62:db:31:
71:69:98:c2:56:e6:c7:8c:b3:b4:b6:ad:ec:3b:31:
40:a1:dc:89:52:99:2d:c4:9c:2c:53:17:3a:fd:76:
a1:48:21:41:26:7b:b8:ac:f3:13:b6:fd:6e:14:5a:
1b:a1:77:52:e4:32:ef:78:db:fb:58:16:62:6c:39:
5c:d4:be:5a:a8:05:bd:72:46:32:8f:d7:8d:0d:b7:
42:6c:2f:5c:c7:b0:ae:6b:ac:e3:ab:98:da:fd:b5:
65:e0:97:60:23:63:39:60:da:b9:43:93:a9:2e:f7:
ad:4d:2a:f3:8c:3c:0a:27:c8:08:e2:8f:b0:bf:54:
20:c8:32:dc:e2:6f:79:2c:82:32:dc:ec:a0:f7:6a:
b9:80:f2:90:f7:80:a1:68:16:4b:57:21:f4:3d:9a:
3d:ae:5c:46:c5:b8:4d:17:e9:99:cd:2b:ca:88:4a:
f3:18:8a:28:ea:09:81:c1:27:dc:0c:59:0d:8f:71:
e1:ee:72:8c:05:01:06:6d:b5:45:52:c3:01:53:ed:
16:03:5a:c1:1c:98:3e:df:6d:06:ca:06:4c:7e:3f:
b3:21:f8:b1:78:1a:12:77:10:19:5c:2f:fa:a0:8c:
c1:aa:89:4d:6f:d8:f7:7b:66:de:0b:31:96:18:5a:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A6:04:E5:5D:B3:AA:59:31:16:29:5C:88:55:0E:AB:B0:A3:59:9C
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/uaYE5V2zqlkxFilciFUOq7CjWZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.205.80.0/21
92.205.156.0/22
92.205.192.0/20
188.121.32.0/19
IPv6:
2a00:116a::-2a00:116a:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
07:a3:da:93:63:5f:c9:43:f5:7c:4f:a2:3e:b6:01:cf:07:15:
f9:a0:50:bc:e7:1f:45:94:fe:6e:d3:75:97:78:80:75:5e:d0:
bf:ef:63:b1:17:6a:34:f4:4a:4b:be:9f:7a:cd:08:4e:69:df:
6f:19:f9:fd:7c:7d:94:95:42:71:4c:17:b5:89:86:3e:be:35:
64:ea:94:5c:a8:75:7e:d2:b6:2f:a3:7d:9a:49:eb:ad:04:1e:
d6:25:18:5a:60:2c:21:0d:ee:19:dd:d4:92:da:71:2e:82:f4:
5e:89:b2:50:4a:79:69:b8:ac:9a:60:e8:0a:ff:2b:99:78:80:
b2:47:4f:3c:0b:15:8f:b1:d5:38:60:92:47:9c:40:55:2a:66:
8d:93:22:50:3e:b5:0e:6f:00:78:5b:e8:c5:6c:f6:55:41:44:
12:fe:4e:77:85:fc:27:2b:65:11:69:06:d9:2b:f3:08:74:fd:
61:b7:c1:fb:16:8e:3b:73:42:e0:d3:fd:95:0a:d6:0b:06:d0:
2a:da:f6:34:40:bb:df:38:41:9e:89:b0:14:53:bf:59:04:12:
b9:b3:4b:85:b9:b8:a6:59:eb:9e:ea:46:d6:d6:bf:f2:04:1b:
2e:d5:3b:d9:0f:a9:c7:5d:c3:70:e9:02:20:e6:af:8f:bb:70:
42:8f:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:04:57 2026 by rpki-client