Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/uLh37d-CZyi_CuBp_4qkf4KKeHY.roa
File: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (raw, json)
Hash identifier: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=
Subject key identifier: B8:B8:77:ED:DF:82:67:28:BF:0A:E0:69:FF:8A:A4:7F:82:8A:78:76
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019D6DF843FB8A67A69E47DABD3E3F66CCD3
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/uLh37d-CZyi_CuBp_4qkf4KKeHY.roa
Signing time: Wed 08 Apr 2026 16:41:20 +0000
ROA not before: Wed 08 Apr 2026 16:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205248
IP address blocks: 94.131.21.0/24 maxlen: 24
94.131.22.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:f8:43:fb:8a:67:a6:9e:47:da:bd:3e:3f:66:cc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Apr 8 16:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8b877eddf826728bf0ae069ff8aa47f828a7876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:18:7d:c5:f5:01:81:08:a9:94:b7:9c:e5:
6e:e6:a0:a3:88:6e:fd:84:9a:33:c6:b5:7a:02:ee:
22:0f:ab:dc:68:fa:ae:ec:bd:2c:dc:16:df:16:29:
99:a3:74:f2:41:88:a7:38:eb:c5:df:ec:05:d3:2f:
9c:3e:e5:1c:bc:65:c9:74:65:e7:73:5e:3d:a0:f6:
15:05:2d:7b:c6:0a:c2:67:80:b3:5e:3e:43:62:65:
93:8d:fb:d1:6c:95:f2:d8:1f:3a:32:81:6a:17:03:
d8:9b:c3:a3:ce:b9:c2:78:d3:f4:c7:b9:f9:03:80:
91:d2:4a:17:4f:36:72:f9:5f:74:25:03:20:b8:b3:
fb:23:bc:9f:fc:60:1b:ce:c7:55:33:a1:ab:43:1a:
96:1e:75:43:8a:9c:05:21:51:88:e1:a9:78:8b:82:
cf:7e:1e:5b:17:fe:d5:10:c8:ef:82:e4:15:c7:39:
c0:80:33:40:8d:9a:a7:96:28:88:19:54:65:f9:01:
45:00:3b:c1:2b:09:d5:7f:8a:68:c3:f5:03:61:4f:
d0:e2:f9:55:9c:1d:a8:7b:a1:ba:94:e6:f1:90:d0:
d2:0a:19:a0:5e:37:1a:bd:c6:e1:eb:69:1e:4a:1d:
43:5a:26:f9:9c:1e:43:8b:a5:c8:c2:c3:0e:9d:78:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:77:ED:DF:82:67:28:BF:0A:E0:69:FF:8A:A4:7F:82:8A:78:76
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/uLh37d-CZyi_CuBp_4qkf4KKeHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.21.0-94.131.22.255
94.131.124.0/24
94.131.127.0/24
Signature Algorithm: sha256WithRSAEncryption
65:18:5d:72:ae:53:8c:46:33:c6:59:78:36:d6:4e:03:65:e6:
6b:80:b9:3b:d0:7e:66:11:9d:f9:c4:98:0c:b9:f6:33:76:7d:
c2:ba:00:24:b6:7a:a3:f8:ba:ba:00:f2:9d:fb:ff:e2:58:1e:
b7:c0:19:be:0e:e8:43:c2:03:79:7d:76:4e:e4:4f:f7:23:72:
35:0e:ca:22:52:48:46:bf:ea:4e:b4:6b:e2:22:19:9e:1d:58:
4f:b9:71:2d:82:32:36:5e:9e:c8:6b:12:6f:20:d1:f8:a0:7e:
50:24:53:31:86:a1:b2:0a:01:e8:1a:4d:d2:ab:a9:f1:6c:33:
c6:77:0a:62:0e:96:9f:d7:f2:9e:5e:16:5e:68:08:4d:99:fd:
b2:2d:a0:98:89:9b:ba:0a:89:cc:20:75:92:1c:d2:23:96:fc:
f6:2c:dc:56:72:35:10:81:e6:9d:3d:0a:0e:3d:d8:6f:b9:3f:
61:08:54:5c:cc:c3:5e:13:e5:f7:7b:8c:51:ae:2f:5d:fa:aa:
7b:0b:38:3b:37:7c:fa:66:ea:09:29:21:db:01:97:86:4d:69:
1d:de:67:8c:d6:3d:e3:8e:4f:20:ae:b8:10:ba:3a:89:8d:74:
c7:97:3b:6b:65:96:98:ca:7a:5c:3b:ed:28:47:5a:3e:3f:51:
e7:1f:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:50 2026 by rpki-client