Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/uZFd3w4bbDmowFp6pf45Wj4ZV6g.roa
File: uZFd3w4bbDmowFp6pf45Wj4ZV6g.roa (raw, json)
Hash identifier: bNAJ8IB07phgCkkXVSE/KNxmvOZIMKpuEVIiUNVv6Yw=
Subject key identifier: B9:91:5D:DF:0E:1B:6C:39:A8:C0:5A:7A:A5:FE:39:5A:3E:19:57:A8
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 019F798A4BBC5D1BD42AB940918993653556
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/uZFd3w4bbDmowFp6pf45Wj4ZV6g.roa
Signing time: Sun 19 Jul 2026 08:42:14 +0000
ROA not before: Sun 19 Jul 2026 08:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203560
IP address blocks: 178.21.144.0/24 maxlen: 24
178.21.145.0/24 maxlen: 24
178.21.146.0/24 maxlen: 24
185.8.168.0/24 maxlen: 24
185.8.169.0/24 maxlen: 24
185.8.170.0/24 maxlen: 24
2a02:2c0::/48 maxlen: 48
2a02:2c0:1::/48 maxlen: 48
2a02:2c0:2::/48 maxlen: 48
2a02:2c0:10::/48 maxlen: 48
2a02:2c0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:8a:4b:bc:5d:1b:d4:2a:b9:40:91:89:93:65:35:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Jul 19 08:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9915ddf0e1b6c39a8c05a7aa5fe395a3e1957a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:8d:5d:fd:7d:cb:09:74:cb:96:cc:85:bd:
54:33:58:c2:c2:14:ca:89:f9:ca:12:1c:40:43:93:
c5:98:82:5f:86:9e:63:88:22:53:8f:b4:1c:c6:cf:
7f:44:92:7d:2e:da:00:25:c5:b7:74:1e:7f:21:78:
11:88:9c:25:f7:e0:56:f8:05:1d:7f:77:be:a8:e2:
a5:a6:1c:c9:a4:53:c0:51:ce:ec:54:4c:2a:fe:ca:
49:2b:e4:03:d8:7a:76:6a:7e:fc:c6:8e:39:07:7a:
c7:bc:79:08:1a:e5:c7:6f:43:37:47:af:fb:b1:4e:
ee:84:1c:a9:4d:90:6c:ac:c7:e2:b1:c0:89:cb:7e:
1a:54:9b:36:cb:91:87:ff:71:74:99:c1:ea:89:fb:
51:35:49:c0:c0:6c:fb:04:ca:ec:29:51:89:31:5d:
1b:02:59:95:68:1a:61:5b:73:41:ef:7e:fd:ab:55:
5a:58:68:85:24:95:f3:5c:94:60:d5:05:ae:dd:06:
2c:50:5b:bf:ba:1c:2d:f8:c4:8d:5e:82:c6:7d:31:
be:04:0f:74:6d:4e:13:e9:5e:02:86:08:98:75:58:
f0:5a:28:d6:6b:24:fe:de:60:42:10:34:ea:21:18:
01:b5:91:a9:48:d4:6c:34:b1:2c:47:85:52:f2:0f:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:91:5D:DF:0E:1B:6C:39:A8:C0:5A:7A:A5:FE:39:5A:3E:19:57:A8
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/uZFd3w4bbDmowFp6pf45Wj4ZV6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.144.0-178.21.146.255
185.8.168.0-185.8.170.255
IPv6:
2a02:2c0::-2a02:2c0:2:ffff:ffff:ffff:ffff:ffff
2a02:2c0:10::/47
Signature Algorithm: sha256WithRSAEncryption
4c:51:5e:c6:25:12:0e:40:ac:4f:4a:a0:9b:3b:f4:10:be:4c:
08:bd:92:b0:24:6e:8f:a0:0a:7a:57:e7:06:63:c2:53:c4:fc:
af:6e:8e:6c:36:f1:d1:ed:ef:2f:0d:0d:79:73:aa:47:c3:12:
c1:26:96:2c:8a:0b:db:95:12:56:8f:75:48:3b:a2:bb:e5:fb:
a9:0f:ac:18:26:20:1b:9a:67:99:bf:27:16:bd:2b:b2:4c:94:
40:ff:2c:30:a7:f0:d3:5c:77:0b:dd:9c:0f:d0:94:64:61:18:
b0:3f:60:b9:e7:c1:02:9b:76:36:1c:e1:5e:cb:bf:dc:da:3b:
58:d3:d0:4a:fe:94:ec:37:9f:c5:d4:bd:d8:4d:65:c2:93:12:
77:17:7b:c3:e1:dc:da:27:e5:df:d5:8e:27:94:92:34:eb:97:
02:b4:9c:c9:80:33:ab:69:4b:d3:65:e4:ee:c1:c2:35:bf:c8:
5d:6e:dd:de:4e:c5:d3:aa:07:19:22:87:65:67:3f:9b:19:55:
03:72:0e:7f:f9:23:2c:0b:d3:90:db:4e:58:68:5b:cf:e5:6f:
1a:83:d0:1e:f8:41:d4:98:95:01:71:75:4f:cf:82:e8:98:a7:
a3:c0:3b:9b:87:3e:e5:15:37:ae:40:05:c2:a6:8d:e1:1c:dc:
2f:92:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:06 2026 by rpki-client