Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dUVqQTSdlp0LfBwkfvwumcgCHNE.roa
File: dUVqQTSdlp0LfBwkfvwumcgCHNE.roa (raw, json)
Hash identifier: lhu0cDOduPaz/XZCwmIWbHElYEuTgkfd52tHftntm9A=
Subject key identifier: 75:45:6A:41:34:9D:96:9D:0B:7C:1C:24:7E:FC:2E:99:C8:02:1C:D1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BE0A6721F584C2D75ED0A4F344511BAD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dUVqQTSdlp0LfBwkfvwumcgCHNE.roa
Signing time: Sun 20 Sep 2026 08:59:07 +0000
ROA not before: Sun 20 Sep 2026 08:59:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219105
IP address blocks: 195.72.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0a:67:21:f5:84:c2:d7:5e:d0:a4:f3:44:51:1b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 08:59:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75456a41349d969d0b7c1c247efc2e99c8021cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:f9:57:29:76:dc:61:96:60:03:59:42:74:
a1:7c:e7:d1:c5:56:3d:1f:a8:4a:14:78:13:5e:01:
49:14:2b:3f:c5:e8:42:52:e4:a3:c6:81:98:84:a1:
44:78:1b:9a:0f:a9:98:dc:f4:ac:78:8e:4a:17:23:
a3:49:f2:0f:6d:52:12:69:6f:ea:ba:3b:00:44:7b:
a9:dd:bd:0c:e5:40:5b:90:1c:79:22:5a:f4:93:53:
93:6e:ed:35:1f:b3:f0:54:16:1d:ea:77:19:51:f7:
07:bc:bb:dd:68:b0:4c:9b:d7:6f:aa:8c:68:0b:f1:
c4:40:f4:b1:1d:6f:41:59:e3:83:de:cd:13:93:cf:
59:1b:93:5e:b2:f7:69:5c:03:61:6e:d3:79:0b:b8:
1e:1f:ea:6a:75:c9:d4:0a:1c:70:da:54:9c:86:f9:
26:28:90:c4:ee:0b:ed:11:67:c6:57:fd:50:1c:60:
8f:59:0c:e3:e4:7f:c7:b4:59:02:24:24:d3:85:a5:
bd:28:69:94:ed:88:3d:ff:af:a9:9b:f8:1a:69:d5:
ba:a3:25:21:5c:7f:e3:9a:8b:48:48:ff:97:3a:a1:
30:e8:04:a1:25:31:c6:12:86:02:85:e5:dc:87:3d:
3d:8d:c7:a2:ab:b4:35:08:fc:c3:90:9c:64:e5:ce:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:45:6A:41:34:9D:96:9D:0B:7C:1C:24:7E:FC:2E:99:C8:02:1C:D1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dUVqQTSdlp0LfBwkfvwumcgCHNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.168.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ee:56:6c:9a:d0:7b:76:7a:0e:ab:05:48:59:ea:1a:e8:d6:
1d:94:1d:40:80:81:de:53:11:cc:07:c8:02:8a:a7:df:15:bb:
de:a7:f2:01:e5:33:d8:87:dd:12:02:18:52:93:11:87:ac:97:
12:65:13:8b:da:4a:d2:6d:f9:8e:a7:36:c7:c3:db:bf:48:cd:
e1:33:1b:5f:1e:5b:f4:65:42:5b:93:6f:30:a6:ea:34:fa:dd:
01:9c:40:cb:9e:51:d7:55:89:96:01:af:1c:25:aa:17:65:c0:
98:4e:b9:a1:af:66:1e:3f:df:4f:38:2d:fa:50:51:c6:68:b0:
aa:aa:83:df:88:15:3f:ce:fc:20:8b:70:b6:36:0a:d4:63:2b:
96:d7:13:b0:92:61:bf:4d:a9:c5:97:55:bf:ef:3b:7e:4f:95:
0b:74:0e:46:8e:ba:b5:38:e3:38:fa:30:8c:6d:9f:f8:82:b6:
17:01:a0:ab:93:8a:9f:de:02:64:97:38:5a:58:93:47:e1:f8:
8f:e3:44:73:53:45:c4:c6:4a:c2:6b:db:1f:2f:ec:26:3b:f8:
69:58:09:22:04:93:84:70:44:3f:d0:72:8b:9f:cd:16:4f:2b:
23:90:6a:9c:7d:43:e1:cf:a7:0e:d1:9c:c2:fc:e1:30:e3:c7:
36:15:12:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:36 2026 by rpki-client