Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/uyGs1GkOLrkT-JQkddwbsYYvxTk.roa
File: uyGs1GkOLrkT-JQkddwbsYYvxTk.roa (raw, json)
Hash identifier: PUkHR7Nd7XHI9C2nmOduIoKY0480NQ99aYZtC1XI+qE=
Subject key identifier: BB:21:AC:D4:69:0E:2E:B9:13:F8:94:24:75:DC:1B:B1:86:2F:C5:39
Certificate issuer: /CN=9c611917182942d356232df211c24591320cbf9f
Certificate serial: 019F23692AB51EB3DAD2DB9F6BE027697004
Authority key identifier: 9C:61:19:17:18:29:42:D3:56:23:2D:F2:11:C2:45:91:32:0C:BF:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGEZFxgpQtNWIy3yEcJFkTIMv58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/uyGs1GkOLrkT-JQkddwbsYYvxTk.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207435
IP address blocks: 82.115.212.0/24 maxlen: 24
2a10:3a00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/nGEZFxgpQtNWIy3yEcJFkTIMv58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/nGEZFxgpQtNWIy3yEcJFkTIMv58.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGEZFxgpQtNWIy3yEcJFkTIMv58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2a:b5:1e:b3:da:d2:db:9f:6b:e0:27:69:70:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c611917182942d356232df211c24591320cbf9f
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb21acd4690e2eb913f8942475dc1bb1862fc539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:44:83:92:13:be:9a:29:49:b2:85:c2:16:
e1:6e:d7:3a:5d:ab:e0:40:e8:03:7a:2a:91:79:f8:
c2:74:8e:28:8e:36:06:58:66:0b:f3:26:f1:1b:a9:
3e:5e:8c:74:b5:46:31:9f:ba:d9:df:9d:28:9d:4f:
7e:bb:14:63:11:3d:98:3d:83:99:f3:e2:8c:b8:5a:
ba:97:23:11:9c:cc:b7:5e:6c:8e:92:c0:2f:37:d6:
18:d8:b8:05:17:e5:d7:a5:05:51:38:66:23:63:6d:
d1:74:df:8f:ed:85:1d:2a:49:14:a8:a0:bf:4c:ff:
f0:e1:67:37:00:e0:f2:de:0d:eb:6d:29:63:89:c8:
38:69:60:24:78:b5:90:96:a1:25:85:44:55:2d:03:
72:10:e9:43:53:7d:10:b3:a6:57:04:10:06:53:fc:
24:cd:cb:bc:27:fb:e9:f8:24:62:8a:3f:ef:3d:6c:
a2:6b:eb:ec:9e:84:2c:09:e4:ec:27:9f:b7:52:7e:
ff:4c:f3:aa:ff:fb:26:d3:03:a1:ff:e8:63:5d:29:
1b:55:74:7a:03:58:f7:4a:6e:5f:e9:16:14:80:f5:
cd:17:46:2d:51:2a:ec:47:17:2b:be:74:f0:0e:94:
d7:81:79:25:15:0d:71:6e:d8:42:5d:0b:1e:72:53:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:21:AC:D4:69:0E:2E:B9:13:F8:94:24:75:DC:1B:B1:86:2F:C5:39
X509v3 Authority Key Identifier:
keyid:9C:61:19:17:18:29:42:D3:56:23:2D:F2:11:C2:45:91:32:0C:BF:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGEZFxgpQtNWIy3yEcJFkTIMv58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/uyGs1GkOLrkT-JQkddwbsYYvxTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/nGEZFxgpQtNWIy3yEcJFkTIMv58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.212.0/24
IPv6:
2a10:3a00::/29
Signature Algorithm: sha256WithRSAEncryption
65:22:2c:16:8b:13:01:21:ff:f1:80:a6:4d:c9:3f:b8:e0:70:
3e:0a:ad:b0:73:df:a3:d4:15:f2:41:41:18:dd:e2:64:ae:ee:
fb:b3:ea:0e:aa:a7:81:02:9a:43:2d:9c:f6:cd:30:8c:4f:37:
18:e7:5d:10:4a:e7:94:fc:a4:cc:63:83:48:05:be:3d:b6:01:
62:21:bf:19:99:3c:0a:ec:5a:3d:fe:ec:3e:c7:9f:db:11:8c:
4b:ad:20:6c:c7:c2:a2:33:d5:61:ff:2c:3e:e7:d9:ca:b8:93:
70:96:db:ce:9d:28:f5:98:60:e9:9e:51:cf:6b:52:34:94:52:
4d:0d:7d:b4:0b:3e:85:22:db:fb:e5:44:af:87:37:a2:e2:22:
fa:4e:e4:02:c8:96:eb:ee:3f:46:8d:32:c4:6b:f7:e5:3e:85:
3e:1a:31:c7:7f:ce:29:ff:3e:88:29:b9:ba:9c:5b:49:fa:bb:
b9:18:37:26:f9:a3:81:e7:33:c2:2b:f9:33:09:ad:58:c2:ab:
46:4f:bb:a5:be:03:8a:7c:9d:1d:5d:b3:06:d0:88:ee:b8:72:
58:15:40:cc:e3:db:8f:4f:76:5e:85:ff:02:83:f5:ea:92:19:
4a:65:e3:f6:a0:3e:e0:8a:0d:40:66:c9:2a:4c:f3:c2:bd:a8:
1e:45:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:24:13 2026 by rpki-client