Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/UR4k7AaYQrNDm6u1dEblSYCG8-w.roa
File: UR4k7AaYQrNDm6u1dEblSYCG8-w.roa (raw, json)
Hash identifier: RX+1l+5/TUihX4bJO7UGPs7oEcDQuR9sGFW16/cWKUg=
Subject key identifier: 51:1E:24:EC:06:98:42:B3:43:9B:AB:B5:74:46:E5:49:80:86:F3:EC
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019C230F9925F7EE567E13EEEA520C469F6A
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/UR4k7AaYQrNDm6u1dEblSYCG8-w.roa
Signing time: Tue 03 Feb 2026 10:32:30 +0000
ROA not before: Tue 03 Feb 2026 10:32:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206647
IP address blocks: 81.12.57.0/24 maxlen: 24
81.12.81.0/24 maxlen: 24
81.12.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:0f:99:25:f7:ee:56:7e:13:ee:ea:52:0c:46:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Feb 3 10:32:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=511e24ec069842b3439babb57446e5498086f3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:d2:bc:4c:05:97:f0:b2:02:86:3e:2f:c6:
4c:c9:45:3c:f4:5a:f7:17:09:2c:27:ab:3a:d8:f9:
4e:96:13:34:22:52:22:5c:37:01:97:42:e0:a0:a8:
c8:5a:96:ea:47:8a:ee:42:91:b2:a4:74:0b:40:eb:
1c:73:73:e7:3a:9b:07:a8:4f:39:3b:d1:f7:9a:33:
d9:31:6e:ce:84:9b:59:0b:9b:d7:91:82:34:61:95:
ec:cd:6f:9e:7f:00:bf:bd:91:3f:c0:c2:25:12:ef:
79:8a:eb:90:76:94:22:3e:29:82:4f:7c:b3:06:0d:
1f:1c:f5:aa:3b:95:45:5f:df:32:b1:44:cc:7d:4f:
10:16:06:ff:8f:fb:d0:0c:73:6e:f9:7f:8a:e9:20:
29:d5:34:0b:a7:64:01:58:16:5a:0c:79:68:d3:f8:
d8:27:68:0f:88:d0:ce:42:b5:ff:13:00:21:f0:77:
18:a7:7c:5a:f3:16:f8:4b:a2:82:5e:59:9e:48:33:
ca:88:65:9a:a9:c8:95:9a:f4:c6:06:00:44:0e:42:
16:f6:39:b2:ac:5b:13:a4:b8:ac:78:f5:41:ae:70:
37:98:f3:39:e7:5c:ed:02:16:ad:a2:73:4a:db:3b:
79:05:37:30:d0:ed:40:e4:0e:68:c2:6b:dc:91:e5:
31:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:24:EC:06:98:42:B3:43:9B:AB:B5:74:46:E5:49:80:86:F3:EC
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/UR4k7AaYQrNDm6u1dEblSYCG8-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.57.0/24
81.12.81.0/24
81.12.92.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b4:72:3c:68:c5:28:e0:3d:b0:01:ab:8b:ff:cb:bd:9a:e4:
7d:8f:0a:3e:95:1a:f6:19:61:21:9a:5c:50:1f:a4:4e:fb:79:
f2:af:90:a1:77:79:26:63:bc:6c:ee:28:03:92:90:13:71:9d:
16:91:43:df:07:60:c0:f3:97:13:fb:00:d7:39:f9:45:14:26:
ab:ef:e3:ea:99:84:b5:4a:9d:aa:c1:93:00:d3:2e:19:a8:80:
75:13:be:29:49:90:7c:20:d2:b6:e9:67:45:58:0d:6a:66:c8:
b7:fd:bc:03:52:63:1a:3d:56:2c:37:90:ac:45:4a:7d:25:f6:
62:66:f7:b3:21:9d:ae:56:e1:44:a9:16:a0:dd:b4:ff:21:ca:
93:4e:64:8c:d8:5e:4a:9f:a9:1c:4c:98:59:aa:8c:bc:dc:33:
1b:f8:ff:62:6c:55:eb:41:e2:44:84:88:55:f5:e3:3a:4c:a2:
de:6a:10:15:9f:f0:e8:77:51:5b:fa:93:d2:8e:55:ce:2b:db:
2d:1c:e9:97:66:98:c8:6a:cd:36:3f:50:76:ab:f9:f9:16:08:
7c:b1:e4:f5:6f:1a:be:c8:08:4b:2f:00:75:f0:5f:11:af:d6:
d0:b7:fd:df:4e:91:10:f6:cd:f0:c1:fa:3a:77:f0:f9:b3:c0:
d1:83:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:02 2026 by rpki-client