Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UZYqorkn4nz08EWkmsGYY8zTLwA.roa
File: UZYqorkn4nz08EWkmsGYY8zTLwA.roa (raw, json)
Hash identifier: Rw+JwYElXf7lW5WP6/Iyzo1LF3BFscDeTpgAEWC62J4=
Subject key identifier: 51:96:2A:A2:B9:27:E2:7C:F4:F0:45:A4:9A:C1:98:63:CC:D3:2F:00
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C5305B48E1908D4CCEE3CF972D62D2E58
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UZYqorkn4nz08EWkmsGYY8zTLwA.roa
Signing time: Thu 12 Feb 2026 18:03:28 +0000
ROA not before: Thu 12 Feb 2026 18:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 82.197.192.0/24 maxlen: 24
82.197.196.0/24 maxlen: 24
82.197.197.0/24 maxlen: 24
82.197.200.0/23 maxlen: 24
82.197.203.0/24 maxlen: 24
82.197.204.0/24 maxlen: 24
82.197.205.0/24 maxlen: 24
82.197.208.0/20 maxlen: 24
84.245.26.0/23 maxlen: 24
84.245.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:05:b4:8e:19:08:d4:cc:ee:3c:f9:72:d6:2d:2e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 12 18:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51962aa2b927e27cf4f045a49ac19863ccd32f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:29:6a:b4:9f:65:63:42:9a:ac:f5:58:70:
bd:e1:d8:75:cf:7b:68:7e:1f:5a:35:62:d5:7a:62:
f2:2f:02:24:00:4c:6d:6f:ac:95:c3:02:ed:7f:e8:
03:51:c0:50:4c:aa:c4:23:ee:e4:5a:4f:1b:2c:0d:
46:0e:36:eb:95:ce:6e:c5:0f:ad:f1:18:db:76:a7:
b2:bf:99:2a:66:90:29:04:b0:e5:6b:eb:2f:61:e3:
fa:cf:22:d3:11:65:50:ae:91:06:29:23:7e:56:55:
cb:29:ba:9e:90:cf:0b:62:5f:8d:e4:9a:1c:5b:11:
9d:b7:f0:66:26:44:ef:00:ea:f5:ab:9a:6c:96:c2:
7c:41:4e:c5:e9:fa:6e:d7:4e:89:3e:e1:e1:e6:c0:
7f:29:99:46:a0:41:cb:4b:9e:11:e5:20:1e:ef:d1:
1c:55:79:94:81:f5:c4:8a:b6:b2:ba:4e:68:ca:c1:
63:ce:d4:a6:2c:fd:5e:b5:fc:b6:bb:ef:7a:01:04:
c9:db:d6:b8:4f:1f:78:05:22:d5:9d:57:0f:86:2e:
3d:0c:ea:1c:9a:b7:1e:e9:52:9f:58:bb:c5:ec:c8:
70:5a:81:99:e1:f8:6e:ae:0b:38:ce:b8:71:f6:77:
82:cd:69:50:08:91:fa:88:eb:19:93:3c:a2:62:44:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:96:2A:A2:B9:27:E2:7C:F4:F0:45:A4:9A:C1:98:63:CC:D3:2F:00
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UZYqorkn4nz08EWkmsGYY8zTLwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.192.0/24
82.197.196.0/23
82.197.200.0/23
82.197.203.0-82.197.205.255
82.197.208.0/20
84.245.26.0/23
84.245.32.0/20
Signature Algorithm: sha256WithRSAEncryption
13:23:b4:52:76:f0:20:76:38:ef:08:a6:97:ce:ac:22:38:c8:
b9:36:6e:36:d2:09:24:2b:d5:6e:a6:17:46:22:56:83:1c:9f:
bf:9c:63:e7:4d:bf:e7:44:59:94:cd:bf:1b:42:f5:e2:66:58:
ef:20:2a:bd:50:6e:ab:e9:87:fb:56:a6:97:91:6d:31:c1:43:
67:14:1b:60:e0:06:26:96:c3:2c:87:d4:3a:3c:db:50:c9:c9:
91:3c:f0:4f:21:40:b9:bb:89:b7:27:f7:0e:92:af:e9:11:dd:
be:42:cf:1c:f5:fa:31:e1:03:0d:b4:9e:8e:39:e0:8d:85:1e:
6c:f9:22:01:88:d3:e0:8c:2b:39:9a:8b:a1:54:19:63:73:53:
7e:17:76:79:3b:8b:11:5e:47:63:1c:43:b6:d6:8e:05:72:35:
21:81:09:cb:61:fb:9c:f8:be:da:2e:58:81:a1:8f:bd:fd:b7:
b5:a3:c9:5c:04:27:2c:9e:10:89:7f:fa:da:4e:0d:2c:03:d4:
6c:15:39:3a:af:a2:94:b0:85:96:58:4a:19:2e:ce:f8:a2:91:
56:9a:b6:55:7c:a9:bf:0e:4a:e8:2d:cb:04:bc:b2:46:a0:a2:
29:b9:9f:f7:6e:3a:9d:42:46:48:ce:45:f5:94:17:ba:3b:24:
0e:95:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:28 2026 by rpki-client