Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UW9Gu43UGkOM6bZcu0a_gap2XkY.roa
File: UW9Gu43UGkOM6bZcu0a_gap2XkY.roa (raw, json)
Hash identifier: ZzcdWEgMqwdjzPNcaTyO8HS379taJXsL6GpoT/4IAUY=
Subject key identifier: 51:6F:46:BB:8D:D4:1A:43:8C:E9:B6:5C:BB:46:BF:81:AA:76:5E:46
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019FA9765EDDC6001A533B45B038A3A585DB
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UW9Gu43UGkOM6bZcu0a_gap2XkY.roa
Signing time: Tue 28 Jul 2026 16:02:14 +0000
ROA not before: Tue 28 Jul 2026 16:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395839
IP address blocks: 85.202.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:76:5e:dd:c6:00:1a:53:3b:45:b0:38:a3:a5:85:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 28 16:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=516f46bb8dd41a438ce9b65cbb46bf81aa765e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:1d:6f:34:b1:41:80:15:c1:a5:74:cd:ce:
d5:d0:c8:92:fc:86:ff:8e:b3:84:20:c3:af:57:bb:
c7:25:3a:96:e3:3f:4d:bd:cb:b2:2a:b6:d0:6c:e5:
41:73:70:4d:5d:0a:e0:18:a4:19:4b:26:c9:31:9d:
e5:3d:05:69:a7:a2:5b:ec:e2:fe:ae:bb:82:85:65:
52:06:72:1c:fa:c2:85:45:5d:7a:13:62:55:ad:71:
7c:24:0f:a1:24:15:50:ab:81:87:34:c2:24:b7:d1:
dc:b6:9c:44:98:b3:b2:1b:13:85:a5:31:1b:45:b8:
78:84:b7:3f:c0:61:94:d9:70:05:a9:01:cc:63:5a:
10:d1:99:9a:08:bb:03:d3:22:04:24:d1:e3:27:a6:
0c:18:d5:6f:88:26:47:e6:b4:d0:52:3f:6c:fc:36:
86:fc:fa:a6:cc:e8:fd:b1:30:64:f6:fc:c9:d1:3f:
a4:c8:fb:2a:86:36:2b:b8:53:4d:3c:b9:7e:4d:73:
16:ba:39:7d:77:50:7d:15:ad:59:72:88:20:87:98:
65:f0:56:6c:1d:b3:0d:66:e9:34:74:09:c0:b6:83:
3e:ce:b2:87:d0:d8:7c:ef:6e:85:8c:4b:c1:06:0a:
db:5e:62:92:e9:c5:b5:23:91:18:07:08:c2:a0:92:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6F:46:BB:8D:D4:1A:43:8C:E9:B6:5C:BB:46:BF:81:AA:76:5E:46
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UW9Gu43UGkOM6bZcu0a_gap2XkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.86.0/24
Signature Algorithm: sha256WithRSAEncryption
41:17:a0:51:c5:eb:af:9f:b6:58:4d:3b:78:93:69:97:73:c6:
2b:40:3d:7e:0c:2c:47:26:e7:d9:3e:ae:d2:8d:7b:37:65:db:
29:82:9c:d4:fc:4e:d8:36:b9:56:e6:78:b0:1a:d3:35:64:02:
53:d0:57:1b:06:30:47:4c:08:f3:be:76:a4:4c:25:7a:90:f1:
21:4e:b5:6d:8c:8b:8d:5c:62:d4:93:03:29:83:66:d5:47:68:
15:4f:c4:33:94:6a:d8:26:b2:f0:f8:8e:89:8d:0c:9c:63:d8:
93:9f:d2:6a:5f:66:38:73:67:4a:3f:8b:6b:ea:e6:da:95:f6:
d8:16:f9:4e:11:96:2b:7f:22:29:36:a3:0e:b7:60:39:e9:51:
7d:e7:c6:e8:29:6e:07:ab:e9:17:63:90:53:f8:d2:ad:51:ae:
05:9c:62:75:88:b4:ca:13:07:2f:22:3f:19:03:7f:4b:99:b0:
85:16:0f:49:e1:1b:e2:d0:ef:ec:42:1d:2e:d4:90:00:17:dc:
84:7e:0e:5f:71:37:44:d7:2f:40:57:af:0a:54:ba:78:b6:6a:
6b:97:2f:2e:d2:31:20:b9:77:d0:77:cc:08:74:05:9c:1f:30:
4f:fe:36:ec:ca:b1:09:c7:f6:77:36:91:d3:ef:81:36:1b:c3:
41:8e:90:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:02:15 2026 by rpki-client