Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UAcFyCDZlqx3uz7eUu6u_j1AqHA.roa
File: UAcFyCDZlqx3uz7eUu6u_j1AqHA.roa (raw, json)
Hash identifier: Ap64hbKU12MSCt37VtnhsMwbgGbYxu9a91KAQVQ59zw=
Subject key identifier: 50:07:05:C8:20:D9:96:AC:77:BB:3E:DE:52:EE:AE:FE:3D:40:A8:70
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C77D8E6F7C77B51DF67A500C015B4318E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UAcFyCDZlqx3uz7eUu6u_j1AqHA.roa
Signing time: Thu 19 Feb 2026 21:40:29 +0000
ROA not before: Thu 19 Feb 2026 21:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201048
IP address blocks: 77.239.112.0/23 maxlen: 24
77.239.114.0/23 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:d8:e6:f7:c7:7b:51:df:67:a5:00:c0:15:b4:31:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 19 21:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=500705c820d996ac77bb3ede52eeaefe3d40a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:48:bf:b2:ff:44:a2:88:03:c1:a3:57:98:
64:d1:12:16:6c:04:75:10:fc:1d:82:2d:64:75:52:
27:56:8e:5a:cb:06:e9:9a:de:8f:2b:b7:ec:23:ed:
fa:60:be:28:17:a6:5b:e1:18:7e:48:9b:93:a0:66:
a2:5a:e1:71:9f:af:d9:c5:2c:4d:48:17:20:04:70:
84:48:3e:c3:f6:3c:9e:69:8f:9f:2b:4e:2b:fa:a0:
57:27:dc:e8:1a:26:11:49:f8:d5:0e:cd:0c:2a:e0:
2d:eb:a9:56:72:a4:d0:cd:4a:b1:39:f8:72:51:6d:
5b:ee:cb:ca:0c:c8:e8:83:2b:c3:47:0d:84:ec:ca:
05:4b:56:77:1e:03:7a:0d:54:bb:63:44:34:f9:4c:
20:26:98:5a:61:1c:79:2a:60:1f:a2:15:f1:44:8a:
da:7a:71:12:da:bc:88:f7:d6:02:52:38:c5:78:a0:
0c:3a:14:95:42:fa:ce:cf:ce:7a:50:18:c7:64:58:
41:82:66:c7:36:5f:29:2a:8b:f6:f3:16:a1:7d:3b:
9e:82:58:8d:a6:a3:fb:b1:72:2a:15:b2:6f:9a:fd:
a7:a2:0d:ab:35:24:11:e7:bf:ab:b1:d6:0b:5d:ea:
4b:97:77:19:cf:33:b3:24:17:b6:6c:97:9a:c0:ab:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:07:05:C8:20:D9:96:AC:77:BB:3E:DE:52:EE:AE:FE:3D:40:A8:70
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UAcFyCDZlqx3uz7eUu6u_j1AqHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.112.0/22
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a1:71:01:6b:94:0f:df:e3:fb:1d:f9:62:2c:e7:5d:12:5a:
8b:98:a7:11:f7:5b:24:dc:4a:96:4a:3d:c2:03:fc:15:a8:55:
a7:ae:05:49:41:b6:c3:29:6f:50:ef:0c:0f:9d:bb:5a:ce:3c:
dd:5c:e4:62:d8:8a:e3:c8:cd:8f:3c:e6:df:6f:cd:f2:37:6d:
58:88:21:ab:38:56:2c:8f:5f:97:ff:09:4d:71:24:10:2a:b0:
14:c8:e5:bf:52:bf:f2:31:d3:a7:35:80:a4:e6:53:8b:df:fd:
4d:e2:ca:8e:c6:42:08:93:d7:55:37:04:d0:2e:3a:84:84:cd:
c4:d4:22:41:ff:41:6e:a7:a2:57:9e:29:56:e6:58:df:5a:ea:
98:32:e4:1d:c1:ec:ec:d3:11:55:44:d1:65:40:4d:66:1e:38:
d8:6c:bd:e1:16:2b:3a:8e:e6:48:2f:17:b0:c9:5a:ab:31:1c:
5d:a0:47:e6:5e:ec:86:69:fe:b3:5f:6d:51:42:32:06:d4:af:
fc:15:b9:2e:e4:9a:8c:f1:e2:8b:ff:79:41:1c:1f:71:3e:08:
df:71:3e:ce:65:29:01:7b:5f:a6:5c:27:11:d7:0c:e0:aa:79:
eb:4f:c5:3e:a1:e1:5b:b4:23:7b:5c:61:bb:a2:3b:10:28:ff:
93:76:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:07:29 2026 by rpki-client