Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UHhV1zz5aSXqdt3kV6E4M37Gv4Q.roa
File: UHhV1zz5aSXqdt3kV6E4M37Gv4Q.roa (raw, json)
Hash identifier: ZEUaiAAKF4P6TvUylroQSBzbN8kH8Epp2PNgqQTBPNw=
Subject key identifier: 50:78:55:D7:3C:F9:69:25:EA:76:DD:E4:57:A1:38:33:7E:C6:BF:84
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F59C18C226C1A4D7D800A8FB71B114653
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UHhV1zz5aSXqdt3kV6E4M37Gv4Q.roa
Signing time: Mon 13 Jul 2026 04:34:44 +0000
ROA not before: Mon 13 Jul 2026 04:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213817
IP address blocks: 193.124.201.0/24 maxlen: 24
195.58.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:c1:8c:22:6c:1a:4d:7d:80:0a:8f:b7:1b:11:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 13 04:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=507855d73cf96925ea76dde457a138337ec6bf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0a:4e:ad:a9:2c:05:46:85:8c:bb:9c:42:e1:
3f:2b:c5:6a:9a:5c:61:38:59:0c:7e:b1:6a:6a:2f:
bb:6e:f8:93:4e:5b:ae:73:ce:12:3d:fa:42:9a:08:
07:d4:6e:ba:1e:23:51:23:97:48:8d:b1:ec:e1:3f:
45:0f:d0:34:f3:67:74:48:f7:70:3f:24:5a:78:60:
df:75:05:34:fb:1b:87:9c:97:ea:7b:ab:69:47:f3:
2b:db:6e:00:67:3c:e4:36:7a:70:7f:1e:c1:95:a8:
3a:2a:42:45:41:98:f1:0f:c3:b5:50:1a:f3:3c:8e:
8d:25:d9:a2:0f:c5:86:8e:79:f1:80:04:9a:f0:b8:
f7:99:47:9d:65:d1:73:25:6c:8f:86:b7:fe:cc:06:
1a:bb:73:70:c8:62:27:1c:ce:3d:0c:87:ff:29:bc:
21:a1:ce:0a:9d:c2:f4:41:dd:2b:58:28:0e:55:7f:
f3:79:6b:62:e3:5e:9d:18:8b:44:74:3b:22:e0:2a:
b9:22:b2:43:dd:73:f7:19:bf:ed:f8:71:68:af:31:
67:ae:9e:f5:f4:63:ad:79:ee:55:b5:e5:1e:d8:13:
8d:9d:bd:da:04:56:d5:eb:b7:b8:f8:f3:46:dc:6a:
b8:10:19:59:27:26:8e:e3:ab:0c:7e:9c:57:a2:c8:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:78:55:D7:3C:F9:69:25:EA:76:DD:E4:57:A1:38:33:7E:C6:BF:84
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UHhV1zz5aSXqdt3kV6E4M37Gv4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.201.0/24
195.58.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bc:89:3b:f5:cd:49:e1:17:ac:e3:4e:9a:91:9c:23:07:3c:
92:e7:96:9d:31:2b:3b:5c:a4:9c:27:fd:42:7a:db:b7:d9:41:
a3:93:ae:6d:17:72:4e:87:25:b8:f4:24:d0:84:0f:a1:80:ad:
88:5a:cd:9f:86:d2:5e:97:27:6f:b0:14:0d:88:2b:ec:6b:9b:
88:47:cd:6f:32:c3:fa:09:91:ad:96:d3:2d:ed:ac:97:70:04:
95:95:63:8c:d9:d9:82:10:12:bc:da:3d:84:2c:6e:81:5b:f7:
e6:5c:75:d6:1a:f0:ff:05:62:e7:76:e9:be:85:b5:10:64:42:
2a:5f:2b:2b:b9:e0:c0:d3:05:85:30:7a:5a:97:dd:d7:6f:6c:
9d:1b:f9:c9:b2:6d:40:84:66:b1:60:a4:dc:73:a8:0b:90:82:
54:1f:c1:1b:8a:4e:1d:4a:de:59:73:b1:e2:24:f7:e5:64:3e:
30:49:2d:9a:ad:96:f1:c2:b7:66:af:2b:e1:c8:20:ea:5f:ea:
59:b4:40:3c:9d:aa:dd:07:5c:da:62:95:a3:74:ea:df:20:23:
44:ad:58:98:e6:f9:5c:c5:56:d2:65:c2:3e:c3:a4:0e:8e:8a:
73:3a:29:1c:e6:35:a2:11:0a:04:7d:36:19:d6:e9:e2:19:5c:
58:0a:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:36 2026 by rpki-client