Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ub91P6IsLRkBqEXneW5xmjablW0.roa
File: Ub91P6IsLRkBqEXneW5xmjablW0.roa (raw, json)
Hash identifier: 0d0O42lJ0RRjMyYK2mN8nBAa0dg6Et2nRsJ35GTGplU=
Subject key identifier: 51:BF:75:3F:A2:2C:2D:19:01:A8:45:E7:79:6E:71:9A:36:9B:95:6D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F81678B61F4A5579DA87290A6845A39E4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ub91P6IsLRkBqEXneW5xmjablW0.roa
Signing time: Mon 20 Jul 2026 21:21:14 +0000
ROA not before: Mon 20 Jul 2026 21:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21082
IP address blocks: 212.192.211.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:67:8b:61:f4:a5:57:9d:a8:72:90:a6:84:5a:39:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 20 21:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51bf753fa22c2d1901a845e7796e719a369b956d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:98:39:0e:43:93:a3:d1:d3:95:2e:e5:c1:
cd:70:34:99:30:c7:ac:76:80:f0:b3:19:3f:6c:9c:
12:86:21:ca:03:21:f3:89:9e:4e:80:40:51:4b:1c:
8b:d5:22:2d:d8:a0:c5:6e:21:8b:1c:b3:f8:8a:84:
45:7c:1d:d4:bb:cf:b0:7f:0f:3f:d8:2c:ba:e5:7a:
cc:d1:5f:a2:42:7b:2d:cf:57:8a:88:bd:e8:ae:bb:
81:f2:97:d4:aa:39:e1:90:9d:69:70:50:c4:a7:38:
90:b9:d8:65:75:0a:ec:c5:5a:e9:ce:cc:d2:00:d8:
cf:a4:2e:bf:14:c4:7e:2a:04:58:c8:00:a4:77:02:
f1:42:f9:28:e4:c6:2f:4d:a3:3d:3f:8d:1b:ed:63:
94:46:f4:7b:00:e3:63:21:ab:56:ff:22:d8:61:1d:
95:89:bc:49:8d:20:f7:57:03:19:f1:23:c3:97:68:
12:6f:9e:0c:32:fb:93:9c:57:b2:51:a0:a7:13:0c:
8f:c9:fe:19:73:42:20:24:ac:f4:7a:40:5d:63:b2:
50:0b:51:90:19:5d:3b:0d:54:22:54:32:1b:e1:49:
ed:ca:03:ba:eb:42:1b:c0:e1:7c:8e:13:82:7e:71:
87:dd:9b:1d:ab:29:3d:0f:b3:97:95:66:f7:a1:e1:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BF:75:3F:A2:2C:2D:19:01:A8:45:E7:79:6E:71:9A:36:9B:95:6D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ub91P6IsLRkBqEXneW5xmjablW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.211.0/24
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:aa:3c:2d:bb:a4:0a:5c:32:a4:93:e0:f6:6c:4b:c7:c5:73:
75:0b:7d:54:b8:49:64:85:49:77:5a:98:1f:bb:f1:d6:af:92:
dd:ce:3a:ca:bf:cc:21:b2:09:fa:38:b7:e2:b0:3c:5a:6e:77:
ac:a0:9f:38:a5:7a:51:d8:2f:5e:a2:42:db:fe:67:e5:4b:85:
46:ac:1a:21:f3:da:db:31:79:67:e1:66:9d:ef:71:89:df:3d:
38:7f:ae:78:26:c4:2f:61:ca:07:f6:56:42:a0:ee:ae:6d:3f:
84:20:68:da:1d:50:3c:2d:99:36:74:62:ae:90:9f:64:78:ab:
12:15:08:e1:45:8f:d8:6e:d2:02:c8:83:cd:4c:53:86:d5:24:
88:dc:83:7f:23:ec:ab:26:e4:e9:bb:ef:c4:9b:dc:7f:68:fe:
06:2a:89:96:0a:14:fe:dc:06:cf:9d:f5:e1:7b:71:f3:8a:bb:
ef:a7:4b:d2:e0:78:fc:1c:80:d5:23:b2:6f:12:c6:4c:6c:42:
9b:6a:b9:95:d2:6f:16:80:96:73:d3:1a:ff:f6:cc:51:1c:a2:
18:fb:98:ec:6a:25:6a:26:66:8e:8d:3c:7a:a6:c2:9f:46:57:
58:e8:84:1e:1f:1e:ab:2b:95:9e:87:35:b7:36:0d:49:68:29:
7e:af:35:42
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+BZ4th9KVXnahykKaEWjnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNzIwMjEyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWJmNzUzZmEyMmMyZDE5MDFhODQ1ZTc3OTZlNzE5YTM2OWI5NTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7+YOQ5Dk6PR05Uu5cHNcDSZMMes
doDwsxk/bJwShiHKAyHziZ5OgEBRSxyL1SIt2KDFbiGLHLP4ioRFfB3Uu8+wfw8/
2Cy65XrM0V+iQnstz1eKiL3orruB8pfUqjnhkJ1pcFDEpziQudhldQrsxVrpzszS
ANjPpC6/FMR+KgRYyACkdwLxQvko5MYvTaM9P40b7WOURvR7AONjIatW/yLYYR2V
ibxJjSD3VwMZ8SPDl2gSb54MMvuTnFeyUaCnEwyPyf4Zc0IgJKz0ekBdY7JQC1GQ
GV07DVQiVDIb4UntygO660IbwOF8jhOCfnGH3Zsdqyk9D7OXlWb3oeFSZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFG/dT+iLC0ZAahF53lucZo2m5VtMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVWI5MVA2SXNMUmtCcUVYbmVXNXhtamFibFcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1MDTAwQA
1MDeMA0GCSqGSIb3DQEBCwUAA4IBAQA+qjwtu6QKXDKkk+D2bEvHxXN1C31UuElk
hUl3Wpgfu/HWr5LdzjrKv8whsgn6OLfisDxabnesoJ84pXpR2C9eokLb/mflS4VG
rBoh89rbMXln4Wad73GJ3z04f654JsQvYcoH9lZCoO6ubT+EIGjaHVA8LZk2dGKu
kJ9keKsSFQjhRY/YbtICyIPNTFOG1SSI3IN/I+yrJuTpu+/Em9x/aP4GKomWChT+
3AbPnfXhe3Hzirvvp0vS4Hj8HIDVI7JvEsZMbEKbarmV0m8WgJZz0xr/9sxRHKIY
+5jsaiVqJmaOjTx6psKfRldY6IQeHx6rK5WehzW3Ng1JaCl+rzVC
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:45 2026 by rpki-client