Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/UOM6gziwTgthgiT-MMgDEZJHkKw.roa
File: UOM6gziwTgthgiT-MMgDEZJHkKw.roa (raw, json)
Hash identifier: zJtaUU6Qy0ipND2taxR1aWCjYr5rjwd98bLyWYvXmh4=
Subject key identifier: 50:E3:3A:83:38:B0:4E:0B:61:82:24:FE:30:C8:03:11:92:47:90:AC
Certificate issuer: /CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Certificate serial: 019F236865A2188BD14A8C8D88A24705F4BF
Authority key identifier: 3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/UOM6gziwTgthgiT-MMgDEZJHkKw.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 188.213.84.0/23 maxlen: 24
2a11:e687::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:65:a2:18:8b:d1:4a:8c:8d:88:a2:47:05:f4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50e33a8338b04e0b618224fe30c80311924790ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:95:39:9f:fc:cc:94:ab:10:ec:b9:d0:bb:
3f:58:e5:9c:8e:8d:44:5a:64:fc:9c:44:6f:35:b7:
b8:ad:6c:69:30:ff:f6:2a:2a:91:18:24:be:5c:04:
d0:b9:41:82:46:4f:e1:6c:2b:cf:0d:7e:f5:31:9c:
85:b6:e8:2a:f6:41:a2:a2:a2:58:80:50:b3:ff:70:
7f:89:5e:1f:d2:a4:a9:fd:dc:1c:d4:82:32:ef:b7:
8c:33:bf:31:a9:79:52:05:43:18:f2:8f:2c:c3:cb:
a6:ac:ef:31:e8:e7:2a:a6:de:0e:6b:50:94:a1:89:
4e:3f:10:c4:cf:ee:55:a7:71:ac:b3:4d:68:2e:b0:
04:db:12:fe:54:16:de:ad:36:7a:60:a6:e2:cf:7e:
7a:62:00:c3:46:73:f3:41:db:c6:77:1b:48:1b:3c:
20:1f:f5:e2:1f:16:d7:08:c3:1e:96:24:79:58:c7:
7a:60:c5:2a:ce:30:83:aa:c1:77:20:fb:86:bd:09:
15:ce:63:5a:65:d8:50:67:d5:4e:c3:cd:c9:0e:87:
1d:28:df:d6:f9:77:a0:11:39:32:0f:78:f4:1e:33:
2c:11:94:62:7f:79:32:63:e3:b5:a6:1f:20:b3:9d:
cf:f8:39:85:90:17:9e:72:94:ab:2f:b6:be:d7:dc:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:3A:83:38:B0:4E:0B:61:82:24:FE:30:C8:03:11:92:47:90:AC
X509v3 Authority Key Identifier:
keyid:3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/UOM6gziwTgthgiT-MMgDEZJHkKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.84.0/23
IPv6:
2a11:e687::/32
Signature Algorithm: sha256WithRSAEncryption
88:73:f9:b0:6c:63:55:3b:34:f0:6d:f3:41:8a:19:16:ff:be:
81:80:7c:2c:d1:c9:89:bd:db:cb:04:be:83:6f:b7:7a:6f:b2:
2e:bc:07:f1:08:9f:95:04:8f:b6:cf:ab:ab:83:78:f1:d7:3f:
04:74:b9:db:a1:6c:dc:56:7e:ea:ed:f6:a3:84:d9:76:41:fa:
3a:64:db:5a:e0:60:8a:17:cd:1e:57:55:fa:fd:15:51:e1:82:
f5:54:82:36:be:1d:91:49:bb:ed:27:d9:64:df:f9:0f:78:c8:
4d:85:6b:6f:73:06:a2:6d:74:33:bf:1d:c2:35:cc:37:a0:f5:
ac:5b:35:7d:16:97:f5:dc:cb:bb:02:3c:44:b6:08:e2:f9:d2:
26:4f:cd:1a:f6:6e:a7:d2:cc:16:df:07:9e:5b:6c:ca:b3:52:
84:a6:ef:fc:e6:e6:2a:a5:da:c9:81:ae:1e:31:40:64:a5:27:
a6:13:95:41:3f:40:36:74:90:bc:e6:23:ca:2e:89:c3:67:9c:
48:b5:83:31:57:c0:8c:72:ad:46:b8:75:04:0b:cd:61:8f:ef:
22:26:83:73:3a:a7:55:47:08:65:13:c0:54:26:f5:02:85:1f:
47:4b:ff:cb:fe:d0:05:66:dc:39:ea:58:4e:c3:b0:02:0a:22:
96:20:7e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:07:02 2026 by rpki-client