Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U-2E6AecDipRHN_YihgnM8mQX5s.roa
File: U-2E6AecDipRHN_YihgnM8mQX5s.roa (raw, json)
Hash identifier: vGPK/rAfYeHsaZ1v6u68RWDgmivUHypvQHCAADgmxMY=
Subject key identifier: 53:ED:84:E8:07:9C:0E:2A:51:1C:DF:D8:8A:18:27:33:C9:90:5F:9B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D5ED5D9561C7554128700C27A43ED2799
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U-2E6AecDipRHN_YihgnM8mQX5s.roa
Signing time: Sun 05 Apr 2026 18:09:26 +0000
ROA not before: Sun 05 Apr 2026 18:09:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 193.189.82.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 14:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5e:d5:d9:56:1c:75:54:12:87:00:c2:7a:43:ed:27:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 5 18:09:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53ed84e8079c0e2a511cdfd88a182733c9905f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:61:5c:e9:8b:ca:40:17:a7:da:a3:4f:e6:
48:d6:9f:bb:ef:60:16:00:61:3b:cd:39:10:59:7b:
55:c0:49:a0:0a:5e:bf:91:ec:e4:e9:32:49:50:62:
0f:41:20:84:b5:59:dd:3f:1f:de:89:b8:26:4f:43:
33:01:36:38:14:e7:17:e3:30:12:56:cb:27:89:01:
7d:ad:64:89:2a:f5:08:7e:f5:45:0e:fa:f0:a7:2b:
d3:34:5d:15:18:81:2f:e5:9b:10:a6:df:c1:bd:68:
c0:65:b9:a3:2f:3d:3b:3a:a4:c2:48:bb:40:6f:08:
e6:4b:8a:31:03:95:e6:36:77:45:d9:01:cc:d3:1e:
ba:0a:ac:2a:b6:4e:fc:d6:98:ac:59:fa:af:c7:86:
0b:9b:35:74:e5:e5:f4:ea:fe:7a:00:5d:5b:62:07:
3b:f9:d3:1c:3c:68:b1:c1:f4:0e:d1:4e:24:aa:c2:
f4:a4:31:3a:1c:e6:ce:ac:4e:11:69:ad:82:76:1e:
56:5e:27:af:27:9f:9f:c5:1c:19:2d:18:9f:96:8b:
e1:8c:6b:28:6b:48:4e:f1:87:db:47:24:b9:11:6e:
b6:36:e9:bb:35:a9:97:8a:95:62:4d:f3:96:1d:97:
a8:8e:b8:05:ca:d8:42:25:bd:cf:99:36:2b:3a:57:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:84:E8:07:9C:0E:2A:51:1C:DF:D8:8A:18:27:33:C9:90:5F:9B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U-2E6AecDipRHN_YihgnM8mQX5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.82.0/23
Signature Algorithm: sha256WithRSAEncryption
db:f4:82:bc:01:8b:33:5d:38:7d:15:f7:32:3b:b1:8e:f5:95:
27:85:52:86:fe:58:4a:6b:c1:3f:28:e3:14:86:f9:23:0c:7b:
b6:c1:b6:99:47:ff:2b:2d:10:3c:c0:52:4b:01:a3:9c:17:de:
0e:98:57:4f:73:4a:88:5b:6c:d0:fd:55:50:96:6b:84:62:66:
f3:44:75:f6:d6:13:2f:58:9f:e8:0b:0b:3d:94:2e:f7:d8:36:
f4:97:9e:dd:8f:9e:7b:6a:95:96:57:dc:c2:d7:fc:30:8d:e7:
3b:86:8f:54:53:8c:0a:90:b4:f1:3a:95:af:d1:8e:40:07:68:
34:23:a8:3d:6d:43:ef:ae:6c:43:b7:1a:7b:fc:34:29:e7:42:
3c:da:1e:35:f5:b1:10:b9:d0:89:78:1d:32:98:08:ec:6f:4a:
90:2a:11:15:91:26:1f:d3:36:8b:83:f5:da:e3:51:8e:e5:f8:
e1:43:2d:24:50:ef:55:88:a3:dd:2a:2a:19:2d:c3:90:0f:a5:
e2:3a:de:e9:9a:cd:e2:61:0e:09:f8:71:ec:13:51:77:b7:24:
ce:38:73:79:8e:51:1e:d2:ae:01:de:49:c8:a1:8a:b0:dc:27:
76:c6:1e:3c:87:ac:ef:39:33:6d:6d:38:78:24:98:e3:91:5a:
19:68:64:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1e1dlWHHVUEocAwnpD7SeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDA1MTgwOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2VkODRlODA3OWMwZTJhNTExY2RmZDg4YTE4MjczM2M5OTA1ZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNlhXOmLykAXp9qjT+ZI1p+772AW
AGE7zTkQWXtVwEmgCl6/kezk6TJJUGIPQSCEtVndPx/eibgmT0MzATY4FOcX4zAS
VssniQF9rWSJKvUIfvVFDvrwpyvTNF0VGIEv5ZsQpt/BvWjAZbmjLz07OqTCSLtA
bwjmS4oxA5XmNndF2QHM0x66Cqwqtk781pisWfqvx4YLmzV05eX06v56AF1bYgc7
+dMcPGixwfQO0U4kqsL0pDE6HObOrE4Raa2Cdh5WXievJ5+fxRwZLRiflovhjGso
a0hO8YfbRyS5EW62Num7NamXipViTfOWHZeojrgFythCJb3PmTYrOlfEbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFPthOgHnA4qURzf2IoYJzPJkF+bMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVS0yRTZBZWNEaXBSSE5fWWloZ25NOG1RWDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwb1SMA0G
CSqGSIb3DQEBCwUAA4IBAQDb9IK8AYszXTh9FfcyO7GO9ZUnhVKG/lhKa8E/KOMU
hvkjDHu2wbaZR/8rLRA8wFJLAaOcF94OmFdPc0qIW2zQ/VVQlmuEYmbzRHX21hMv
WJ/oCws9lC732Db0l57dj557apWWV9zC1/wwjec7ho9UU4wKkLTxOpWv0Y5AB2g0
I6g9bUPvrmxDtxp7/DQp50I82h419bEQudCJeB0ymAjsb0qQKhEVkSYf0zaLg/Xa
41GO5fjhQy0kUO9ViKPdKioZLcOQD6XiOt7pms3iYQ4J+HHsE1F3tyTOOHN5jlEe
0q4B3knIoYqw3Cd2xh48h6zvOTNtbTh4JJjjkVoZaGRj
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:23 2026 by rpki-client