Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UEfO1lJAczX6zh9FJhy4UYF1ZeY.roa
File: UEfO1lJAczX6zh9FJhy4UYF1ZeY.roa (raw, json)
Hash identifier: qoxWGpgOEjBNBQbnK7LlDmeyxZUzl4EgljqbqS22W5g=
Subject key identifier: 50:47:CE:D6:52:40:73:35:FA:CE:1F:45:26:1C:B8:51:81:75:65:E6
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F84CB771B03F6F0D171C7D40B6B7814AA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UEfO1lJAczX6zh9FJhy4UYF1ZeY.roa
Signing time: Tue 21 Jul 2026 13:09:14 +0000
ROA not before: Tue 21 Jul 2026 13:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:8cc0::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:cb:77:1b:03:f6:f0:d1:71:c7:d4:0b:6b:78:14:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 21 13:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5047ced652407335face1f45261cb851817565e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:e1:9d:03:0f:6e:c0:b7:3a:e8:bc:2a:9b:
03:4b:af:49:77:b4:c4:56:da:90:03:0a:e6:df:6f:
78:46:ad:c8:87:f7:34:71:94:b6:a9:6b:d4:0f:c2:
3e:1b:f5:34:aa:1f:72:9d:73:cb:13:0e:17:54:37:
99:f5:0e:f7:6f:5e:cd:af:93:20:95:29:37:9f:cb:
cf:45:28:ad:cc:3a:f6:04:fa:17:1f:6a:f9:38:e7:
17:eb:16:6e:ab:5f:87:b1:a3:43:c5:c0:1e:95:bf:
6a:fb:13:8c:ea:6e:16:c7:3f:b8:04:0b:46:1f:29:
2e:12:9c:cc:1c:22:55:69:27:61:59:37:ad:2e:21:
2d:59:a9:b0:9e:d7:76:46:de:4a:6f:22:17:0e:83:
8a:70:4f:07:db:76:a2:b1:a3:ee:90:f2:55:95:16:
ab:25:a2:3d:ff:41:50:82:19:dc:3d:23:2f:b7:41:
95:fa:4a:4c:ca:7a:46:bd:3e:df:32:fb:35:80:80:
21:2d:6b:57:98:8d:06:c4:6a:db:30:7d:bc:ad:b8:
34:e5:56:35:c2:6e:99:a7:90:3c:d8:c7:fe:83:46:
be:cd:8d:ea:0a:3c:44:a1:e0:e1:3e:28:67:bd:16:
9c:ab:7a:52:4b:66:d5:99:44:32:d4:84:fb:6f:d4:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:47:CE:D6:52:40:73:35:FA:CE:1F:45:26:1C:B8:51:81:75:65:E6
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UEfO1lJAczX6zh9FJhy4UYF1ZeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8cc0::/29
2a0d:b840::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:e180::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:2d00::/29
2a11:4540::/29
2a11:4f00::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:9580::/29
2a11:9640::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:b0c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:8380::/29
2a12:8480::/29
2a12:8a00::/29
2a12:9200::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:c980::/29
2a12:d080::/29
2a12:d200::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
42:e0:14:b9:04:12:fe:c0:0c:d3:ff:8e:0c:68:20:d9:14:2b:
c6:c0:5d:a2:97:c6:7b:f7:bc:57:02:d1:35:80:f0:17:f8:f9:
40:e5:9a:02:7e:af:1b:39:ca:ae:09:15:f0:81:ad:c6:40:e0:
8f:68:28:3d:49:f8:c6:3c:71:20:32:43:07:36:ab:84:54:54:
1d:99:eb:2d:c9:5f:37:9c:b5:32:0e:d6:b1:81:83:df:37:df:
7c:d3:1f:4e:84:1d:b7:4b:0b:c8:be:cc:d9:4b:d4:1f:5e:43:
2f:df:69:a9:d0:bd:5b:61:ab:f4:e0:2a:13:7f:fe:68:00:b9:
42:9e:dd:c0:af:79:83:b7:4c:d6:00:ca:45:8d:5c:66:31:d2:
e7:17:70:00:d8:c0:43:37:8c:1c:c5:f8:53:13:dd:0c:b0:b1:
50:1a:0f:51:47:34:38:6b:fc:f8:ce:32:8d:1b:89:c7:31:d7:
e4:ca:ea:79:28:5e:45:e6:da:84:ba:50:ec:b8:6e:23:f3:8b:
87:87:01:0c:39:af:1d:e6:bf:16:0f:f9:4b:e3:ce:37:4b:ee:
b4:e2:9f:6f:66:6e:56:ef:0d:6e:69:61:1a:50:09:1e:b7:19:
4e:5d:e4:22:40:58:c8:f4:04:af:86:78:ef:96:91:63:af:a9:
8e:d4:e6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:37 2026 by rpki-client