Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/UOvEHE7WE1z9h4a5DkousVoTRlc.roa
File: UOvEHE7WE1z9h4a5DkousVoTRlc.roa (raw, json)
Hash identifier: 0Bl+rJ6pbOT4lYSuzTA8nG72C26t2iwDXqXU8W0NYIo=
Subject key identifier: 50:EB:C4:1C:4E:D6:13:5C:FD:87:86:B9:0E:4A:2E:B1:5A:13:46:57
Certificate issuer: /CN=128bd8243e2536faccb24fead3a2162b8c766626
Certificate serial: 019F2368A8303E99411B5859007CD0E23424
Authority key identifier: 12:8B:D8:24:3E:25:36:FA:CC:B2:4F:EA:D3:A2:16:2B:8C:76:66:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/UOvEHE7WE1z9h4a5DkousVoTRlc.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55002
IP address blocks: 193.26.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:30:3e:99:41:1b:58:59:00:7c:d0:e2:34:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128bd8243e2536faccb24fead3a2162b8c766626
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50ebc41c4ed6135cfd8786b90e4a2eb15a134657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:8e:4b:fd:b3:27:b1:f0:9e:9a:9b:02:25:
e8:fb:e8:98:a7:e9:f6:17:e3:d4:af:ff:73:d9:ec:
52:58:1d:80:98:a2:99:31:75:da:b3:b1:bb:04:60:
d5:ca:17:08:35:71:4e:5d:e6:59:95:e7:0a:91:e1:
b4:e8:88:b5:80:6e:f8:74:9e:46:b3:0f:a7:d8:5f:
52:cd:d0:88:6e:8a:a1:9a:11:05:be:cf:8f:99:30:
d4:d0:b7:ff:9f:a7:84:ff:b3:9b:68:b3:0f:f1:0c:
2d:a1:0b:a2:3a:ed:02:e3:07:84:2c:6d:41:07:bd:
74:46:ab:72:d6:ea:a8:c5:b1:94:34:d0:43:97:30:
c7:45:ac:dc:e9:c0:31:58:c2:5f:70:8a:0d:20:a5:
9e:1e:01:4e:a4:63:ab:dd:5d:7c:8b:cf:7f:27:74:
38:32:18:a6:13:b8:72:9c:21:67:df:4e:d2:23:39:
bd:87:f1:93:b6:a7:76:f4:37:d2:6a:b8:44:91:4d:
c3:1d:38:fd:4d:09:73:01:0b:6f:17:c1:39:f3:8f:
eb:4e:29:b3:72:da:be:99:25:89:1f:2d:0f:2b:a4:
c2:88:13:1f:6c:cc:5b:e8:d8:95:d2:b0:a4:bc:76:
bb:c8:bc:6f:39:b0:3f:26:df:41:70:8c:f0:35:03:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EB:C4:1C:4E:D6:13:5C:FD:87:86:B9:0E:4A:2E:B1:5A:13:46:57
X509v3 Authority Key Identifier:
keyid:12:8B:D8:24:3E:25:36:FA:CC:B2:4F:EA:D3:A2:16:2B:8C:76:66:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/UOvEHE7WE1z9h4a5DkousVoTRlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.125.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:12:3b:f9:20:8e:66:4c:4c:19:a0:1d:c8:c5:dc:1d:f8:d6:
33:fc:9e:1a:e9:30:2e:ec:44:cd:a3:b8:82:19:ce:0c:fe:85:
dc:48:67:50:28:26:74:6e:2a:26:31:ae:f5:1a:d8:6a:b4:fc:
2a:dd:94:81:82:25:f5:6e:5c:79:e8:0b:4e:01:d1:14:f4:ae:
21:95:d7:95:d7:4b:3f:33:78:ac:78:43:9f:f3:c5:10:f9:47:
ad:f1:a0:a7:61:29:52:89:53:92:03:17:e9:78:aa:3f:5e:f9:
db:ed:c3:eb:d6:b3:92:1e:98:d4:e2:9c:5a:f3:3b:15:22:17:
a5:36:d9:cc:34:3d:7a:f3:75:91:40:70:cf:fc:dd:b3:65:03:
c7:72:27:6c:10:e2:17:ab:97:de:d3:c8:50:77:aa:5a:91:12:
0d:44:66:02:df:59:10:78:20:14:29:0c:5b:5c:55:8b:e2:cc:
e0:5e:f9:3f:e4:c4:4b:49:32:8b:c3:3e:e2:01:75:0b:da:4f:
11:ef:bf:e1:4b:e5:68:38:30:55:cf:62:b3:3c:f6:42:01:0d:
c9:47:7b:31:28:94:68:01:99:8f:03:1b:9b:71:1f:94:14:19:
1f:90:01:c4:17:03:d5:c3:9b:d7:0f:f8:49:d7:9c:34:d0:fb:
5e:83:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:44:32 2026 by rpki-client