Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/Ubp5Og51PZBNS6HboXw93j92KsA.roa
File: Ubp5Og51PZBNS6HboXw93j92KsA.roa (raw, json)
Hash identifier: /k1Klx55mGrgkQUlZEtN8/AR7GCNuwD05hpmFMl774Q=
Subject key identifier: 51:BA:79:3A:0E:75:3D:90:4D:4B:A1:DB:A1:7C:3D:DE:3F:76:2A:C0
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 01A13FC8AFD68552ACE51557A0050B85495A
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/Ubp5Og51PZBNS6HboXw93j92KsA.roa
Signing time: Thu 15 Oct 2026 13:37:59 +0000
ROA not before: Thu 15 Oct 2026 13:37:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198121
IP address blocks: 86.54.11.0/24 maxlen: 24
86.54.105.0/24 maxlen: 24
2a13:1000:fff1::/48 maxlen: 48
2a13:1001::/48 maxlen: 48
2a13:1002:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:c8:af:d6:85:52:ac:e5:15:57:a0:05:0b:85:49:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Oct 15 13:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51ba793a0e753d904d4ba1dba17c3dde3f762ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:b4:1f:92:71:43:39:2e:38:66:7a:7f:a3:
38:ca:e8:65:05:a5:69:be:08:14:c9:b4:34:a4:7e:
95:fb:3f:72:d5:f4:33:cd:86:b5:ea:a6:79:1a:2e:
02:06:3f:53:73:a2:61:e8:9e:d4:38:1a:dc:2f:e9:
42:7c:ea:f1:e8:db:39:4a:07:95:6f:79:6f:2d:de:
a2:c3:dd:98:ee:92:e4:ec:64:5c:17:72:ce:85:e1:
58:01:28:dd:57:86:ba:8c:74:b6:2f:c0:9f:dc:98:
0c:db:cc:ff:fc:ed:40:38:4c:5a:39:a7:8c:ed:ff:
ad:86:92:3a:7a:27:69:39:04:c6:af:68:04:09:78:
bd:a4:fb:37:88:d5:66:1f:f7:9e:51:18:b9:ed:da:
2d:36:18:c8:11:75:ae:16:2f:1d:b5:94:cd:68:d6:
a3:1f:d0:75:a0:97:42:0a:2e:0e:6e:5b:4e:1f:9f:
bb:bc:89:31:eb:f8:9d:27:06:c6:19:f0:59:45:0b:
c7:94:30:d9:75:53:c8:b4:35:ec:81:77:0b:8d:7f:
3a:f8:79:72:2e:75:d2:5d:e7:ac:87:1c:96:85:52:
df:30:a0:55:52:3c:6d:06:0c:cb:0d:b2:73:ec:35:
82:a0:04:bd:28:41:f0:07:91:e0:24:79:7e:04:b9:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BA:79:3A:0E:75:3D:90:4D:4B:A1:DB:A1:7C:3D:DE:3F:76:2A:C0
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/Ubp5Og51PZBNS6HboXw93j92KsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.11.0/24
86.54.105.0/24
IPv6:
2a13:1000:fff1::/48
2a13:1001::/48
2a13:1002:2::/48
Signature Algorithm: sha256WithRSAEncryption
55:66:02:3c:2c:59:3f:04:d5:fa:3f:be:f6:53:c5:92:4c:d6:
70:e3:06:f6:33:35:d3:89:09:15:0d:82:48:c5:60:e1:2b:d0:
37:67:df:94:ea:5a:cf:ed:58:58:98:a1:31:a1:41:6a:69:c5:
e2:8c:dc:fa:92:ec:87:25:5c:05:31:06:0e:1e:8e:da:df:d7:
96:ae:9a:d0:b9:02:4f:a5:d8:21:ca:bb:b3:f5:09:12:b3:17:
f2:31:03:e5:07:f0:46:59:c8:e4:e3:a1:86:ed:62:ec:f0:de:
70:0a:50:60:8d:35:b4:f1:ee:5b:ce:aa:72:b1:3a:70:8c:29:
f9:9f:25:bd:57:86:5f:c4:e0:fe:2e:b1:c2:8c:dc:7c:ae:c6:
d4:9d:7d:c1:84:50:44:77:ac:3b:5b:84:70:28:55:9d:cf:ac:
8a:40:58:72:3d:b1:d5:26:d1:22:99:48:5d:3c:f9:63:43:69:
45:f8:63:dc:70:ea:76:4a:01:ef:90:6f:4b:dd:b0:74:73:22:
e1:6f:a7:1d:71:0d:34:39:97:17:b4:68:60:c1:8d:c6:ae:48:
8f:5b:47:4f:85:48:52:9c:01:9c:2e:b6:8f:e8:e7:5f:33:45:
82:b5:6a:07:6a:51:25:0a:77:9c:5a:1c:96:28:b7:32:5d:51:
36:8e:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:46 2026 by rpki-client