Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UNmFYDYevD4r8LdEKeA-fCfSQOw.roa
File: UNmFYDYevD4r8LdEKeA-fCfSQOw.roa (raw, json)
Hash identifier: 4MAmWT3PavNm51sALav+MGlAo19CbfSj/JFOMwCbLfk=
Subject key identifier: 50:D9:85:60:36:1E:BC:3E:2B:F0:B7:44:29:E0:3E:7C:27:D2:40:EC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FC7EE4E2D84D91548730585F8B1AB251B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UNmFYDYevD4r8LdEKeA-fCfSQOw.roa
Signing time: Mon 03 Aug 2026 14:01:51 +0000
ROA not before: Mon 03 Aug 2026 14:01:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
212.193.20.0/24 maxlen: 24
212.193.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:ee:4e:2d:84:d9:15:48:73:05:85:f8:b1:ab:25:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 3 14:01:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50d98560361ebc3e2bf0b74429e03e7c27d240ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:bd:43:c5:33:32:3c:f0:d8:fa:d4:e9:fd:
c6:13:75:99:ff:85:0f:56:34:92:d5:dd:43:22:65:
28:b2:71:88:91:93:d9:e6:ab:46:da:56:99:53:34:
d9:e6:d1:82:69:40:85:a4:7b:9e:c3:57:17:6e:98:
0a:91:93:e1:6c:c3:9d:c2:b1:bf:f0:f5:2b:db:e5:
fc:8d:89:b0:03:aa:2f:aa:f0:19:0f:1d:6c:68:de:
fe:1c:c4:d0:4e:a2:9f:ca:b9:7b:fc:17:b2:c3:35:
14:e9:bd:9f:bb:83:7c:d1:85:7c:ad:59:4c:9b:a9:
50:df:b9:c0:73:5b:e9:80:ac:cf:46:7e:5e:2f:9e:
26:a4:76:e7:70:d2:4f:7f:25:2a:42:6e:23:b2:9c:
0f:07:b5:83:71:53:1b:3e:1f:c7:3f:65:30:96:93:
b5:55:b4:e3:1e:7a:65:68:44:72:71:2d:57:8c:42:
fc:fd:95:1c:b0:90:f4:20:18:47:1e:b2:ce:8e:cf:
c0:97:74:bc:1c:5c:9c:71:a7:77:46:ea:ca:0d:24:
87:a7:b9:72:a6:5f:7e:17:af:9d:be:02:ff:29:e8:
97:05:b7:5f:16:16:69:50:cb:40:dc:b4:d2:1f:e8:
c9:55:46:2a:a1:30:1f:e2:7b:f6:0e:fe:6a:9c:18:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:85:60:36:1E:BC:3E:2B:F0:B7:44:29:E0:3E:7C:27:D2:40:EC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UNmFYDYevD4r8LdEKeA-fCfSQOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0/23
193.124.17.0/24
194.58.56.0/24
194.58.154.0/23
194.87.18.0/24
194.87.48.0/24
194.87.51.0/24
194.87.54.0/23
194.87.125.0/24
194.87.178.0/24
194.87.233.0/24
194.87.255.0/24
195.58.62.0/24
195.133.9.0/24
212.193.20.0/24
212.193.23.0/24
Signature Algorithm: sha256WithRSAEncryption
06:50:57:6a:ca:16:57:ce:43:56:dc:9d:72:e6:9c:06:7a:f6:
ba:c3:0d:f5:f9:cc:a1:b8:0e:4f:54:d2:fe:d4:5b:d8:a6:c6:
8e:2f:f4:7e:d8:d6:3e:c9:a5:b3:46:6b:50:e7:4c:8e:f3:f5:
54:39:55:1c:be:22:aa:fc:5e:df:68:47:9f:59:5f:30:fd:06:
d8:e8:cc:83:ea:0a:8c:f5:46:f9:36:49:9f:23:ca:7d:91:ff:
4a:13:46:bc:ba:83:2a:3b:c5:ab:2e:15:5f:6a:c5:8f:e4:95:
96:b9:a9:80:55:b4:4e:c7:c7:0e:03:17:98:d3:dd:d8:c3:fc:
07:3b:d8:e5:69:05:64:d2:02:a0:89:d3:21:dd:ee:79:a8:b2:
0a:60:cd:ef:80:36:9b:e1:68:5b:50:e4:f5:dd:e7:1b:68:cd:
2e:33:48:fd:66:22:f7:ad:0c:e7:a5:9c:cd:80:40:3c:92:41:
eb:d4:ec:7c:b0:ae:74:98:5b:ef:04:9b:0f:08:0c:87:92:dc:
59:ea:97:36:7a:ff:69:1f:b8:a0:ff:2c:60:ed:74:e4:a2:bd:
c7:08:10:ee:d9:e5:22:a2:1e:ce:07:31:da:e2:bb:4e:8e:ec:
79:b0:5b:ef:8e:91:e3:df:0f:69:97:7b:ae:68:3f:cf:6c:41:
61:46:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 16:13:13 2026 by rpki-client