Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa
File: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (raw, json)
Hash identifier: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=
Subject key identifier: 5F:F5:0D:52:BA:56:39:69:BB:16:66:C5:21:A3:3E:18:77:0D:C9:2F
Certificate issuer: /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial: 019CB327F7D55B3CB5A5820A9E1CC06A672A
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa
Signing time: Tue 03 Mar 2026 10:04:26 +0000
ROA not before: Tue 03 Mar 2026 10:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59780
IP address blocks: 185.177.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:27:f7:d5:5b:3c:b5:a5:82:0a:9e:1c:c0:6a:67:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Validity
Not Before: Mar 3 10:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ff50d52ba563969bb1666c521a33e18770dc92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:d3:c4:a3:2c:1b:dc:e4:6f:67:8b:ae:10:
3e:29:08:5e:3d:66:6a:4c:fb:7e:03:9e:31:38:a0:
52:88:70:c1:8d:6f:56:fd:fc:c3:d6:7b:c6:3a:1e:
07:70:53:ba:ec:54:ba:85:d7:4d:b0:b7:0f:c6:f1:
85:fb:e2:ee:39:75:00:71:99:d2:12:b7:7f:77:ed:
bf:f2:30:f9:f9:1c:bf:25:b9:a2:87:4c:42:7e:e4:
7e:bc:b3:dc:a6:b7:7f:02:c0:49:82:d2:88:52:c9:
73:21:71:00:eb:d7:61:aa:7d:6b:0e:20:5f:c5:d5:
bc:61:ab:5b:55:81:25:18:b6:f1:73:2f:a2:ef:f6:
1d:7a:c9:99:ad:b3:0e:b5:a5:b0:34:ee:ee:ed:de:
d5:5b:b6:fc:9d:45:98:74:2b:b4:b3:c2:a4:b7:fe:
16:bd:27:b2:84:cb:1b:ba:24:f2:fa:30:7f:79:f0:
fb:cb:3b:6f:8b:c2:40:1f:72:94:0a:91:3e:33:df:
c1:f6:21:62:8b:22:00:28:e6:78:7f:d4:29:94:1d:
bc:93:46:2a:d1:c6:7f:b5:c7:82:3b:9c:83:8d:48:
01:e6:d9:35:9a:f3:7f:f6:30:82:c0:cd:b1:f1:3a:
4f:dc:e7:09:95:08:f0:bb:cb:51:26:c3:de:5d:50:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F5:0D:52:BA:56:39:69:BB:16:66:C5:21:A3:3E:18:77:0D:C9:2F
X509v3 Authority Key Identifier:
keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.84.0/22
Signature Algorithm: sha256WithRSAEncryption
64:79:1c:75:1e:2e:d2:f7:44:95:08:f4:af:27:4b:eb:3f:82:
4b:ce:1d:9c:eb:4d:65:28:76:a5:cd:9d:d2:4a:7e:e3:34:90:
1c:28:98:60:3d:be:35:65:a9:70:68:ba:c0:1b:52:3d:1d:43:
d0:b6:66:76:0a:15:bb:6a:ac:09:a3:bb:00:bc:2c:3f:3b:3d:
e2:c5:5d:dd:6b:db:da:49:86:bb:ce:e6:fe:fd:cd:2a:ba:4f:
08:01:c6:dd:03:34:7b:8e:44:40:dd:08:ea:55:26:9c:c9:1a:
5a:f1:c8:7a:48:62:fe:11:ac:a9:e2:00:49:9e:80:07:2a:06:
ed:50:22:31:9d:a1:06:85:13:66:4a:e4:72:f2:22:36:ae:8e:
cf:a7:eb:58:dc:cc:c4:89:40:7d:e8:77:6b:ce:fa:28:27:62:
7f:1c:dd:ff:e0:b3:58:9a:02:87:08:27:4c:44:32:1c:a5:74:
e9:54:d6:c8:65:63:5e:56:a5:5e:2f:49:b6:12:7f:cc:7d:5f:
c7:44:2f:82:5a:b6:87:e2:e6:65:9a:9f:db:05:98:d6:40:5e:
27:12:1d:1d:28:cc:e3:91:df:c1:55:1e:95:7c:fb:a8:c8:70:
ab:5e:93:dd:bc:a2:70:89:22:2d:fd:d8:1e:fc:f0:8c:0e:2a:
10:29:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:52:38 2026 by rpki-client