Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/UWd_kiLA4Zqjhukv1HISU4dgFOg.roa
File: UWd_kiLA4Zqjhukv1HISU4dgFOg.roa (raw, json)
Hash identifier: VipRtF6sqqWwFIXuY/edHZjadYbU4Uhjewz9oicfLsU=
Subject key identifier: 51:67:7F:92:22:C0:E1:9A:A3:86:E9:2F:D4:72:12:53:87:60:14:E8
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A16C7C4560E2106E72CE8F5BDEFCFC9BFC
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/UWd_kiLA4Zqjhukv1HISU4dgFOg.roa
Signing time: Sat 24 Oct 2026 05:57:25 +0000
ROA not before: Sat 24 Oct 2026 05:57:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197196
IP address blocks: 189.24.73.0/24 maxlen: 24
189.24.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7c:45:60:e2:10:6e:72:ce:8f:5b:de:fc:fc:9b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Oct 24 05:57:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51677f9222c0e19aa386e92fd4721253876014e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:a3:ad:e3:05:8c:95:0b:d4:1f:99:a4:7c:
45:21:d0:e9:6a:05:e1:ee:5a:dd:61:9a:91:83:6f:
53:3f:de:a9:c2:fa:a9:22:03:50:d3:93:fd:3d:63:
f7:28:09:37:8f:8e:24:30:dc:84:bc:55:27:f2:55:
5b:46:b0:9a:45:c5:57:0e:47:d7:47:08:0a:b5:7c:
50:4e:74:25:16:f9:0a:ce:da:0b:41:59:81:98:02:
cb:8d:9b:5c:66:8e:cb:f6:fa:e0:92:ca:5e:f8:52:
9d:a4:41:b1:60:1e:22:37:5c:67:21:2a:98:3f:98:
a3:ee:59:08:1e:34:81:eb:de:29:f5:74:48:53:38:
dc:5b:64:e0:45:56:81:38:96:4d:2a:b0:a2:19:fd:
53:e2:2e:c1:5d:b0:98:0d:af:19:54:ae:c9:c9:bb:
62:da:fe:d5:46:d6:f7:11:93:ce:bf:7f:16:a8:d5:
1f:50:13:8c:69:c7:0e:58:64:6e:2b:04:ed:f2:46:
83:f1:d4:c0:68:ae:cc:9d:37:72:77:d4:2c:29:02:
43:18:c3:0b:9c:74:db:fc:7b:d9:a8:ec:ad:2b:ec:
a4:b6:20:44:36:53:95:01:ba:6f:fa:c6:7d:ed:27:
eb:4e:4d:06:24:9f:b3:d4:64:82:27:97:ab:06:44:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:7F:92:22:C0:E1:9A:A3:86:E9:2F:D4:72:12:53:87:60:14:E8
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/UWd_kiLA4Zqjhukv1HISU4dgFOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.24.73.0/24
189.24.76.0/24
Signature Algorithm: sha256WithRSAEncryption
24:34:1a:b4:fb:c8:d7:da:14:d0:7c:5c:90:80:2c:8e:57:3f:
9d:9b:b7:a1:ee:12:44:87:62:ec:67:90:c7:59:41:fa:20:a3:
65:3c:d6:0c:ca:6c:8b:83:0d:4d:54:32:eb:ff:83:9a:a9:5f:
6f:c8:72:5e:9b:7d:6c:b6:c4:c4:f6:39:64:1b:64:40:91:9c:
ab:76:c6:7a:a6:16:93:06:a6:64:d2:03:3e:a0:20:a4:91:20:
6f:3f:e6:ed:4a:85:1e:21:39:03:7f:fe:5e:37:67:94:74:7e:
f7:e7:1b:ae:a9:04:73:e5:b0:bd:f2:b9:bd:80:66:53:b1:59:
c8:89:56:68:c4:b7:d8:92:bb:16:33:3e:37:c0:f8:93:d5:ff:
16:7b:d5:a1:c1:16:61:04:b1:00:a4:28:7d:d8:f4:bf:9b:e8:
b8:1b:95:06:a2:e6:55:48:e4:4d:50:ab:bb:17:e0:db:5a:d9:
77:18:eb:e8:41:fc:94:99:da:4f:d2:49:36:d1:5a:57:f5:c9:
76:3e:56:45:fe:82:e0:57:e9:76:57:cf:dd:ca:c6:86:0d:a4:
dc:bf:ca:9a:cd:1d:ca:3c:28:99:8d:d3:63:a1:da:38:96:64:
fc:3a:a5:d0:ef:5a:92:87:f6:63:d8:78:d1:54:7b:d7:aa:7d:
88:1c:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:19:36 2026 by rpki-client