Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/UgupAZY5QJySwHXVm0LImHMuaJU.roa
File: UgupAZY5QJySwHXVm0LImHMuaJU.roa (raw, json)
Hash identifier: f7ZOa3khi07L5aJPdag889RAJ+Hvy+5kxeKdi/nUhjw=
Subject key identifier: 52:0B:A9:01:96:39:40:9C:92:C0:75:D5:9B:42:C8:98:73:2E:68:95
Certificate issuer: /CN=6ff50cc1c7d066d4881dbf4de739f51024274d6a
Certificate serial: 019DE2719A5201769C7F8F17C511A49B1F0E
Authority key identifier: 6F:F5:0C:C1:C7:D0:66:D4:88:1D:BF:4D:E7:39:F5:10:24:27:4D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_UMwcfQZtSIHb9N5zn1ECQnTWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/UgupAZY5QJySwHXVm0LImHMuaJU.roa
Signing time: Fri 01 May 2026 07:29:49 +0000
ROA not before: Fri 01 May 2026 07:29:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201866
IP address blocks: 185.50.60.0/22 maxlen: 22
2a01:a920::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/b_UMwcfQZtSIHb9N5zn1ECQnTWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/b_UMwcfQZtSIHb9N5zn1ECQnTWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_UMwcfQZtSIHb9N5zn1ECQnTWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:71:9a:52:01:76:9c:7f:8f:17:c5:11:a4:9b:1f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff50cc1c7d066d4881dbf4de739f51024274d6a
Validity
Not Before: May 1 07:29:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=520ba9019639409c92c075d59b42c898732e6895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:42:ca:d3:16:42:e1:cc:0a:b4:de:22:ff:
f0:34:43:5f:21:4f:ab:bb:cb:2c:77:ba:d4:9d:5e:
1d:61:2e:f7:b5:78:70:d4:51:aa:bf:93:00:4f:91:
d1:9b:4b:ca:ac:b0:9f:4c:40:ec:b9:27:1a:08:23:
86:0c:29:47:85:1a:33:12:76:f2:97:d8:4f:fe:82:
11:28:12:5d:ac:06:9e:d3:cc:46:96:6f:ce:12:7c:
4a:99:18:0a:19:b8:cd:9f:de:d7:e7:0e:7f:55:d7:
72:1c:6a:90:c4:93:4f:28:c8:6f:a4:94:b5:aa:d0:
d8:a0:21:ee:57:d7:10:e1:3b:7a:da:fe:01:01:23:
b4:24:ba:00:c7:8a:83:d0:59:33:e7:61:34:ec:ae:
dd:f3:c7:9f:30:18:aa:6c:7c:e7:c9:6c:27:46:96:
be:34:0f:47:01:c1:5a:10:19:9b:48:90:79:b6:1d:
d3:7c:26:1f:7b:37:24:5b:5e:e6:3e:12:18:4c:15:
d2:e0:ae:d2:0b:18:e6:9e:72:e4:54:57:98:ef:6e:
db:68:11:eb:62:be:9a:34:92:44:d1:ca:c0:f5:d2:
65:9c:f1:67:3c:a4:15:f3:51:60:2a:1e:07:16:52:
b4:1b:02:22:38:83:ca:6c:9d:da:c6:63:26:bc:60:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:A9:01:96:39:40:9C:92:C0:75:D5:9B:42:C8:98:73:2E:68:95
X509v3 Authority Key Identifier:
keyid:6F:F5:0C:C1:C7:D0:66:D4:88:1D:BF:4D:E7:39:F5:10:24:27:4D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_UMwcfQZtSIHb9N5zn1ECQnTWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/UgupAZY5QJySwHXVm0LImHMuaJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/b_UMwcfQZtSIHb9N5zn1ECQnTWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.60.0/22
IPv6:
2a01:a920::/32
Signature Algorithm: sha256WithRSAEncryption
46:85:5a:e7:3a:56:ea:c7:2e:e5:7e:a9:d1:f1:6e:06:08:05:
83:db:09:a5:7d:0e:4c:b6:8c:a9:6d:a4:63:f6:19:7c:01:08:
a3:20:b4:5f:31:68:d8:d2:44:fd:be:7d:a4:fb:6e:b6:15:67:
ee:78:ee:e6:d4:6f:08:71:bc:76:7c:af:6e:62:78:0f:74:01:
d8:42:a9:ca:8b:d8:a4:c1:c6:ef:bb:97:cc:2e:9c:43:da:23:
a2:05:6d:28:66:96:f6:cb:3a:40:e0:8e:a3:f4:88:e1:74:40:
66:49:ac:ad:eb:f2:11:7f:01:e0:15:82:15:a0:66:ec:be:f5:
55:e0:e0:d7:c4:04:64:ad:13:0a:be:87:e1:f5:d0:4c:b7:ca:
d6:bb:c4:3b:70:97:fe:8e:53:8b:0e:31:ca:e0:df:d0:90:cf:
08:cc:e6:02:c0:8a:1e:ef:bf:aa:ee:8b:79:e2:98:c7:88:06:
00:4b:42:24:89:8e:72:b2:3b:9e:1d:6f:74:1d:43:75:83:58:
54:42:8c:a5:d6:22:84:6d:a8:bd:a0:f8:17:63:7d:c2:3a:0b:
d5:c9:ff:ea:d8:f4:51:66:5b:35:4b:90:f7:7b:85:40:c0:db:
ca:6b:1f:24:d2:44:08:dc:7d:1f:6a:89:36:45:45:c9:17:8f:
d2:20:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:57:09 2026 by rpki-client