Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/llUAWrZ6WaIBtR2t4OAaWBwaSqw.roa
File: llUAWrZ6WaIBtR2t4OAaWBwaSqw.roa (raw, json)
Hash identifier: UAG91y2VTNbr1ydtABh+tZjSseWuO8r4OTw1KcbR7Mo=
Subject key identifier: 96:55:00:5A:B6:7A:59:A2:01:B5:1D:AD:E0:E0:1A:58:1C:1A:4A:AC
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A1265CC2588BF68174E11786BFA84A528E
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/llUAWrZ6WaIBtR2t4OAaWBwaSqw.roa
Signing time: Sat 10 Oct 2026 15:09:35 +0000
ROA not before: Sat 10 Oct 2026 15:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 194.38.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:5c:c2:58:8b:f6:81:74:e1:17:86:bf:a8:4a:52:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 10 15:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9655005ab67a59a201b51dade0e01a581c1a4aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:7d:b6:33:12:68:c4:dd:68:45:f7:93:ab:
0a:8f:23:1d:09:c9:0a:9e:71:26:30:28:36:f6:c0:
c4:5a:5c:5f:59:d0:a2:07:fd:67:65:52:9f:8c:aa:
23:34:f9:7e:bf:ef:c7:68:aa:01:0e:8d:87:e8:24:
a7:77:c9:2d:fc:d9:4d:1c:88:08:5a:87:8a:9d:36:
23:2a:38:ed:b8:f4:e4:b7:dc:8e:97:3d:ec:4d:cd:
c7:94:5f:12:1b:1e:53:e7:c2:9c:b7:80:00:0b:f4:
75:5a:6d:15:06:90:53:b5:42:c1:e6:b2:0a:a0:53:
34:58:f1:dd:8d:1e:da:8f:a1:79:5a:05:82:9e:7e:
20:55:26:6c:ae:28:ff:bb:3f:08:43:58:c3:f2:16:
dd:00:b1:57:67:da:19:13:9e:7d:62:54:07:36:17:
31:c6:b7:bb:ee:a9:ee:d1:de:a5:05:c9:a3:c3:2c:
4b:47:5d:f3:93:48:4d:b4:61:b6:03:3d:1d:61:0b:
b8:30:53:54:c4:69:f6:8a:a6:03:e0:fd:0a:64:0e:
30:32:10:99:5f:d1:e0:e4:cc:93:2e:a5:9c:92:66:
d9:87:a1:99:b7:ce:47:c5:3a:d8:b7:d5:58:d1:c9:
e0:66:29:fe:02:ff:60:36:07:d3:73:f8:7a:c6:44:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:55:00:5A:B6:7A:59:A2:01:B5:1D:AD:E0:E0:1A:58:1C:1A:4A:AC
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/llUAWrZ6WaIBtR2t4OAaWBwaSqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:24:64:3c:60:bb:43:95:7f:c2:08:62:5a:d0:b8:87:21:c7:
b3:f0:9e:8b:60:16:31:f3:61:11:5d:36:d3:28:d7:a5:a3:ea:
50:31:a5:1f:00:33:d1:5e:fd:59:cd:72:59:13:c1:0a:37:88:
ea:7e:ab:b5:ca:11:ac:14:c0:b6:be:69:a5:83:cd:8a:96:09:
86:cd:c2:e9:06:f9:b5:9e:26:5a:68:74:16:6b:8a:29:49:22:
e4:3f:c2:8c:56:3a:32:aa:38:65:8d:eb:c4:1f:c5:ff:2f:d2:
f8:12:e0:7d:32:82:a0:fc:5f:1d:87:87:7a:50:04:ef:a6:a1:
4e:ba:d0:65:f2:d9:a2:f3:0a:7c:94:0f:fd:7e:eb:e5:2c:cf:
a4:dc:f4:3b:3c:c2:07:15:5a:8d:c1:b4:00:fd:85:01:30:bd:
81:b6:91:04:67:6a:33:6f:c8:8e:2d:29:a3:48:1f:59:55:52:
70:18:d0:8a:be:e6:5f:be:6c:0a:5a:25:74:b3:04:16:9a:95:
d0:6b:19:b5:2e:29:61:0e:16:74:41:0d:c5:10:d9:e2:19:77:
56:d0:71:59:e6:cf:03:b0:96:77:c9:b6:5d:75:19:5c:61:ed:
85:95:d3:83:2f:3c:d4:30:6d:4c:af:1d:33:99:e9:7d:b8:47:
9b:04:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:22:14 2026 by rpki-client