Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/U_uBvej016e8JcXOckpvk-5EDYE.roa
File: U_uBvej016e8JcXOckpvk-5EDYE.roa (raw, json)
Hash identifier: 3T7TD7Ff59hVBTTSejntn8oYLuXr6LQBURCqyUGOANM=
Subject key identifier: 53:FB:81:BD:E8:F4:D7:A7:BC:25:C5:CE:72:4A:6F:93:EE:44:0D:81
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019F5B12745303BB055A2A7DB4A2BBFE4120
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/U_uBvej016e8JcXOckpvk-5EDYE.roa
Signing time: Mon 13 Jul 2026 10:42:43 +0000
ROA not before: Mon 13 Jul 2026 10:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219333
IP address blocks: 91.200.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:12:74:53:03:bb:05:5a:2a:7d:b4:a2:bb:fe:41:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 13 10:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53fb81bde8f4d7a7bc25c5ce724a6f93ee440d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d8:a9:92:18:ce:77:67:2b:e0:fc:74:99:9b:
ba:79:68:04:39:22:ec:a9:96:0d:63:9f:8a:24:73:
0d:25:ab:75:be:c3:16:8f:ef:67:72:60:48:f4:97:
5b:2f:7f:0e:48:07:c6:31:f3:f5:60:85:c4:56:1f:
b3:30:f2:65:59:fe:d9:aa:0c:22:5e:20:9e:8d:74:
3c:4e:7d:2b:03:62:87:d2:ae:97:e7:46:31:12:8d:
67:df:92:9a:ce:af:fe:c2:af:f5:02:06:3d:a6:4c:
cd:f8:b2:02:a2:78:f5:7d:65:f4:f6:a3:c2:2b:38:
3f:08:37:68:6c:c8:94:06:db:e8:67:c9:b7:8a:10:
f3:8e:7e:13:5e:3f:ea:09:4e:e5:7f:5f:06:19:05:
97:e0:27:22:b9:91:e5:20:85:8c:eb:cf:e8:d0:da:
88:c9:05:c4:72:a1:7b:92:9b:3f:92:07:9e:23:ab:
ea:33:f0:d6:85:aa:28:7a:90:e7:78:58:ca:d5:47:
37:d8:1d:3a:ad:32:b0:f7:92:8c:4e:66:3e:ef:5d:
a6:07:19:58:ac:f0:a4:7a:d4:0d:86:fa:67:3b:76:
4a:ed:a0:ef:3d:cb:73:10:b6:c8:17:62:e5:31:f1:
27:b3:b2:cc:a0:31:b7:00:83:81:cb:20:e8:12:f9:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FB:81:BD:E8:F4:D7:A7:BC:25:C5:CE:72:4A:6F:93:EE:44:0D:81
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/U_uBvej016e8JcXOckpvk-5EDYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ce:6b:4b:9b:15:a8:84:8e:11:55:db:90:25:bf:99:4f:f4:
c0:56:e7:2b:c3:30:f5:a8:6c:e7:44:82:ee:4a:80:53:72:80:
7f:15:52:ff:68:31:a8:5d:69:3e:cd:c0:0d:6f:d0:78:12:5c:
6d:d7:4b:fb:60:93:1b:f3:54:2a:48:fd:41:2b:f5:2e:59:15:
b1:06:06:cf:1e:42:a0:81:24:31:83:6c:79:21:1b:dd:95:07:
a8:2b:52:19:54:1a:8e:41:4f:2f:2f:55:5c:21:6a:78:83:ad:
f2:00:71:19:27:95:c3:07:f8:4f:e0:d2:cb:24:90:49:23:2f:
64:a6:3f:c3:56:47:35:e1:3e:4b:17:5c:81:e4:28:c2:fc:37:
e7:ea:2b:a1:4e:db:56:c1:ef:26:9b:35:7f:ac:f1:80:2f:de:
cb:46:df:d1:ae:6e:22:b1:ea:6f:eb:8d:69:0c:61:1f:72:89:
9a:0b:30:6f:66:2f:a7:a2:59:05:77:27:2b:ef:69:c0:b6:0c:
06:00:71:56:bf:93:9d:8b:04:96:b3:44:b8:19:a8:cd:e0:11:
0e:e6:58:fa:18:f9:ce:f6:5e:55:bb:f5:d2:cc:20:d4:a6:a3:
ad:c2:b3:50:ef:f8:5d:46:cb:2c:b5:38:82:73:41:03:ad:35:
49:c9:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:50:17 2026 by rpki-client