Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/Um-gNomxfjSn0kkB0eNJZRkJRcg.roa
File: Um-gNomxfjSn0kkB0eNJZRkJRcg.roa (raw, json)
Hash identifier: CFaWLMSGhMHtWCv6dN79ys4llyYw9LrXF5/UbAwm7l8=
Subject key identifier: 52:6F:A0:36:89:B1:7E:34:A7:D2:49:01:D1:E3:49:65:19:09:45:C8
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019DD30F936ADB441B3A4C3F0B1479C0593A
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/Um-gNomxfjSn0kkB0eNJZRkJRcg.roa
Signing time: Tue 28 Apr 2026 07:48:26 +0000
ROA not before: Tue 28 Apr 2026 07:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 194.39.228.0/24 maxlen: 24
194.39.229.0/24 maxlen: 24
194.39.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:0f:93:6a:db:44:1b:3a:4c:3f:0b:14:79:c0:59:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Apr 28 07:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=526fa03689b17e34a7d24901d1e34965190945c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:51:43:e2:76:cb:36:00:16:1c:7a:e4:c0:
e2:8c:71:ba:83:e6:58:34:26:d6:24:a6:61:b2:ba:
8d:b6:49:cd:23:e6:48:e2:81:71:c1:8b:d4:2d:ee:
a4:6c:68:1b:8f:5d:ea:97:c0:8e:c9:19:3a:02:f8:
29:4f:68:c1:c3:26:24:9c:0d:7a:08:6c:70:65:58:
21:44:31:5a:c4:64:1a:76:f2:5c:4e:a7:1f:fa:21:
5e:2d:13:95:75:6c:04:8f:8b:4f:0d:ec:2f:d5:10:
d2:d1:87:45:2d:c5:0c:01:36:11:ec:fa:6d:2e:89:
da:d7:7f:1a:59:c2:79:2b:07:17:21:61:ec:d8:ad:
86:51:ab:79:51:24:a4:f0:f0:51:2c:ef:28:96:8d:
a9:2f:0c:9b:a7:3b:3c:a3:43:30:34:a6:18:25:0b:
5a:99:45:bf:38:c9:66:d5:d7:fb:52:48:d8:ae:bf:
37:4a:cb:ae:e5:6c:9f:d7:46:44:d1:75:81:27:40:
c6:6d:ce:09:15:e8:e7:e1:8c:5a:82:07:fc:09:89:
d6:94:df:de:87:6c:d7:dd:cb:af:0e:0d:e5:96:10:
71:b7:93:45:1d:b4:4e:c1:99:e9:da:9f:97:9f:69:
13:ad:54:24:4f:47:9b:09:46:c9:fb:cc:bb:61:fa:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6F:A0:36:89:B1:7E:34:A7:D2:49:01:D1:E3:49:65:19:09:45:C8
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/Um-gNomxfjSn0kkB0eNJZRkJRcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.228.0/23
194.39.231.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ad:bd:c0:d3:23:56:e0:9f:f1:a1:59:4d:70:2b:8f:0a:39:
87:9f:83:31:70:5c:3b:c4:2b:fa:d4:10:16:54:13:8e:7d:80:
70:69:be:7d:80:fa:1c:7a:b4:87:9c:8e:f9:d6:47:18:4d:15:
9e:ba:a4:10:2c:88:e4:5e:00:a9:f7:2d:6f:f5:47:19:27:1e:
5c:2d:5a:a3:de:e6:56:df:73:1b:7c:6c:c8:0e:c9:85:7f:5b:
bf:7a:17:cb:6b:19:04:5f:09:ab:b4:af:2e:25:a6:c0:b7:99:
ed:ab:1b:b9:2b:47:3a:10:8b:52:43:b9:27:64:86:69:e6:93:
0e:96:ee:c4:9b:a1:26:4b:b4:13:02:a2:06:7c:e7:9e:71:83:
21:a3:e1:1d:e5:fe:05:c8:d0:60:27:e0:9f:82:6f:f3:a7:d0:
c1:ad:46:bb:e0:5b:1e:74:63:71:c4:04:6e:8b:5d:ac:63:1a:
5c:7f:15:9c:64:32:06:f2:db:a2:59:fa:9d:d1:6f:9e:55:b6:
c3:35:a2:0c:95:d5:e1:53:85:f8:79:2c:66:87:b0:04:06:e4:
47:ea:a2:8c:47:03:85:15:75:51:99:fc:15:e8:6a:86:74:ae:
c1:49:e7:02:0e:a0:b5:40:33:9a:78:d0:90:83:7d:84:60:94:
ea:da:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:50:50 2026 by rpki-client