Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/UCR2Q34AvmNQ74A6STiwLx2J19Y.roa
File: UCR2Q34AvmNQ74A6STiwLx2J19Y.roa (raw, json)
Hash identifier: 5fQUoEUNKX3y5zkMyG7Lqc7nyGdBfzd3bYSW7bwnznQ=
Subject key identifier: 50:24:76:43:7E:00:BE:63:50:EF:80:3A:49:38:B0:2F:1D:89:D7:D6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 01A0E94083ADAC96DCD527ECD2BDF9811091
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/UCR2Q34AvmNQ74A6STiwLx2J19Y.roa
Signing time: Mon 28 Sep 2026 18:21:54 +0000
ROA not before: Mon 28 Sep 2026 18:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52025
IP address blocks: 188.65.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:40:83:ad:ac:96:dc:d5:27:ec:d2:bd:f9:81:10:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Sep 28 18:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=502476437e00be6350ef803a4938b02f1d89d7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:69:a0:49:7b:3b:56:7e:b0:40:4d:4c:2b:
b8:fc:cc:ce:b6:08:22:2a:09:c3:4c:78:b0:f5:ba:
8a:78:7e:b3:22:5c:32:63:bf:48:83:48:49:7c:86:
1b:23:34:e0:a9:9a:89:46:ae:8f:0b:07:aa:5f:1c:
c6:cd:1f:1b:95:9e:9f:0c:25:5e:b0:ce:aa:54:ce:
29:a8:91:7c:f8:af:43:79:91:5d:c3:04:43:ba:03:
d3:57:a0:09:d0:34:d1:40:89:27:93:0c:56:fc:ba:
00:19:3e:76:4e:4d:ed:c6:01:fe:7c:20:d1:ff:41:
e6:17:5b:b2:12:66:14:77:23:a6:48:34:06:78:ae:
67:73:b9:2f:8d:d6:18:91:d0:03:76:7c:92:ab:ca:
4a:69:af:ae:ee:df:ae:9e:32:1e:61:c6:fe:92:75:
8e:c9:ea:84:44:d1:b0:3d:f1:0e:b2:25:0b:22:5e:
75:21:85:a5:4b:4e:90:e7:2e:ad:be:3b:6b:23:1a:
cc:b6:ed:9f:44:2f:ee:d3:89:33:d5:7d:6f:bd:7d:
16:f1:fd:2e:4c:1c:ce:65:b8:2b:0c:05:c1:d2:df:
28:3e:7c:27:5a:6d:e4:a3:98:28:1b:01:b6:28:47:
7b:35:06:1a:4f:23:8f:74:55:b4:ab:a8:78:45:66:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:24:76:43:7E:00:BE:63:50:EF:80:3A:49:38:B0:2F:1D:89:D7:D6
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/UCR2Q34AvmNQ74A6STiwLx2J19Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.65.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:17:8d:68:9b:18:46:78:51:c5:97:79:35:c9:b1:4e:6e:60:
81:2b:9c:69:85:83:69:be:f3:47:a5:1f:1f:e2:5b:3b:1f:b5:
0b:95:66:ef:f2:2b:c7:2e:3b:1d:14:56:d1:86:01:75:de:12:
11:34:df:c8:2a:8b:31:5f:16:3f:6a:83:4f:fe:df:80:ce:2a:
eb:56:38:a8:c7:93:f8:87:89:44:75:dc:f7:db:e2:83:10:e4:
24:01:37:63:57:65:fd:c7:2b:ae:f0:42:d2:43:61:ab:29:73:
c7:9d:e3:f8:e2:db:42:ef:f4:9a:7f:b1:b2:7c:5c:45:d8:68:
27:18:5d:6a:a5:a4:6d:bd:f2:23:66:e3:0e:87:75:20:15:07:
e3:01:af:21:23:e2:b1:bb:43:0e:e3:d3:32:b1:53:aa:82:9a:
21:64:63:dc:cf:1d:92:0a:f0:da:35:8d:6d:79:c4:88:0b:88:
9c:51:f4:64:26:d1:f8:9f:87:28:37:e3:93:9d:11:97:c4:45:
db:72:eb:66:3c:08:67:fc:b6:55:7e:22:eb:87:2c:a9:16:8d:
20:cd:44:80:6d:d0:d2:57:0f:0f:cf:c2:f9:35:f6:a3:34:83:
eb:bd:33:f2:2e:ad:44:7e:a6:c3:93:67:cb:d4:08:d8:d7:f6:
1d:42:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:39:50 2026 by rpki-client