Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/UNHD2yNtNAM1yLwxkb6Yi8PGDfc.roa
File: UNHD2yNtNAM1yLwxkb6Yi8PGDfc.roa (raw, json)
Hash identifier: VOWK04oeNwI2BvH04UyeeOn1Ap/fxbwci3E3SMPb4pg=
Subject key identifier: 50:D1:C3:DB:23:6D:34:03:35:C8:BC:31:91:BE:98:8B:C3:C6:0D:F7
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 019E446B33D1BF068FB34B46969D45A3F1F8
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/UNHD2yNtNAM1yLwxkb6Yi8PGDfc.roa
Signing time: Wed 20 May 2026 08:05:36 +0000
ROA not before: Wed 20 May 2026 08:05:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 45.84.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:6b:33:d1:bf:06:8f:b3:4b:46:96:9d:45:a3:f1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: May 20 08:05:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50d1c3db236d340335c8bc3191be988bc3c60df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:67:00:38:3c:41:b2:5e:bd:5e:b4:c8:41:
5c:fa:66:bd:60:08:82:b5:b4:b5:cb:14:52:c8:88:
bf:68:74:0e:8a:ca:d6:56:8d:4f:72:c4:e2:be:ab:
02:f7:5e:a7:78:38:05:62:f8:96:43:a6:c6:3a:21:
8d:02:51:ea:2d:43:ec:dc:28:fa:13:c8:cf:2d:36:
e7:e8:32:45:fa:cf:6d:1a:df:d1:44:f9:36:ab:3e:
d1:11:ec:24:cc:ab:c8:a2:06:32:dd:e8:a3:ce:b5:
46:66:c3:ac:c8:c6:66:fc:db:37:92:6f:52:0b:fb:
b5:b3:b0:d6:56:d5:a5:79:a0:f5:46:1e:16:f9:b6:
ac:e3:7c:62:19:a8:d8:d7:e7:52:4b:5e:ff:8d:87:
4a:a5:cd:39:58:78:1b:be:b8:91:c9:03:3c:6c:3b:
01:b8:0a:d3:c1:e3:0a:64:e5:09:4c:27:39:1a:e5:
e9:2f:29:d4:91:1e:14:01:e7:2d:d1:b9:c0:2f:d9:
09:44:f5:4c:17:98:8f:a5:ac:26:1d:2f:16:e5:c5:
11:23:08:da:ac:ec:c5:99:36:18:a6:04:67:32:d5:
65:a7:2f:94:bc:07:cd:27:e2:b5:16:ce:62:d7:96:
5f:f4:23:97:f1:3e:38:36:1e:15:82:60:64:6e:6b:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:C3:DB:23:6D:34:03:35:C8:BC:31:91:BE:98:8B:C3:C6:0D:F7
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/UNHD2yNtNAM1yLwxkb6Yi8PGDfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2a:1d:45:63:0e:a5:cd:0e:e4:39:b0:7b:59:07:44:65:8f:
fe:c0:d7:92:f4:87:c1:45:1b:1b:0d:cb:72:4f:8d:db:af:2d:
d3:b4:63:d2:3f:58:95:6d:0d:76:cb:54:6a:a9:fd:de:52:74:
7a:d9:6f:d3:44:9c:17:cc:5e:a5:ff:00:c9:89:23:90:4a:74:
9c:cc:a0:f4:b8:cc:00:bc:03:de:cc:c4:f0:a9:22:bf:4c:73:
50:8a:5a:02:e4:fb:b0:95:ac:4d:e9:75:31:b3:7c:6a:be:42:
48:3f:fe:2c:7d:1f:8a:61:18:e4:fd:f3:4b:e2:ca:a5:2d:2a:
f1:52:f7:6b:c1:9f:e2:3e:4e:9e:54:b3:ae:6a:d7:04:e9:40:
88:76:6c:d3:93:a9:17:64:b4:7c:5e:47:0f:2a:d5:73:f1:ab:
91:7f:e5:ec:f7:be:f4:7d:d1:cf:71:46:11:7d:a0:1e:26:e3:
fd:39:10:ae:ed:59:31:a2:48:ee:8d:cd:26:bf:34:59:79:54:
93:3a:db:c6:16:bc:bb:7e:2c:b1:bd:49:6d:e1:66:76:8a:d5:
13:b1:8a:a5:fd:dc:d0:be:2d:ed:6f:ac:41:28:c1:97:95:b9:
02:4f:de:de:2f:14:0c:7e:9b:5f:1e:d2:78:ce:e7:37:68:cb:
17:4b:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:29 2026 by rpki-client