Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ULj081BInn9XixY-1DLSxqy4RSI.roa
File: ULj081BInn9XixY-1DLSxqy4RSI.roa (raw, json)
Hash identifier: GWGOSWaWn70RIHCXhrXffGRFe9uJVspiII5JJizPE8E=
Subject key identifier: 50:B8:F4:F3:50:48:9E:7F:57:8B:16:3E:D4:32:D2:C6:AC:B8:45:22
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F469E90EB2FA5285DA616442822BAF954
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ULj081BInn9XixY-1DLSxqy4RSI.roa
Signing time: Thu 09 Jul 2026 11:23:44 +0000
ROA not before: Thu 09 Jul 2026 11:23:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214456
IP address blocks: 212.189.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:9e:90:eb:2f:a5:28:5d:a6:16:44:28:22:ba:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 9 11:23:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50b8f4f350489e7f578b163ed432d2c6acb84522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:74:17:f2:00:12:1f:e1:6b:08:88:b6:02:
cb:d6:a8:ad:61:f8:d2:42:9f:eb:92:76:c6:27:0f:
33:9a:2d:53:d0:6a:81:65:f2:bf:fc:d9:ac:03:4c:
b8:3b:a8:15:77:92:77:c4:d9:5b:97:f9:d2:e3:10:
0c:ef:3b:1a:76:95:d7:74:46:98:83:c5:8f:43:64:
9a:a7:84:b7:5f:52:78:5e:b2:99:e0:5f:bc:dd:12:
4d:fd:60:37:0f:21:ff:fd:56:55:65:30:0e:73:e0:
bf:92:f7:c7:01:d1:fa:12:18:38:be:07:6f:7f:36:
a6:83:dd:46:6a:87:1e:6c:1d:8d:82:dc:96:45:41:
d5:b5:86:43:fb:26:1e:cb:63:84:9f:30:87:16:88:
86:fd:ed:69:2f:8c:5c:0a:4a:fb:16:10:16:a6:88:
aa:1c:65:5f:cb:ad:9b:81:a3:d8:0d:ec:38:e7:3c:
2d:c4:19:b3:6d:ae:8e:ae:5a:89:c0:60:00:46:d0:
17:c9:b8:1d:cd:9d:e1:38:1f:d8:d6:73:b0:dc:0c:
a5:c5:9d:3e:cb:db:7a:1a:3c:00:55:5a:19:a5:6b:
2d:cf:0e:e2:f1:16:10:13:9f:ce:ef:d1:f2:5b:9e:
cd:55:21:e6:4c:85:5b:1f:5b:cb:d5:44:1f:7e:40:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B8:F4:F3:50:48:9E:7F:57:8B:16:3E:D4:32:D2:C6:AC:B8:45:22
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ULj081BInn9XixY-1DLSxqy4RSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.117.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6e:4e:d7:78:a8:4f:32:6f:86:d1:45:1e:10:6e:63:03:ed:
95:0f:a3:85:fc:29:50:7e:05:56:5c:91:1a:96:f6:3a:6a:70:
4b:4a:aa:45:5c:56:72:5d:fd:b9:0b:39:4d:a1:3f:03:f6:26:
aa:76:1f:7a:3e:9b:5c:e1:2d:47:f0:32:8d:dc:23:bf:5c:94:
f9:9b:d3:d5:52:eb:b9:1c:37:1f:1c:20:49:80:04:4f:d9:60:
f1:ed:c0:d1:97:c4:30:49:44:c2:ce:67:c5:46:11:bc:f1:70:
0e:5e:b9:89:bf:cb:22:f5:7b:40:cd:47:72:98:8d:a7:19:45:
17:d1:dd:52:41:2f:bf:72:46:b7:cd:44:97:b1:97:14:4c:91:
68:83:f0:41:b9:af:2f:e9:eb:93:28:41:9b:f5:66:46:d6:0e:
7b:87:4a:66:b1:6a:b1:10:b2:06:15:34:64:8f:c4:26:1f:83:
74:3b:85:9a:9a:44:7a:3d:73:17:9d:e6:25:14:1f:f5:d5:2f:
ce:25:c1:a7:4a:04:85:f7:5a:36:c8:ab:0c:8b:50:35:7b:7e:
fd:86:cf:f1:71:5a:50:49:2c:9a:ff:85:e6:94:54:ee:1d:90:
48:bc:12:ec:d3:f5:d1:f6:96:45:b1:01:b8:58:42:00:0a:6a:
bc:2f:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:17 2026 by rpki-client