Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UBsQTmpI8_qias65ChiVLJRsRJk.roa
File: UBsQTmpI8_qias65ChiVLJRsRJk.roa (raw, json)
Hash identifier: I3fCWgLOeP5qLvj8ZmcOrV3JBo49pru/VsPW9eMqNf8=
Subject key identifier: 50:1B:10:4E:6A:48:F3:FA:A2:6A:CE:B9:0A:18:95:2C:94:6C:44:99
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019EAE67A9A0EF7F20144B5AF746BA97D6FE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UBsQTmpI8_qias65ChiVLJRsRJk.roa
Signing time: Tue 09 Jun 2026 22:01:29 +0000
ROA not before: Tue 09 Jun 2026 22:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56755
IP address blocks: 45.148.118.0/23 maxlen: 24
139.28.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:67:a9:a0:ef:7f:20:14:4b:5a:f7:46:ba:97:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 9 22:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501b104e6a48f3faa26aceb90a18952c946c4499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:c2:e0:8c:21:ac:95:50:a6:b8:55:7c:36:
8d:5e:f6:97:4d:85:a0:e9:43:5b:c6:35:8b:ae:bc:
9f:a9:39:3d:bc:8a:f2:9e:f4:9b:c9:57:a9:1e:13:
6c:f7:df:c0:7e:61:d9:09:e5:53:4c:49:f1:79:e1:
04:da:c7:c1:54:ee:1e:57:98:db:43:63:74:e6:9f:
b8:70:e5:03:e7:f5:af:e3:e7:ef:0d:28:52:97:a6:
78:03:a7:09:5e:5c:40:a6:58:3b:5b:7e:a6:96:81:
3a:9d:b4:cf:c7:57:5e:a2:65:48:15:d0:c5:5c:14:
a0:9f:04:91:15:f7:0d:07:0a:83:dd:35:96:1a:80:
c9:45:96:0e:b5:19:f9:4c:81:5b:40:6f:3b:fe:0f:
f0:65:dc:ef:57:ca:82:57:c8:dd:b2:84:fd:75:06:
54:8f:4c:ee:30:74:78:70:9f:04:dc:7e:04:46:58:
48:26:2e:2d:21:d7:74:82:96:a9:a5:d2:81:19:ec:
60:64:f0:32:78:20:7a:eb:83:9e:6c:c6:60:28:4a:
12:ca:a6:8e:00:57:16:86:01:3b:cb:05:94:59:4e:
da:b8:3d:ce:db:26:49:46:5d:a5:a7:cb:93:3c:c5:
77:58:d9:e3:43:3e:f7:69:c4:8d:06:69:2a:7a:60:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:10:4E:6A:48:F3:FA:A2:6A:CE:B9:0A:18:95:2C:94:6C:44:99
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UBsQTmpI8_qias65ChiVLJRsRJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.118.0/23
139.28.99.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1a:d7:3b:d6:5e:6a:e6:88:6a:a7:af:67:5f:6a:07:21:75:
fe:9d:49:88:f8:6d:8b:fc:d6:c5:a5:ea:d7:c2:af:dc:9e:a6:
26:00:c4:27:b2:13:58:91:a3:a1:25:25:e4:43:64:f4:67:61:
c1:60:a8:11:7d:8c:12:0c:9f:8a:1b:3f:7a:64:08:68:b6:96:
bb:27:5b:58:af:c7:0a:b0:1f:97:90:a6:90:63:a5:d6:4e:a1:
68:e6:9b:33:38:f6:8e:0b:af:88:3f:55:ba:12:82:a3:b4:a4:
c3:86:34:a9:48:8f:70:ff:18:52:87:96:b8:80:79:aa:70:98:
ee:f6:f3:cd:ff:b9:c3:2c:26:d1:53:35:3d:28:39:21:ee:f3:
82:16:1c:df:8e:14:d6:fa:14:8d:a1:b1:b1:ef:59:2a:d9:15:
2d:a4:93:d6:d0:34:d9:a2:5e:86:40:28:1a:2d:62:89:50:17:
39:0c:94:26:fd:bd:9a:13:2b:0d:55:89:9f:9b:aa:7b:b9:d0:
f9:3f:c1:f3:61:5c:4a:96:a3:2d:9f:51:8c:a3:0b:42:ed:62:
e3:df:ab:6c:10:7a:23:81:22:21:35:8d:c3:03:1d:bf:d0:0a:
70:16:fd:2c:a3:3b:e4:63:e7:8f:92:fe:ca:45:1a:b6:3d:d0:
56:e7:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:32:41 2026 by rpki-client