Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/Udd8VR3v6kWAPxifsBkp_SMlTzs.roa
File: Udd8VR3v6kWAPxifsBkp_SMlTzs.roa (raw, json)
Hash identifier: KfN08etDIWVn0Cz/yeU1yvPeWnaf4FOHuTeCGL/wkRA=
Subject key identifier: 51:D7:7C:55:1D:EF:EA:45:80:3F:18:9F:B0:19:29:FD:23:25:4F:3B
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F87C71C65583489C7F876FCD5C9D8D9
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/Udd8VR3v6kWAPxifsBkp_SMlTzs.roa
Signing time: Sat 29 Aug 2026 21:58:13 +0000
ROA not before: Sat 29 Aug 2026 21:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 77.91.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:87:c7:1c:65:58:34:89:c7:f8:76:fc:d5:c9:d8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51d77c551defea45803f189fb01929fd23254f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:c9:81:c5:2a:a9:7f:95:28:ec:e4:fe:0d:
8b:26:ef:cc:a6:ab:e0:a6:c3:05:e2:8a:d6:4e:eb:
87:02:65:71:4f:48:d8:12:c0:4f:4f:81:57:17:dd:
f7:a1:a6:92:d6:60:1b:9e:2c:c8:8e:65:5c:36:f1:
9a:8b:5d:39:d0:a4:ee:c9:3f:a1:c8:4e:92:5b:c6:
5e:a9:01:a1:35:6c:47:ca:d8:25:86:42:d4:b0:e5:
47:35:29:96:54:e1:3e:ca:da:c9:d6:84:c7:a5:e8:
14:e7:87:b0:2d:2a:74:f0:d8:53:a3:96:10:b0:db:
be:f5:42:1d:66:60:bf:03:d8:5e:78:6c:45:d1:05:
02:f6:59:15:a9:6f:a7:1c:6b:a4:f9:5d:26:65:8d:
a6:62:1a:a5:8c:49:18:02:b2:b9:4b:34:77:67:9e:
c1:63:2b:40:98:2d:5b:26:cc:96:f6:9c:77:4e:83:
fb:1c:fe:2b:60:56:79:02:36:3a:27:9c:1d:d3:18:
43:33:50:bc:1f:a5:a5:e7:7f:4b:84:86:67:61:91:
7b:8e:fa:26:3d:93:11:8d:6c:77:99:7b:9f:55:aa:
d9:1f:a2:da:75:96:1b:64:05:cb:bb:46:9c:49:60:
26:ba:c6:ea:47:8e:48:d7:2b:5d:4c:3d:15:d9:cf:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D7:7C:55:1D:EF:EA:45:80:3F:18:9F:B0:19:29:FD:23:25:4F:3B
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/Udd8VR3v6kWAPxifsBkp_SMlTzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.66.0/24
Signature Algorithm: sha256WithRSAEncryption
13:22:34:97:c8:c1:8f:d0:10:e8:9a:e9:c4:0b:cb:8f:46:03:
e7:ff:27:66:9f:72:c8:b5:2e:8b:19:e5:04:5a:25:02:96:7c:
e9:f2:36:a8:78:e1:00:56:20:08:d8:58:df:de:56:ff:cf:70:
26:8b:a1:2a:9a:38:6c:66:10:93:a0:a2:5d:43:32:51:3b:d1:
2b:44:88:ac:3a:66:c4:fd:61:07:7e:62:02:35:36:c8:70:46:
04:f1:e1:77:64:e3:8d:7a:95:b1:ff:63:c6:1a:c2:87:c1:f6:
d0:98:ea:56:1a:af:c3:51:c0:52:fe:01:5f:51:91:13:b7:85:
d7:e7:14:68:bd:1c:64:d5:98:59:65:fd:df:6a:db:52:cc:c8:
68:40:35:7d:5f:4e:99:33:ec:5c:50:56:86:0a:d0:4f:94:68:
8f:09:45:b6:cc:24:46:a2:50:8d:0b:a9:20:c1:07:8e:fc:20:
bc:53:73:68:90:b1:b7:f9:90:73:49:9c:f6:94:57:f7:37:13:
bb:fb:72:e4:73:b5:6f:b4:07:f5:08:d4:6e:bd:11:bf:43:6c:
f0:4b:8a:9e:3f:71:be:b7:7d:71:e8:2e:13:99:3e:0e:60:f3:
13:05:63:56:68:f4:85:10:64:dd:ca:aa:47:cd:c4:12:77:b6:
05:d2:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:46 2026 by rpki-client