Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/UPGQyuJF5XvfV-n8Dh2Kr7JimFo.roa
File: UPGQyuJF5XvfV-n8Dh2Kr7JimFo.roa (raw, json)
Hash identifier: EGg+NvubqFkuj8dFzsWc+ym84uBkoMxYJfZdVzOVhC4=
Subject key identifier: 50:F1:90:CA:E2:45:E5:7B:DF:57:E9:FC:0E:1D:8A:AF:B2:62:98:5A
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019FDB1F11A221B81C3F4AFB2D132AB1FC35
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/UPGQyuJF5XvfV-n8Dh2Kr7JimFo.roa
Signing time: Fri 07 Aug 2026 07:27:54 +0000
ROA not before: Fri 07 Aug 2026 07:27:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.144.154.0/24 maxlen: 24
5.144.155.0/24 maxlen: 24
78.143.252.0/24 maxlen: 24
78.143.253.0/24 maxlen: 24
79.135.100.0/23 maxlen: 23
79.135.102.0/23 maxlen: 24
194.33.150.0/24 maxlen: 24
194.33.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:1f:11:a2:21:b8:1c:3f:4a:fb:2d:13:2a:b1:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Aug 7 07:27:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50f190cae245e57bdf57e9fc0e1d8aafb262985a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:ae:35:6c:9c:eb:fa:ac:7a:1e:e7:ba:e2:
90:4b:89:35:dd:a2:3d:f0:ea:88:d9:eb:e9:65:9d:
c1:79:63:27:1c:88:0d:dc:47:e9:0d:d3:ce:1b:c9:
12:4a:91:68:df:46:65:29:67:68:b0:a2:f2:f9:c6:
7f:b7:fb:24:f1:23:e7:11:3d:9b:dc:b7:55:7f:08:
84:05:37:dc:80:71:6f:7e:ca:9f:25:f5:28:e4:67:
54:1f:6c:8c:9a:d5:0d:d6:7a:79:6b:3f:8f:78:44:
77:1f:21:d6:d4:2c:11:5a:5e:04:81:67:07:c9:59:
74:de:42:5d:d7:9a:c7:93:b9:c6:3e:40:00:fe:c8:
23:2b:9e:64:26:7c:35:da:5c:fb:cd:73:43:8a:78:
e7:68:b3:cb:db:41:ad:65:d7:a4:e0:34:ab:52:b0:
65:39:53:7d:34:19:dd:47:6e:85:4a:f1:fa:ee:00:
67:6f:b3:e1:97:b3:4f:1b:b8:fe:1c:65:68:45:f5:
ee:18:d8:2d:fa:5e:d3:93:5d:fb:c0:95:c9:b4:3f:
25:4f:5c:0c:a9:c7:53:84:e6:16:a6:88:88:00:bf:
1c:42:f8:c3:d3:69:61:2f:01:bb:d8:8f:53:47:52:
b2:a3:a4:a6:15:06:e9:fe:29:94:f4:0f:69:76:7b:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:90:CA:E2:45:E5:7B:DF:57:E9:FC:0E:1D:8A:AF:B2:62:98:5A
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/UPGQyuJF5XvfV-n8Dh2Kr7JimFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.154.0/23
78.143.252.0/23
79.135.100.0/22
194.33.150.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:bb:a6:a2:75:32:e4:ba:b4:cf:aa:82:a3:20:9e:e7:55:ce:
c7:cc:0a:ca:f0:88:72:a1:ca:c8:27:24:92:26:16:83:55:1a:
e6:17:74:d1:ed:aa:92:48:40:61:ae:37:30:07:ff:a7:01:0b:
da:be:af:4a:ca:b2:f8:28:b5:8d:de:68:89:ca:99:35:53:44:
fa:ca:46:80:55:39:3d:1e:b7:9d:95:95:ed:0a:7c:df:95:3e:
07:7e:45:92:af:41:ba:b5:a4:f7:c7:06:a9:17:e8:d0:70:b0:
42:73:f9:81:01:a9:92:ae:b6:d6:1e:69:6b:f8:8e:28:b1:89:
e5:41:32:22:61:ab:11:04:33:c1:d0:7e:17:29:e0:b9:35:66:
ff:8e:1f:19:58:49:e3:7d:91:55:26:0e:af:29:76:4b:cd:bb:
c0:47:05:cc:b2:62:18:c4:61:5f:6a:f8:90:13:e1:02:fb:92:
c7:85:b8:d1:a5:12:5d:41:fc:58:ae:d2:f4:17:fd:e7:4e:e4:
c0:2a:ca:85:5e:13:ce:96:44:1d:46:39:71:c6:13:97:1f:78:
14:69:7f:de:5e:5c:d3:75:51:d9:98:57:66:f5:68:00:df:34:
fd:89:34:90:0e:7a:f0:36:79:2c:96:9c:e0:07:9c:ce:97:d5:
ad:f5:d2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:05 2026 by rpki-client