Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/ugGLB1E8_7ryeRhJvsDKEAvZSLU.roa
File: ugGLB1E8_7ryeRhJvsDKEAvZSLU.roa (raw, json)
Hash identifier: piCQG3HbGguqbYK3sZ+oTUW1i8pI+fufEJHVFYlxD0s=
Subject key identifier: BA:01:8B:07:51:3C:FF:BA:F2:79:18:49:BE:C0:CA:10:0B:D9:48:B5
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019E211FDD61F1B8C4E5F9115E09F181F3BE
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/ugGLB1E8_7ryeRhJvsDKEAvZSLU.roa
Signing time: Wed 13 May 2026 11:36:36 +0000
ROA not before: Wed 13 May 2026 11:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31742
IP address blocks: 91.208.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:1f:dd:61:f1:b8:c4:e5:f9:11:5e:09:f1:81:f3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: May 13 11:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba018b07513cffbaf2791849bec0ca100bd948b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:c3:32:38:13:bf:c2:75:11:c4:22:7e:25:
e9:62:33:ab:4b:b3:b8:49:7b:77:4c:f3:21:3c:0b:
df:90:1f:ac:7b:5e:9a:57:53:bc:38:bd:85:86:20:
38:f6:d0:10:2a:19:5c:29:82:e3:4d:9d:cf:85:bd:
f8:3f:8c:93:c0:d2:75:4c:c6:01:dd:c1:2c:39:d1:
3d:82:80:aa:85:39:50:98:1e:fe:bd:8e:b4:65:cc:
fe:5b:ef:93:9a:f5:3f:d5:a8:44:83:8c:d4:56:23:
2c:55:c0:26:1d:8b:4e:59:d8:9e:e8:54:0c:08:30:
5a:d7:ca:a7:4a:47:3a:16:4a:53:bd:01:ab:ef:0b:
10:c8:00:5a:ae:95:c3:3b:56:7f:a1:aa:dd:e2:10:
06:9f:14:c9:d0:ca:45:b3:c8:52:cb:85:b1:05:ea:
5a:fd:e6:97:f4:6c:cb:38:84:29:3a:f5:69:3c:6d:
2f:e9:0a:d8:9e:c8:61:62:bc:de:97:72:13:25:50:
ce:3d:97:93:86:80:95:33:d4:df:32:fa:ca:c4:6c:
ed:55:ca:62:2a:32:a4:cd:d0:4b:4f:a1:66:f0:ef:
7e:f2:e0:32:72:44:f5:11:03:49:cd:2b:b0:42:d9:
82:62:be:ba:b1:c5:f8:2d:ed:fa:df:97:5e:c2:af:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:01:8B:07:51:3C:FF:BA:F2:79:18:49:BE:C0:CA:10:0B:D9:48:B5
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/ugGLB1E8_7ryeRhJvsDKEAvZSLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:85:16:e3:2a:85:9f:45:4c:69:75:1d:13:67:77:5b:2b:18:
1f:dd:62:1c:e1:ae:2e:c5:31:60:d5:32:05:a0:6d:39:ce:d7:
1e:f4:f2:ba:5a:c7:39:11:d5:9f:3b:54:8c:92:32:4b:b7:38:
58:1e:46:b1:74:a3:0e:aa:b7:a7:f8:85:db:0b:29:3a:96:f6:
6e:ce:61:dd:49:a5:9d:b8:e8:96:46:01:db:4a:7c:65:01:7c:
5b:ea:c5:1f:dd:1c:ba:f9:15:91:62:3a:84:d3:1e:14:d9:2a:
6a:df:35:bb:84:2b:1a:24:0e:fd:d3:41:9e:c6:92:da:69:c9:
ab:12:8a:96:82:84:4c:b9:c1:8e:0c:cd:27:f8:2a:1e:8f:aa:
33:02:0d:e0:70:87:9b:60:e2:18:24:92:1b:1f:93:6b:db:2a:
95:d0:0f:da:e5:ea:4b:93:6c:d7:71:2c:91:10:f5:ce:5a:7e:
eb:2e:15:10:97:fb:a6:72:aa:7b:66:14:d6:81:c2:75:86:7f:
bd:35:7d:f1:20:26:9a:c4:ad:86:78:42:79:7b:70:e9:9b:c4:
33:3d:01:3d:46:a3:f3:32:b7:ee:0c:7d:a5:f4:7c:4c:1e:92:
3a:d8:88:02:a9:88:d0:ed:13:57:c6:7e:ff:d7:f2:e6:4b:86:
ce:b5:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:22:18 2026 by rpki-client