Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/UL8l5IwcVO4oalkF_m08Q-lh138.roa
File: UL8l5IwcVO4oalkF_m08Q-lh138.roa (raw, json)
Hash identifier: Ft4/BZpxSn/GVsZnEbmyHTlyfLxd+14L0O7a+0FPi2w=
Subject key identifier: 50:BF:25:E4:8C:1C:54:EE:28:6A:59:05:FE:6D:3C:43:E9:61:D7:7F
Certificate issuer: /CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
Certificate serial: 019F23684A936B6DE1CC4A7799506B7E73DD
Authority key identifier: AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/UL8l5IwcVO4oalkF_m08Q-lh138.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 84.254.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4a:93:6b:6d:e1:cc:4a:77:99:50:6b:7e:73:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50bf25e48c1c54ee286a5905fe6d3c43e961d77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:7e:b1:76:33:61:fa:e8:a3:d0:61:ea:8b:
84:59:c0:04:16:75:7b:b8:40:72:ad:a4:89:49:88:
ac:43:0b:43:9a:74:50:b0:fb:6f:07:62:2a:8b:02:
22:2c:de:d8:16:ed:30:5d:0c:f2:1b:ec:f1:60:ba:
b1:db:26:6b:a7:47:17:5d:59:e2:70:91:3e:0e:c5:
97:28:fc:b2:e8:97:81:8a:e2:23:32:92:0f:8a:29:
f6:87:83:d9:b0:f2:8f:b5:b4:be:da:93:c4:0a:0e:
c4:b6:42:71:80:5c:3f:ea:78:9b:15:0c:62:41:93:
b0:ce:13:a5:57:f5:ef:da:26:93:00:e4:7c:63:df:
92:60:4c:a5:54:9b:a0:e6:a4:17:14:1f:bb:06:42:
1e:c7:ea:18:9a:f8:35:f9:bb:ec:b3:d6:e4:0e:2e:
21:a5:34:f6:85:94:f0:a4:ce:0d:8c:57:30:31:84:
02:05:b2:95:e4:0c:59:1e:da:26:ba:48:22:76:4f:
29:1e:bf:a1:c4:af:d3:9f:73:20:cb:c3:22:28:b6:
53:8f:fc:2d:4c:3f:52:62:83:b2:93:53:f5:1a:c7:
8c:2a:93:1d:ae:7c:3b:be:90:05:75:98:0e:d6:e1:
b1:f8:b5:f5:08:27:c3:fd:00:9f:90:c8:c1:53:90:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BF:25:E4:8C:1C:54:EE:28:6A:59:05:FE:6D:3C:43:E9:61:D7:7F
X509v3 Authority Key Identifier:
keyid:AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/UL8l5IwcVO4oalkF_m08Q-lh138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:05:66:a3:31:cd:ff:b1:91:0a:93:0e:e7:40:23:82:ea:00:
46:ff:25:b4:0f:fa:d2:0a:40:fe:1d:45:b4:bc:00:b5:bf:d2:
95:1f:fd:1b:2d:fb:60:b6:2e:65:0c:01:dd:e7:da:9d:fd:c2:
79:c2:75:58:df:27:2e:7b:23:25:c8:07:f2:5d:df:c9:07:91:
73:6a:dc:e6:5f:b5:c2:71:36:24:70:f2:65:ee:b5:0f:87:c3:
7f:ec:2c:e9:76:02:bb:c7:9a:cd:1d:6c:e3:4d:0e:5f:de:70:
ef:e4:ad:ef:32:8a:fb:1f:e9:8b:44:26:da:10:e8:0a:bc:ff:
04:0f:a0:e7:32:2a:d8:e6:98:02:83:f5:6d:02:1f:7b:f1:1a:
90:fa:f4:dc:6f:48:38:6a:fe:e7:f0:d8:c8:92:90:7d:a5:89:
b0:2e:e7:60:22:52:74:c0:98:f3:ee:36:6a:1e:ef:ef:05:66:
f4:39:c6:d9:6a:d4:a3:8f:56:54:0e:13:c8:94:53:84:cd:97:
0e:15:e9:48:e0:00:20:c8:70:68:76:5a:21:a9:51:85:a0:01:
69:9a:24:7e:c9:cc:eb:1e:87:af:6b:4a:d8:c5:07:8f:c8:1e:
f5:bf:b9:d6:2b:b0:94:4e:cb:3e:12:67:41:a7:34:46:83:96:
a3:3d:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:50 2026 by rpki-client