Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/UiRIOFkRgvabFdVCAz-FrcovEjw.roa
File: UiRIOFkRgvabFdVCAz-FrcovEjw.roa (raw, json)
Hash identifier: +1uBi+0I8q7iwlz/Y/VRhlkVw4+oWOkdSjW4jigeH+o=
Subject key identifier: 52:24:48:38:59:11:82:F6:9B:15:D5:42:03:3F:85:AD:CA:2F:12:3C
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019DFD88F4444F5F0827E616ABBDD6F8EAC4
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/UiRIOFkRgvabFdVCAz-FrcovEjw.roa
Signing time: Wed 06 May 2026 13:45:04 +0000
ROA not before: Wed 06 May 2026 13:45:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197789
IP address blocks: 216.162.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:88:f4:44:4f:5f:08:27:e6:16:ab:bd:d6:f8:ea:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: May 6 13:45:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52244838591182f69b15d542033f85adca2f123c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:46:fc:3d:a0:d7:95:3d:91:2a:cc:99:d9:
a8:e4:09:5f:2e:a9:37:54:b0:72:45:2c:08:b9:f4:
fa:91:49:10:80:8a:ab:a3:99:30:de:28:94:12:06:
0c:e6:1b:1e:94:2a:a9:43:f8:ff:25:5b:63:2e:b4:
c9:01:76:2b:86:2c:22:11:a7:2b:95:57:cc:a4:f6:
87:7a:c8:48:2b:c5:7d:79:50:7d:ad:dc:d3:9e:f0:
27:cd:e6:43:b6:5b:09:b9:eb:86:67:cc:c9:d4:13:
bd:c3:95:a4:19:9d:54:16:0d:79:fa:6b:69:b0:ec:
12:3d:f1:04:df:c8:85:e3:f6:18:e4:7c:e0:e8:25:
d7:bb:73:17:7a:bb:ef:3e:e0:47:dc:80:83:bd:13:
4e:1c:0a:c2:bf:99:78:ca:c1:a7:6b:43:0d:e3:fd:
12:62:7c:bf:c1:66:18:07:75:da:c2:f4:e5:93:30:
a6:48:64:ed:28:82:7a:a2:28:a0:ae:9d:27:5b:6a:
f3:70:52:a5:78:fa:de:ca:06:d7:50:0d:56:4f:fc:
cc:2c:bd:c2:82:fe:0b:eb:5c:25:4f:44:c8:b6:8b:
e3:fd:9b:ba:0c:63:4e:52:b1:2b:3e:3a:a7:e7:af:
bc:3e:a3:1c:ab:f9:2d:fe:66:49:a4:b2:f9:13:d5:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:48:38:59:11:82:F6:9B:15:D5:42:03:3F:85:AD:CA:2F:12:3C
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/UiRIOFkRgvabFdVCAz-FrcovEjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.162.47.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c8:63:25:19:07:6d:f3:ff:0e:e0:9f:8d:a7:4b:1e:48:80:
ed:68:ca:ac:35:3e:26:d0:61:05:df:dd:c4:02:12:e2:e1:fa:
60:33:00:80:29:fd:86:d3:55:77:fe:1a:6b:28:86:d2:ac:b6:
b7:c3:cd:a7:33:90:c6:27:87:77:07:f9:54:07:db:fd:9f:48:
9e:6c:94:58:c3:c0:c8:96:11:0c:96:80:4d:5a:36:59:e3:b1:
85:3e:b7:5a:5b:95:5f:a8:ef:1b:62:1e:e5:69:7b:da:19:06:
f4:c5:d5:77:1b:ac:9a:8c:da:61:57:95:bf:62:1a:7e:52:96:
0b:14:6a:6e:cf:6d:03:21:6f:47:4c:db:cc:10:82:2f:eb:a7:
12:d7:7f:6c:cf:1f:c0:cc:f2:ef:44:ae:45:31:11:ed:5a:21:
ea:1e:df:3c:d8:6a:e4:a1:85:ef:c6:a7:1b:80:12:fc:a6:59:
5e:64:8c:6e:4e:ed:bc:65:ac:81:4e:3e:db:2a:73:b0:58:c0:
3b:87:23:f7:e6:01:18:24:d3:05:89:0e:32:62:25:b9:4a:0a:
90:b6:44:5c:8e:0a:8c:ee:99:cc:3c:f9:6c:28:b0:0c:e8:9f:
b4:ba:b1:0c:30:94:9f:ca:a3:c2:8e:35:08:f7:55:22:9f:d9:
15:39:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:33:33 2026 by rpki-client