Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/UAGodHDbqDWG49dYzPHaryAek6s.roa
File: UAGodHDbqDWG49dYzPHaryAek6s.roa (raw, json)
Hash identifier: IDNqz8+zFoTt6NddKniF5Q+nKnzOcuUZxUaDBUCMp+s=
Subject key identifier: 50:01:A8:74:70:DB:A8:35:86:E3:D7:58:CC:F1:DA:AF:20:1E:93:AB
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01A0FBBA1215656766AFF998C8EC1606FEAE
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/UAGodHDbqDWG49dYzPHaryAek6s.roa
Signing time: Fri 02 Oct 2026 08:27:50 +0000
ROA not before: Fri 02 Oct 2026 08:27:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19750
IP address blocks: 91.199.242.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
2a02:2638::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:ba:12:15:65:67:66:af:f9:98:c8:ec:16:06:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Oct 2 08:27:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5001a87470dba83586e3d758ccf1daaf201e93ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:c4:97:6c:8d:0f:5e:a5:b8:6e:b0:13:ca:
7a:0f:52:6e:3d:6c:9c:bd:0f:f7:2a:3b:df:8d:3b:
4e:d9:19:2c:47:0f:6e:5a:30:63:4b:1c:1f:b3:d4:
a9:2e:3c:ac:ff:e5:5d:f5:8c:f6:db:e8:2a:8e:b4:
31:7d:b2:bb:b8:54:94:5c:42:09:57:92:fd:88:f8:
f7:8c:1b:bb:84:25:db:54:c3:1a:68:aa:b2:77:0b:
9a:33:29:31:3b:0e:22:83:f4:8e:2d:45:98:50:f4:
74:81:56:70:eb:e9:77:0c:44:34:b5:80:7d:0d:d3:
c2:0a:11:1c:c4:bc:dc:38:13:69:e5:77:1e:96:06:
e2:d8:aa:bc:77:ef:0b:21:57:0f:fc:d2:33:34:00:
e1:31:5b:1f:b7:6c:34:fa:15:84:d2:88:da:cf:4e:
33:47:52:aa:19:84:c4:49:a9:fd:ac:a5:04:00:70:
43:cb:2d:9d:0a:2b:9e:c8:47:70:76:bf:b0:57:ba:
bd:61:23:0e:27:e4:9e:b0:4f:2f:93:e5:a3:68:33:
c4:eb:ad:ac:48:52:e8:b5:23:7a:aa:5a:98:be:45:
56:02:ce:b1:22:b6:36:55:db:77:62:bc:36:54:1b:
a3:a2:0e:a0:09:db:f3:f7:b3:bd:e3:73:fc:d4:2b:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:A8:74:70:DB:A8:35:86:E3:D7:58:CC:F1:DA:AF:20:1E:93:AB
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/UAGodHDbqDWG49dYzPHaryAek6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
IPv6:
2a02:2638::/48
Signature Algorithm: sha256WithRSAEncryption
84:0e:41:39:2e:8f:9e:16:bc:58:7f:61:2f:5f:24:2a:2d:a0:
fd:6e:dc:ed:3e:5d:32:97:5a:4a:09:fa:4b:42:14:5e:b1:8e:
e5:ec:a4:fa:00:c1:b5:eb:3f:15:df:5f:b7:27:ea:33:b2:c2:
0a:f7:87:19:f4:c1:3e:da:ef:18:29:77:a7:4b:e3:39:f0:31:
a7:74:61:f8:d5:01:fe:d3:34:a8:25:d5:19:d6:0f:76:3b:f6:
93:b9:3b:7d:26:a8:46:34:db:47:40:79:5c:22:28:6e:de:c5:
17:dd:b3:a4:a2:4d:5f:0a:34:20:e6:4a:49:66:d5:24:09:26:
a4:80:2a:33:83:47:1a:fc:24:c1:9b:0d:ed:37:f3:66:dc:e6:
7c:7e:78:92:19:6e:3e:59:73:4b:a5:36:5a:af:b0:7e:88:7c:
31:5a:e6:8f:f2:bf:83:20:f0:1c:ef:6d:22:88:86:00:75:95:
52:54:0d:a6:76:45:a8:c8:ea:08:68:74:68:f7:58:a1:07:b3:
fd:1e:bf:60:83:04:2b:e3:da:e4:44:78:27:cc:6d:34:18:87:
ce:73:cc:e8:21:ea:05:30:1b:e4:05:3a:97:ec:21:08:21:19:
c5:9f:c0:1e:b4:8b:67:69:6f:71:b8:90:bd:b4:db:64:c1:4b:
d0:99:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:14:58 2026 by rpki-client