Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UH8Q8TVWRV4cCrpcTPG4vt_hmqg.roa
File: UH8Q8TVWRV4cCrpcTPG4vt_hmqg.roa (raw, json)
Hash identifier: Rn5gmImOwpUNkPcbHOPVnbazumc7BmaHfuKYxJRduyQ=
Subject key identifier: 50:7F:10:F1:35:56:45:5E:1C:0A:BA:5C:4C:F1:B8:BE:DF:E1:9A:A8
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A0D84FA9BBBF7E7B9206E7F1243B6B3C7E
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UH8Q8TVWRV4cCrpcTPG4vt_hmqg.roa
Signing time: Fri 25 Sep 2026 11:24:54 +0000
ROA not before: Fri 25 Sep 2026 11:24:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219284
IP address blocks: 81.29.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 06:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:4f:a9:bb:bf:7e:7b:92:06:e7:f1:24:3b:6b:3c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 25 11:24:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=507f10f13556455e1c0aba5c4cf1b8bedfe19aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:22:5d:b1:80:d3:d5:2b:65:76:6b:6d:fd:
da:b0:05:4f:23:a2:57:75:89:d2:62:54:41:c4:43:
48:6c:cd:cb:33:0b:81:f6:27:4d:f9:b6:53:87:3d:
7b:71:82:c2:2b:8f:11:96:09:21:3f:95:4a:75:bc:
13:c4:ff:22:ab:d5:ec:e4:f4:17:5f:3c:78:4f:7d:
6e:ed:1a:dc:c5:fe:76:f2:d5:5a:13:5c:88:aa:09:
55:5c:49:b4:a4:02:d8:52:1d:1f:68:ec:f1:65:15:
cc:15:29:56:c1:24:e8:5b:d4:c0:bd:20:0e:46:26:
ef:87:62:d2:4d:1e:8a:14:35:97:b7:64:23:b1:04:
a8:ba:c4:1c:55:d5:25:35:fe:75:72:df:60:c4:64:
81:8b:1f:bb:47:b3:44:6b:80:04:df:7b:d8:35:33:
80:f4:f2:02:8f:69:d8:e5:ec:5a:75:51:b7:bd:09:
30:1b:ce:ed:a6:ac:a1:9b:99:be:d7:03:6e:c3:1d:
00:46:1a:df:56:56:9e:ed:bf:04:eb:53:dd:60:ca:
0f:17:85:5d:7d:ae:5d:a6:6d:05:23:7e:b3:06:62:
01:b7:5f:0d:6e:e5:0d:50:9e:52:ee:80:7b:78:40:
56:8b:d4:f1:a5:55:88:84:72:2f:1d:11:64:3a:da:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7F:10:F1:35:56:45:5E:1C:0A:BA:5C:4C:F1:B8:BE:DF:E1:9A:A8
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UH8Q8TVWRV4cCrpcTPG4vt_hmqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.144.0/24
Signature Algorithm: sha256WithRSAEncryption
50:00:00:c9:dc:6d:4a:a3:2c:8a:52:8d:c7:50:f5:0a:15:ad:
a9:71:d8:71:f6:40:02:05:07:2e:5e:d7:b2:bf:fb:99:8e:3c:
1e:e8:e7:ce:69:fe:9f:76:2f:e2:45:7a:d9:57:2f:ee:69:be:
8f:fe:0b:eb:db:24:64:87:e8:6c:36:ed:76:a8:bb:27:a1:96:
f1:e8:f4:36:29:6c:f6:28:32:cb:ec:b3:11:56:97:08:60:4c:
cd:c5:99:27:27:8c:73:78:a9:29:40:0d:59:5d:19:8f:b5:1c:
ff:7a:08:e3:dd:a1:e2:31:8a:5b:0e:17:34:0f:b4:1f:26:22:
d9:70:0f:61:2b:c3:81:fd:24:bb:16:b3:3c:50:80:0a:06:ae:
2a:18:17:5f:aa:43:a9:2b:14:f0:3a:30:b5:5b:83:ad:28:c7:
d7:cf:b1:45:00:d1:64:0e:d7:ed:d2:38:c6:ea:ca:f5:37:b9:
f0:19:5f:da:19:ac:85:b2:34:60:6e:5c:83:49:64:da:1f:f1:
ca:7b:ec:58:e5:de:53:a8:84:e1:fb:2a:60:84:ed:31:9d:46:
87:e5:a0:23:49:f3:71:ef:0a:b3:76:e1:c4:e9:96:0f:4d:45:
3a:21:9a:84:2a:aa:91:f8:38:59:f8:07:3d:27:f1:57:b8:69:
5a:c2:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:54 2026 by rpki-client