Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/u6VTHdWQ_3QbyhPH1vpqLr6an7E.roa
File: u6VTHdWQ_3QbyhPH1vpqLr6an7E.roa (raw, json)
Hash identifier: sRD9Lfo+l/DYJnZpDpH+QgQ+N3G3xiGrMvTYaZTvv6Q=
Subject key identifier: BB:A5:53:1D:D5:90:FF:74:1B:CA:13:C7:D6:FA:6A:2E:BE:9A:9F:B1
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019E58D8B25018A3AE9405A59C88C27AA6E5
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/u6VTHdWQ_3QbyhPH1vpqLr6an7E.roa
Signing time: Sun 24 May 2026 07:17:36 +0000
ROA not before: Sun 24 May 2026 07:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34918
IP address blocks: 185.212.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:58:d8:b2:50:18:a3:ae:94:05:a5:9c:88:c2:7a:a6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 24 07:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bba5531dd590ff741bca13c7d6fa6a2ebe9a9fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:0c:e8:71:6b:4d:42:59:1c:a8:62:23:88:
2b:84:0c:b7:76:49:3a:dd:5b:1e:e6:d1:4c:cf:6e:
fb:c3:cc:ad:a5:64:32:b1:8f:42:10:31:95:28:31:
77:a3:da:a5:c9:48:27:bf:c2:33:c3:30:26:cc:b8:
c9:dc:30:e8:f5:48:a5:ca:1a:7d:cf:44:58:35:4b:
f0:e5:95:c8:ea:fe:65:64:fb:e1:b8:f5:b9:bb:7a:
9e:97:75:06:39:6a:57:65:8e:60:09:2d:a0:cc:91:
41:6d:c3:41:a2:09:c8:7e:1e:a7:5e:1d:64:0a:78:
46:bc:65:e3:b3:9f:01:8f:90:00:52:7e:c9:c5:a0:
ff:3f:c2:46:b6:66:69:6b:df:46:0c:7a:68:cc:7b:
de:89:4c:8c:cf:33:08:79:7c:a3:ba:55:fa:47:c1:
bf:fe:fe:55:1b:db:f1:7f:6c:cd:c1:00:6c:09:47:
bf:b8:7c:a3:2d:c5:41:e1:87:0d:d5:cb:42:43:d9:
90:44:aa:0d:b5:ce:78:11:c6:62:af:b7:56:c5:e4:
98:c2:b3:c1:b3:d8:1b:88:6b:b4:28:c0:1d:4b:e1:
b6:b4:69:a7:70:21:fa:79:63:1a:84:23:b9:40:42:
18:53:79:c8:4d:6a:ec:12:e2:6e:88:8a:52:bf:c6:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A5:53:1D:D5:90:FF:74:1B:CA:13:C7:D6:FA:6A:2E:BE:9A:9F:B1
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/u6VTHdWQ_3QbyhPH1vpqLr6an7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.50.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5e:29:1c:b9:c1:4d:b9:dc:5c:f7:7a:cc:89:e9:6d:fb:2f:
62:fc:f7:ef:fa:9a:60:13:fb:75:4f:d6:e7:58:3c:52:30:97:
9f:71:e4:5a:e0:1d:05:90:85:9d:ec:99:94:74:27:12:3f:e6:
9a:f8:c9:87:00:2d:04:75:40:8e:49:c3:c8:a2:26:1c:25:10:
4e:a4:35:26:ed:08:0a:93:28:41:f0:74:78:bc:ea:50:40:ed:
bf:16:f7:ac:aa:aa:af:fa:b3:cf:e1:b7:82:ca:7a:e3:b5:aa:
7c:39:b3:70:02:96:7a:b7:61:5c:72:5e:76:0e:0f:ca:46:8c:
11:1a:f7:21:c7:81:d0:54:bf:9d:71:41:8f:f6:0a:c0:bf:fa:
91:27:91:2b:d4:8a:ae:79:2a:4d:52:98:b3:0b:c1:65:04:fd:
2a:bf:41:36:b1:c4:4f:ef:b2:06:44:f8:18:7e:95:e6:aa:8b:
4a:ea:80:44:6c:13:b8:82:7a:76:02:2f:75:25:4e:ce:0f:12:
3a:4b:c8:90:14:77:9d:20:8d:e2:13:0b:a5:6c:97:75:84:9a:
3f:30:36:61:93:60:e6:90:8c:93:d8:4d:75:8c:e6:c8:89:7d:
fe:77:63:93:04:e5:b8:9d:4c:b3:9f:84:85:1a:b9:db:c5:e5:
d1:66:f8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:06:40 2026 by rpki-client