Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/UMbec_9pC1aPO-IsfLldWi3rqtg.roa
File: UMbec_9pC1aPO-IsfLldWi3rqtg.roa (raw, json)
Hash identifier: oPk5MO0ZQ4tB7i3LW6qhLqnmZ2K1QC7r2lpBu4LR58Y=
Subject key identifier: 50:C6:DE:73:FF:69:0B:56:8F:3B:E2:2C:7C:B9:5D:5A:2D:EB:AA:D8
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A01E81F3278214CDC15E701B92F6AD3346
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/UMbec_9pC1aPO-IsfLldWi3rqtg.roa
Signing time: Thu 20 Aug 2026 09:30:27 +0000
ROA not before: Thu 20 Aug 2026 09:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218936
IP address blocks: 179.66.192.0/24 maxlen: 24
179.66.193.0/24 maxlen: 24
179.66.194.0/24 maxlen: 24
179.66.195.0/24 maxlen: 24
187.13.66.0/24 maxlen: 24
187.13.67.0/24 maxlen: 24
187.15.0.0/24 maxlen: 24
187.15.1.0/24 maxlen: 24
187.15.2.0/24 maxlen: 24
187.15.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:81:f3:27:82:14:cd:c1:5e:70:1b:92:f6:ad:33:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 20 09:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50c6de73ff690b568f3be22c7cb95d5a2debaad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:a4:5c:f8:1b:93:c3:44:15:e1:b6:a9:16:
f8:87:87:0b:5b:9a:dd:4e:ad:e1:82:57:b5:74:61:
66:8b:ad:26:0a:dc:62:f4:69:1b:7c:2f:86:d8:58:
bd:b3:96:c1:17:17:14:73:4c:96:a9:2f:9e:5a:03:
bf:0f:0b:45:b1:45:10:6c:ef:bd:1b:57:34:1a:2a:
7d:78:be:9c:fc:fb:19:ce:d3:b1:b4:88:f2:ad:ba:
67:b8:eb:aa:3f:bc:19:f4:f6:69:24:25:0d:29:32:
20:f3:7a:8f:e6:15:63:d2:2c:1e:73:dc:bb:ed:76:
9f:12:05:77:58:b4:f6:4e:9f:61:e5:9b:b6:fa:c6:
cd:16:01:08:81:5a:3f:e3:f4:01:c5:90:e5:d1:4c:
b2:13:7f:94:be:f5:6f:fa:41:18:f7:c0:f2:0d:90:
23:6b:7d:19:d9:ba:32:02:f2:a4:33:26:23:a7:0e:
a3:f8:7f:09:ef:bf:0c:34:82:7a:8b:de:69:9c:50:
1d:61:cb:6e:4b:dd:6c:45:75:f2:6c:d0:c4:a9:99:
92:d0:f2:2f:27:43:fc:19:ba:06:c1:fe:25:15:e3:
17:06:a0:11:eb:35:60:2f:9f:52:09:c4:9a:0c:8b:
28:de:b2:e5:53:86:71:5b:03:f2:ce:11:66:19:12:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C6:DE:73:FF:69:0B:56:8F:3B:E2:2C:7C:B9:5D:5A:2D:EB:AA:D8
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/UMbec_9pC1aPO-IsfLldWi3rqtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.66.192.0/22
187.13.66.0/23
187.15.0.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:90:45:86:0e:b0:c3:e2:92:db:15:09:88:ec:11:9f:80:e6:
71:c6:79:4c:91:dd:09:c0:10:b0:4d:57:c2:6f:79:a9:11:a6:
71:7c:81:da:8c:db:df:3e:5e:56:7c:3b:12:06:82:5e:dd:44:
95:70:53:e3:ac:5d:fd:9c:73:cb:bc:cb:1d:72:06:55:95:12:
71:96:41:62:ed:b0:c2:dd:fb:b9:f6:d2:41:42:84:63:de:77:
67:67:fe:7d:93:40:a4:4b:4a:80:89:46:8c:01:f1:f7:a6:ff:
71:fc:8f:32:92:d7:0b:45:4f:1a:ba:a8:99:3e:5a:1a:61:99:
22:16:f6:11:08:09:89:e6:e9:0b:1a:2f:fd:6c:1d:a7:1f:4c:
6a:8a:de:39:4a:f9:83:eb:52:b9:5a:80:4a:32:64:7c:38:21:
80:a5:84:1d:b5:f9:09:46:81:6b:37:95:29:ed:fb:82:6d:99:
f0:3f:ac:e9:e8:2a:56:e1:e5:a1:eb:f0:9c:7a:17:e4:6b:47:
94:fa:84:78:47:ac:d1:6a:fa:b0:23:0d:7c:0e:2c:6f:8b:3a:
5f:16:9d:0d:e5:eb:70:3b:7e:5b:90:c8:62:f1:45:be:bd:90:
cd:90:92:4d:07:03:81:85:c8:08:be:7c:f0:d1:e9:16:d0:08:
81:65:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:21 2026 by rpki-client