Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UP83zuukJze0_50QYhIG7JfU38o.roa
File: UP83zuukJze0_50QYhIG7JfU38o.roa (raw, json)
Hash identifier: XaR4mpJBzQ6DvPRSlcsaDffJQH5I05OKZ6/EXZfJuFg=
Subject key identifier: 50:FF:37:CE:EB:A4:27:37:B4:FF:9D:10:62:12:06:EC:97:D4:DF:CA
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0F86675767F1A0B70E51E3712BA73A489
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UP83zuukJze0_50QYhIG7JfU38o.roa
Signing time: Thu 01 Oct 2026 16:57:39 +0000
ROA not before: Thu 01 Oct 2026 16:57:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 222.167.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:66:75:76:7f:1a:0b:70:e5:1e:37:12:ba:73:a4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 1 16:57:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50ff37ceeba42737b4ff9d10621206ec97d4dfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:53:55:d5:47:81:f5:8c:c9:13:ab:a5:e3:
36:af:66:25:81:dc:bc:0d:c1:51:a9:cb:6f:3e:fd:
8f:6a:1d:48:c7:b5:3c:c7:ce:84:f8:26:aa:05:af:
0d:60:02:fe:cb:67:8f:cb:e4:34:eb:b7:0f:27:00:
99:e5:94:9a:a2:eb:f2:13:d1:b4:ce:39:de:53:45:
82:35:dc:5c:7e:91:88:8b:09:cf:c1:5a:6c:65:b1:
67:b6:54:2b:8a:eb:22:d8:e0:75:93:37:75:82:5c:
0e:0d:e5:7b:27:99:35:61:4a:02:a9:3c:fa:15:be:
89:bf:5e:92:e5:b7:f8:82:05:54:be:d2:25:7a:e4:
f9:e4:d0:c3:33:b8:29:af:77:ab:b2:48:fa:6b:48:
24:01:35:3e:d3:21:1a:c8:98:2c:f1:1e:f7:de:32:
44:45:fa:e5:5d:3b:40:92:10:47:d2:ab:44:fc:93:
0d:6b:4d:1a:d5:35:a2:52:d1:ec:da:6e:e0:ec:ce:
53:4a:aa:ae:38:1d:92:b7:12:f6:bd:b8:db:c2:d2:
82:9b:02:b4:46:46:6d:16:9a:1c:75:7a:92:76:30:
ae:a6:06:f8:86:c1:95:e7:16:a5:72:db:ca:c2:5c:
8e:fc:e5:c2:57:58:d5:27:69:3f:ea:2a:bc:77:4c:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FF:37:CE:EB:A4:27:37:B4:FF:9D:10:62:12:06:EC:97:D4:DF:CA
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UP83zuukJze0_50QYhIG7JfU38o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.215.0/24
Signature Algorithm: sha256WithRSAEncryption
94:63:0e:af:1f:f3:df:07:de:31:40:2f:ad:4c:15:82:97:cc:
38:5b:4c:10:f7:2e:ae:be:9e:da:f6:9d:70:45:8d:26:c0:d7:
bc:ea:77:1e:2d:0f:a6:b5:4e:73:d8:f7:73:29:ad:d2:d6:3f:
f6:06:31:53:15:b3:42:92:36:e5:d8:99:9b:b9:26:d5:1a:35:
3d:99:d7:b1:5d:16:17:28:4b:08:1b:89:f8:08:f3:3a:df:61:
44:52:1e:5d:bf:d5:70:60:87:14:02:08:06:15:c0:e2:cd:9e:
e7:1c:23:6e:e7:c8:30:df:cf:e7:e7:27:89:fd:3d:42:55:78:
26:93:56:62:2f:cd:b5:2c:87:0c:ba:9a:ff:84:ea:d2:99:ca:
b4:d7:f0:ba:74:64:8c:c2:d0:3c:1d:71:19:0d:7d:00:e2:47:
ee:cc:b3:1e:67:20:5f:af:eb:ef:14:4e:8f:b2:84:08:57:e3:
4b:ae:b2:97:18:22:99:5b:c8:ab:38:ad:2d:e4:8e:eb:94:3e:
95:bd:b5:0d:4a:6a:33:6b:6a:2e:e4:e9:1e:b8:ae:76:2a:25:
ad:24:2b:3f:72:c4:12:2f:6b:37:f5:23:d9:5b:b8:a3:13:59:
75:4b:2b:7f:06:ed:a8:55:88:ee:6b:3d:c3:fd:d3:f4:fc:16:
ca:b2:7e:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD4ZnV2fxoLcOUeNxK6c6SJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYxMDAxMTY1NzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGZmMzdjZWViYTQyNzM3YjRmZjlkMTA2MjEyMDZlYzk3ZDRkZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQlTVdVHgfWMyROrpeM2r2Ylgdy8
DcFRqctvPv2Pah1Ix7U8x86E+CaqBa8NYAL+y2ePy+Q067cPJwCZ5ZSaouvyE9G0
zjneU0WCNdxcfpGIiwnPwVpsZbFntlQriusi2OB1kzd1glwODeV7J5k1YUoCqTz6
Fb6Jv16S5bf4ggVUvtIleuT55NDDM7gpr3erskj6a0gkATU+0yEayJgs8R733jJE
RfrlXTtAkhBH0qtE/JMNa00a1TWiUtHs2m7g7M5TSqquOB2StxL2vbjbwtKCmwK0
RkZtFpocdXqSdjCupgb4hsGV5xalctvKwlyO/OXCV1jVJ2k/6iq8d0yaOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFD/N87rpCc3tP+dEGISBuyX1N/KMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvVVA4M3p1dWtKemUwXzUwUVloSUc3SmZVMzhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3qfXMA0G
CSqGSIb3DQEBCwUAA4IBAQCUYw6vH/PfB94xQC+tTBWCl8w4W0wQ9y6uvp7a9p1w
RY0mwNe86nceLQ+mtU5z2PdzKa3S1j/2BjFTFbNCkjbl2JmbuSbVGjU9mdexXRYX
KEsIG4n4CPM632FEUh5dv9VwYIcUAggGFcDizZ7nHCNu58gw38/n5yeJ/T1CVXgm
k1ZiL821LIcMupr/hOrSmcq01/C6dGSMwtA8HXEZDX0A4kfuzLMeZyBfr+vvFE6P
soQIV+NLrrKXGCKZW8irOK0t5I7rlD6VvbUNSmoza2ou5OkeuK52KiWtJCs/csQS
L2s39SPZW7ijE1l1Syt/Bu2oVYjuaz3D/dP0/BbKsn4K
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:07 2026 by rpki-client