Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/UyxB4_M6sfLG7FUJYdTy2gzBU_c.roa
File: UyxB4_M6sfLG7FUJYdTy2gzBU_c.roa (raw, json)
Hash identifier: ce81QlXDcblfIJgkC0ymWfJ2jbMOr7bfYQ/rPixgIFg=
Subject key identifier: 53:2C:41:E3:F3:3A:B1:F2:C6:EC:55:09:61:D4:F2:DA:0C:C1:53:F7
Certificate issuer: /CN=5e05c764eb4d8aca3144448d03a176e43cfad081
Certificate serial: 019F2368D504034DE56C98F8345F47629957
Authority key identifier: 5E:05:C7:64:EB:4D:8A:CA:31:44:44:8D:03:A1:76:E4:3C:FA:D0:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXHZOtNisoxRESNA6F25Dz60IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/UyxB4_M6sfLG7FUJYdTy2gzBU_c.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197052
IP address blocks: 91.216.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/XgXHZOtNisoxRESNA6F25Dz60IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/XgXHZOtNisoxRESNA6F25Dz60IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXHZOtNisoxRESNA6F25Dz60IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d5:04:03:4d:e5:6c:98:f8:34:5f:47:62:99:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05c764eb4d8aca3144448d03a176e43cfad081
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=532c41e3f33ab1f2c6ec550961d4f2da0cc153f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:f4:1b:48:05:3e:30:39:af:d3:46:3e:cf:
ce:d4:a7:a1:ae:f8:1d:2f:62:09:b6:54:bb:bc:64:
39:1f:2e:ce:e4:05:54:6a:12:64:05:a5:79:89:15:
e3:8c:fc:13:79:eb:b4:5d:44:ee:e7:07:90:19:f3:
18:fe:1a:25:e7:d7:52:2d:b0:42:4e:ce:e1:86:d2:
fb:be:32:bb:6a:39:e3:82:b4:ec:a0:f0:e1:a5:72:
71:73:c9:49:be:f6:72:e6:84:e4:1d:ef:63:7b:2e:
d2:92:b9:69:73:1b:b7:85:c6:ff:3d:a2:2a:fc:56:
9c:67:31:c6:14:73:12:25:d3:c6:59:2e:27:91:bd:
b6:c0:f5:5f:3e:fd:9a:02:0b:22:6e:6a:45:c6:73:
57:75:71:2b:b6:13:7b:78:86:bc:ac:4d:ee:ab:f3:
8f:1f:cc:19:e2:fb:9f:e1:d1:a5:1d:74:fd:72:8f:
fa:3d:00:df:6e:d1:54:cc:fa:07:1f:34:c1:20:46:
e7:03:fe:5e:8b:1d:4c:76:6c:56:97:5b:e0:d6:f2:
70:57:8e:eb:8b:ae:bf:d7:f1:a7:11:89:57:2b:73:
f4:49:58:50:b3:b8:61:f3:fb:66:cb:a7:f5:1a:43:
11:a9:dd:d9:f5:b5:ef:fe:b5:62:76:cf:0c:90:d7:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:41:E3:F3:3A:B1:F2:C6:EC:55:09:61:D4:F2:DA:0C:C1:53:F7
X509v3 Authority Key Identifier:
keyid:5E:05:C7:64:EB:4D:8A:CA:31:44:44:8D:03:A1:76:E4:3C:FA:D0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXHZOtNisoxRESNA6F25Dz60IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/UyxB4_M6sfLG7FUJYdTy2gzBU_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/XgXHZOtNisoxRESNA6F25Dz60IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0d:90:65:4c:fc:90:7f:18:64:94:fa:c5:d9:24:9a:b6:9f:
e8:03:a5:c8:be:f8:e4:37:99:35:e4:0f:e4:88:ed:8a:d3:54:
a7:5d:79:f4:37:38:25:39:81:d2:83:ef:3e:ab:cd:a6:01:c5:
23:cb:ea:9b:c2:bf:65:de:c9:7f:52:4a:9e:7f:9e:1d:17:25:
5c:1d:83:7d:ce:5f:2a:49:44:8c:e5:af:1b:20:87:5d:b7:a0:
50:cf:a5:9e:de:a4:80:e2:ed:ea:2e:74:9c:52:88:46:45:2f:
60:b6:2e:93:39:f8:8b:93:cc:62:e3:30:62:dd:c6:54:e4:93:
62:c5:ce:b9:e6:00:d1:12:cf:c9:11:63:08:3f:13:87:26:37:
31:06:42:47:fe:ff:2e:27:e0:a9:ca:22:c8:b1:25:b5:62:96:
8a:a3:d6:8f:ae:bf:79:5a:fa:98:f9:6e:d1:3e:34:31:b2:34:
b6:85:75:d4:c8:e8:c2:d0:16:ab:65:7d:98:c5:f4:5e:9c:f6:
2b:d5:a9:c1:11:02:13:ad:c0:91:74:d5:94:8d:3b:52:fc:51:
1b:2e:e8:83:26:1d:3e:59:f9:22:cb:8d:99:a7:e0:29:26:d8:
b6:b8:b1:c0:63:49:0e:3a:66:ae:05:75:86:c8:b4:5d:ac:53:
e4:b5:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 19:55:30 2026 by rpki-client