Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UCWsIt7vE1JF1cgHOHgMkpiwe_8.roa
File: UCWsIt7vE1JF1cgHOHgMkpiwe_8.roa (raw, json)
Hash identifier: DgFD6uSjaKbe3aQt9OoItPwxkVizaIf9NSapoNEdhMs=
Subject key identifier: 50:25:AC:22:DE:EF:13:52:45:D5:C8:07:38:78:0C:92:98:B0:7B:FF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A13177861BFA7AC5FB667B4D4BB968AF25
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UCWsIt7vE1JF1cgHOHgMkpiwe_8.roa
Signing time: Mon 12 Oct 2026 18:54:38 +0000
ROA not before: Mon 12 Oct 2026 18:54:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153914
IP address blocks: 5.253.28.0/24 maxlen: 24
5.253.29.0/24 maxlen: 24
5.253.30.0/24 maxlen: 24
5.253.31.0/24 maxlen: 24
5.253.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:77:86:1b:fa:7a:c5:fb:66:7b:4d:4b:b9:68:af:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 12 18:54:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5025ac22deef135245d5c80738780c9298b07bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:ca:6f:9c:6d:51:14:eb:c7:6c:6d:36:51:
9d:74:13:51:ab:68:0b:15:4f:72:d4:e7:b2:71:c4:
4c:35:c1:f0:bf:9c:33:dc:92:5a:10:42:c9:d7:bb:
83:2e:3a:82:c2:0e:ac:98:f4:91:22:f1:7d:8d:23:
c3:35:f0:ca:9c:80:cf:da:b2:81:bd:43:4f:ee:1e:
77:0b:f6:f0:17:1b:af:37:dd:9e:bb:1d:8d:62:2c:
95:48:12:4d:dd:b6:c6:a2:7f:bb:09:2c:c9:5c:0c:
98:81:54:ae:75:b4:c7:eb:35:08:ff:1e:33:11:6e:
66:8d:48:a9:07:c5:47:7a:fb:db:62:9d:f3:71:5b:
bd:fd:37:c6:55:f5:72:9f:89:08:98:86:b0:97:91:
ce:bb:3c:29:d0:9d:3d:bd:a3:0c:78:8a:8e:c8:ec:
dc:f3:7e:bf:7d:23:62:49:0f:dd:05:a9:88:35:06:
d7:d2:19:b8:3d:21:32:56:34:63:8b:83:84:b9:cc:
80:dc:a5:76:b3:86:a2:cd:12:f5:5c:31:67:db:6b:
e7:a9:3a:80:f4:bf:c5:46:25:2a:c6:27:98:fb:e9:
08:dd:04:b8:68:ee:50:ab:a8:4b:d9:e0:55:19:e3:
6d:00:7a:03:7f:17:e3:b9:79:a0:93:80:44:b9:b8:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:AC:22:DE:EF:13:52:45:D5:C8:07:38:78:0C:92:98:B0:7B:FF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UCWsIt7vE1JF1cgHOHgMkpiwe_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.28.0/22
5.253.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c4:d9:96:0a:bf:12:de:95:1d:5d:ea:88:be:86:07:8e:ab:
f9:a3:9e:af:0f:ad:ff:cc:44:10:35:e8:d6:78:26:ed:12:18:
77:09:bd:a9:80:d5:5d:94:1a:6a:b3:4a:10:10:94:2b:c4:1c:
76:ca:5f:c6:e1:b4:38:3b:52:8d:5b:bf:69:0f:09:e7:1c:9b:
92:f3:e3:69:79:5c:a3:20:9a:f9:37:dd:ef:cb:6e:a1:85:00:
e2:39:8b:50:0f:cc:91:45:9f:fb:9d:2c:26:40:f0:08:d0:ff:
db:a1:1f:82:81:90:8d:5b:ed:89:35:66:4a:8c:14:c4:4b:27:
40:d4:60:fd:b6:67:dd:d6:3b:f2:8e:fc:0a:c5:41:c8:a6:06:
79:d7:9d:04:ae:16:f0:54:65:1b:71:3b:d4:45:45:68:db:41:
e3:39:47:c3:d8:9c:60:54:df:a3:83:f2:03:38:9d:50:ff:7d:
71:ab:94:04:cf:2d:7c:4e:05:38:8d:81:75:9e:cb:a9:41:43:
3b:bf:f6:34:33:7d:c3:31:e2:56:b2:7b:72:52:e3:28:70:71:
96:49:53:29:fa:9e:ef:d6:b1:94:dd:79:2f:54:76:4a:87:05:
7a:c3:5a:c6:ff:47:8a:e9:8a:59:b9:a0:72:99:09:d4:eb:c3:
85:ed:25:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:57:41 2026 by rpki-client