Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/UDKTDJlKSbPHLbaej4gGOPg6r5w.roa
File: UDKTDJlKSbPHLbaej4gGOPg6r5w.roa (raw, json)
Hash identifier: 0VYD711kQUSa+T7TNXsiJ0VcGZCi5jXUh+23LURuil8=
Subject key identifier: 50:32:93:0C:99:4A:49:B3:C7:2D:B6:9E:8F:88:06:38:F8:3A:AF:9C
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 01A10775002BBADBC0F178CD8010507A049E
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/UDKTDJlKSbPHLbaej4gGOPg6r5w.roa
Signing time: Sun 04 Oct 2026 15:07:50 +0000
ROA not before: Sun 04 Oct 2026 15:07:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41044
IP address blocks: 194.24.228.0/23 maxlen: 23
194.24.228.0/24 maxlen: 24
194.24.229.0/24 maxlen: 24
217.113.204.0/24 maxlen: 24
217.113.205.0/24 maxlen: 24
217.113.206.0/24 maxlen: 24
217.113.207.0/24 maxlen: 24
2a11:fac0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:75:00:2b:ba:db:c0:f1:78:cd:80:10:50:7a:04:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Oct 4 15:07:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5032930c994a49b3c72db69e8f880638f83aaf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:f2:9d:e9:3c:18:aa:c2:16:6f:fb:25:96:
97:a8:e0:c0:bd:db:3c:85:12:db:be:6b:2b:f2:5d:
10:7c:2a:c3:ba:ae:5e:ad:7d:8d:9d:1c:a1:9b:4f:
9c:79:03:3a:37:91:58:05:c7:ae:e1:de:a2:d0:bb:
99:f5:48:16:4d:a4:78:75:95:87:2a:b7:8c:1f:50:
4f:95:09:0d:6e:a1:99:0d:98:55:31:02:84:ef:9a:
b0:de:7d:4e:b8:f4:21:d5:5f:98:67:46:6f:a8:7e:
43:97:bf:c7:0d:87:dd:33:fa:a3:b7:59:b6:30:1d:
1a:45:70:e6:09:31:14:e1:8c:92:4b:45:94:e2:53:
5f:89:00:32:85:9f:f9:e1:4b:55:cb:8e:59:14:64:
4f:59:24:4a:98:eb:42:30:9c:a6:b7:ab:fc:af:c1:
99:bf:d3:81:49:99:d6:44:d7:08:5c:b2:73:2c:92:
4a:f4:ce:91:4b:3d:dc:46:73:6a:c8:f2:47:89:6b:
26:10:cb:24:e5:76:41:0d:e1:df:0e:51:10:50:94:
33:8a:1a:50:99:65:40:64:aa:dd:1c:95:42:f5:9b:
f7:88:b1:39:b7:df:61:ae:7b:48:1f:1c:c5:59:8f:
54:57:2d:b1:f5:71:f7:a7:fd:29:9a:83:c6:e1:92:
0f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:93:0C:99:4A:49:B3:C7:2D:B6:9E:8F:88:06:38:F8:3A:AF:9C
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/UDKTDJlKSbPHLbaej4gGOPg6r5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.228.0/23
217.113.204.0/22
IPv6:
2a11:fac0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:26:a3:38:0b:03:bd:c6:b0:73:8f:b3:2f:3f:e6:ca:91:d5:
3a:54:6e:20:f6:98:59:c1:b8:9b:0d:0f:76:94:87:ee:3e:40:
84:02:10:cf:fb:a6:ee:d7:44:ec:17:46:d4:9f:31:39:d9:2c:
72:57:cd:6e:83:7d:30:23:b5:f2:7a:15:7e:e2:83:d5:81:06:
19:89:f8:81:46:bf:50:72:0a:f2:46:5b:73:15:e4:21:16:df:
45:33:35:55:03:01:c0:e1:90:86:48:f3:6c:15:e4:5c:27:12:
12:cc:f0:10:36:d2:5c:9c:33:09:0e:be:31:e6:fc:53:e7:ad:
6f:18:a9:64:c8:25:0b:64:f4:06:36:44:1a:f5:9d:12:c4:f1:
72:63:54:e5:3d:af:88:87:46:19:d4:23:2d:17:3f:09:ec:d0:
e9:14:65:65:2d:88:9b:1a:17:a1:a7:82:83:58:a4:1c:9f:68:
35:3f:78:44:79:72:63:45:87:9e:0f:71:bb:6f:c5:2c:34:18:
20:c5:ed:9e:95:0d:73:72:b9:69:a9:1a:29:d4:73:28:5a:72:
76:cb:b5:2d:73:e2:5a:74:24:fd:fc:60:8d:09:fe:ea:8c:9d:
51:1d:73:00:51:a9:53:d9:f8:b2:dc:9f:7a:ce:72:6a:af:0b:
a8:80:fa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:11:24 2026 by rpki-client