Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UBv6iGLG1utOE6yJc964VYG4VY4.roa
File: UBv6iGLG1utOE6yJc964VYG4VY4.roa (raw, json)
Hash identifier: SvWN6LsRtqwV0jJ03icu0WBortJUVJ56Yik8QHyz8Q4=
Subject key identifier: 50:1B:FA:88:62:C6:D6:EB:4E:13:AC:89:73:DE:B8:55:81:B8:55:8E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A17899C3CA62FF3DD158282373DC0E4C97
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UBv6iGLG1utOE6yJc964VYG4VY4.roa
Signing time: Mon 26 Oct 2026 14:25:05 +0000
ROA not before: Mon 26 Oct 2026 14:25:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59796
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:99:c3:ca:62:ff:3d:d1:58:28:23:73:dc:0e:4c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:25:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501bfa8862c6d6eb4e13ac8973deb85581b8558e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:84:58:a4:20:13:b8:57:a7:ea:94:31:6a:
a4:b1:ae:86:29:95:04:5f:94:72:d8:a5:5a:74:02:
83:72:be:40:58:43:b7:37:1a:0f:b1:3b:60:f6:80:
ee:03:79:43:97:5e:ed:0e:8f:78:d1:47:82:0b:29:
23:23:7e:4a:72:98:80:b1:e8:64:25:87:36:59:a1:
d0:7b:58:c2:76:35:e6:ad:64:16:ed:0c:69:49:b1:
d0:39:2a:92:ef:7b:0c:ab:a2:90:b3:64:60:3a:e3:
71:08:e3:ca:b5:f0:54:c9:46:8b:4b:69:8a:fc:a1:
39:9f:e0:5c:1e:3b:a7:73:9b:f9:ed:65:eb:48:ca:
44:93:b0:7a:d4:b3:93:f3:70:0f:b9:af:82:61:2a:
86:22:d4:45:24:dc:56:46:a6:37:0f:36:8f:b3:12:
48:33:d7:5d:f8:8a:2a:a4:36:68:71:d5:3f:9a:a9:
16:17:a8:88:93:39:52:66:8f:ad:b9:c8:93:69:f5:
1c:0d:61:1e:43:6c:97:3e:47:22:89:93:5c:b2:52:
c8:c8:37:a0:0b:7f:f3:7e:5f:b8:b4:4d:bd:2d:ae:
10:75:d6:dd:72:f6:ea:d2:1b:7d:e0:8c:a1:fe:36:
49:9f:ee:c5:af:56:39:4a:9d:6c:15:87:5c:2d:73:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:FA:88:62:C6:D6:EB:4E:13:AC:89:73:DE:B8:55:81:B8:55:8E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UBv6iGLG1utOE6yJc964VYG4VY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a8:fe:ff:4c:a7:03:84:fe:87:b4:48:bb:11:5a:29:eb:dd:
81:78:c7:ed:72:93:57:19:c1:37:cd:28:00:22:ad:78:22:32:
b3:a0:11:ca:83:9a:9f:8d:3d:0a:88:13:ad:10:10:8f:78:99:
02:99:74:fb:81:60:9b:69:bc:61:38:70:d2:9c:e0:14:47:56:
78:af:d1:6d:55:8c:7e:d9:b1:31:68:d2:96:2d:fd:2d:89:3d:
25:c8:57:2f:9e:f5:0a:d5:ef:51:9d:e4:e0:b6:cf:c5:77:e6:
68:79:c0:85:25:e2:a7:c4:5b:34:e0:b1:c8:ce:3e:5d:4f:96:
99:73:f8:94:7c:cc:58:03:86:68:3b:ad:e9:bd:10:f1:f8:4d:
09:52:fa:c5:17:ef:8c:97:7f:cb:e8:17:ed:a9:2c:bf:0b:4e:
e6:d9:2d:9f:1d:82:35:bf:c7:ba:6b:8c:99:8c:54:93:4f:79:
b8:ab:5d:74:27:26:d7:a0:04:2e:ba:37:ae:5c:0c:90:0c:70:
41:dc:2f:94:88:37:64:e3:38:c6:7b:93:38:e1:0c:a9:03:cd:
21:dc:2b:51:a0:45:26:e3:d7:97:d3:10:d7:2f:34:93:b3:66:
c0:07:91:8a:cc:25:7c:91:89:3f:85:92:3a:a0:40:89:0d:17:
4e:54:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:47:01 2026 by rpki-client