Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/U_T52JiuQta1UE57dsMCFHL8QI4.roa
File: U_T52JiuQta1UE57dsMCFHL8QI4.roa (raw, json)
Hash identifier: ix4RSzmrElpqWDF+oIHqd2YhrqBy4X7ty6Jh7xlerNU=
Subject key identifier: 53:F4:F9:D8:98:AE:42:D6:B5:50:4E:7B:76:C3:02:14:72:FC:40:8E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A04C763E7C6BC980E09AFFF8B2D21DF3E6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/U_T52JiuQta1UE57dsMCFHL8QI4.roa
Signing time: Sat 29 Aug 2026 07:40:12 +0000
ROA not before: Sat 29 Aug 2026 07:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 5.182.112.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:76:3e:7c:6b:c9:80:e0:9a:ff:f8:b2:d2:1d:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 29 07:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53f4f9d898ae42d6b5504e7b76c3021472fc408e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:5f:63:57:33:6d:94:b0:9d:78:af:a2:8c:
eb:02:3f:16:09:5b:93:60:46:9d:8a:6a:6c:6d:f5:
7a:54:16:b8:ab:f0:9b:ac:12:86:b7:32:86:10:a2:
43:92:81:ab:a7:fb:72:e0:78:7a:68:87:ae:47:dd:
65:2c:2f:ed:f5:88:98:01:ff:b0:70:07:40:f8:d2:
c5:e3:1a:b1:e3:3a:10:2b:ab:fd:eb:12:33:b4:d5:
59:7d:1a:10:6a:70:80:8b:31:af:ad:5c:4b:19:fc:
ed:3d:49:3a:45:2d:28:1d:8a:78:ec:b5:22:67:25:
96:25:46:3d:d2:5e:ed:c9:31:21:46:ae:ef:ec:9d:
03:ff:0c:6b:6a:c3:e8:75:dd:14:c2:eb:2f:8d:5a:
1e:c5:33:15:05:8f:d5:8a:07:e2:27:ad:2d:4b:3d:
45:79:6e:e7:99:92:89:81:9b:e5:b4:6a:2c:67:37:
55:4e:bb:ff:7d:49:eb:d9:7b:06:53:71:ad:99:44:
e9:d4:bb:07:3b:63:23:a9:ca:a5:26:2f:0b:b9:a7:
c2:5e:68:a9:51:1b:c1:60:fe:8e:dd:d9:cb:f4:6e:
74:61:bf:59:2a:6e:6f:4c:73:d8:29:e9:15:5a:12:
6f:09:41:37:00:e4:db:e3:01:da:ab:71:8a:8e:79:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F4:F9:D8:98:AE:42:D6:B5:50:4E:7B:76:C3:02:14:72:FC:40:8E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/U_T52JiuQta1UE57dsMCFHL8QI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
77.242.159.0/24
Signature Algorithm: sha256WithRSAEncryption
02:73:a3:6b:98:bd:4f:8d:b6:4c:32:e6:d4:df:92:b4:58:69:
d6:91:7c:49:f6:51:8d:da:d1:f5:a9:e5:82:f1:d6:9f:1c:87:
be:c1:cb:c7:5a:d8:3c:72:ea:8c:56:07:29:d5:df:1e:cc:75:
f7:76:88:7e:43:1f:b9:d2:c8:56:48:63:61:a5:18:66:d2:66:
91:ef:59:27:ed:e0:df:c8:eb:70:5f:7a:eb:17:4f:d1:97:c7:
e0:0c:0c:ab:9f:b4:77:16:88:2e:02:e4:43:7a:90:8f:b7:d2:
01:5c:87:ac:64:47:c9:82:f3:f1:93:8b:b4:a7:a9:93:5d:d1:
4d:04:cc:e7:d5:01:90:8a:8d:43:5a:ca:9a:a8:b0:da:da:b3:
6c:24:9a:20:1a:74:f7:55:fc:55:0c:48:3f:db:e0:93:b6:00:
9e:70:86:c6:15:12:d9:2b:46:bc:c4:79:a9:53:08:7d:8c:bc:
8b:85:be:90:ce:ab:df:e1:c5:66:c6:7e:dc:33:8e:75:5a:0d:
e6:fd:76:38:2d:a1:a6:76:9a:ac:73:d9:03:a2:05:c9:bc:52:
c9:f2:e5:c6:cb:bf:62:47:34:79:48:b8:a7:ae:a0:8a:7d:06:
96:a5:bc:69:24:4e:47:56:dd:9e:ac:9e:92:92:5f:7f:a5:37:
f2:aa:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:45 2026 by rpki-client