Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/UW-4UFZx7To3RNwelVOgzAwhD_o.roa
File: UW-4UFZx7To3RNwelVOgzAwhD_o.roa (raw, json)
Hash identifier: eiBKYL64skKUAlgyf8e0asSrepS7YuL7BO8UWyOpmg8=
Subject key identifier: 51:6F:B8:50:56:71:ED:3A:37:44:DC:1E:95:53:A0:CC:0C:21:0F:FA
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019F66581602B82287D44F3F06B32325547B
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/UW-4UFZx7To3RNwelVOgzAwhD_o.roa
Signing time: Wed 15 Jul 2026 15:14:36 +0000
ROA not before: Wed 15 Jul 2026 15:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 185.188.192.0/22 maxlen: 24
195.211.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:58:16:02:b8:22:87:d4:4f:3f:06:b3:23:25:54:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jul 15 15:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=516fb8505671ed3a3744dc1e9553a0cc0c210ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:83:80:aa:1b:76:3a:81:f6:ef:8d:a7:88:
a0:a3:83:44:d3:15:f7:05:6e:a6:af:4c:c8:c1:63:
a7:9f:14:4a:be:77:64:71:e4:e4:1a:a5:25:bd:1f:
9f:73:bf:b1:12:fa:d1:0c:43:d2:ef:1a:91:69:36:
4f:dd:e4:15:e3:6c:d7:51:c7:38:c0:9c:e6:80:4e:
39:24:ae:b4:e1:8d:34:59:5c:8c:c1:9d:86:be:5f:
07:fb:ff:ef:f0:d2:4e:1f:3e:ba:9c:83:85:08:d4:
ed:79:21:9c:37:b1:56:8f:cc:cc:1c:b2:6e:e2:57:
ca:08:6c:e5:76:f0:d4:76:c1:16:12:9e:21:33:f0:
ab:50:9f:e4:97:2e:06:2f:44:28:09:19:cc:53:b2:
70:80:a7:7d:a9:ca:02:6a:5a:74:4d:55:cb:dd:3b:
72:43:6a:29:34:8e:70:e6:5e:ea:6e:91:28:bd:e7:
92:d0:83:a5:8b:73:59:95:c5:8d:f4:d9:46:f8:3d:
43:52:1a:79:00:5e:bb:77:b1:7a:bc:fa:bb:64:e9:
b1:30:0d:9e:4a:47:a5:aa:26:8c:f1:81:34:92:d7:
e9:ce:f6:f9:58:bf:20:1b:9e:40:ce:99:62:d1:df:
5f:93:dc:a6:62:bb:3e:35:17:94:67:7f:32:30:5e:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6F:B8:50:56:71:ED:3A:37:44:DC:1E:95:53:A0:CC:0C:21:0F:FA
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/UW-4UFZx7To3RNwelVOgzAwhD_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.192.0/22
195.211.116.0/22
Signature Algorithm: sha256WithRSAEncryption
25:c3:71:ad:c5:4a:6c:fe:a4:2d:92:f0:ae:d0:f3:aa:bc:9d:
f1:45:ae:14:a5:8c:27:21:d7:ff:b9:ac:e0:08:3f:1a:55:ab:
1d:47:16:ec:a6:29:40:e4:fc:91:6b:34:09:3b:4b:8e:66:0b:
c6:25:2e:4e:a5:c9:69:2b:cb:29:f7:65:6f:f7:84:49:8b:4f:
fa:a5:b5:c8:1c:64:0b:0a:0c:ce:2d:de:08:d5:a3:97:72:0d:
6f:75:96:5c:21:d4:b4:b9:a3:66:81:e7:b2:76:3c:8d:13:37:
b1:45:05:15:75:0c:e1:7e:49:34:40:c3:1a:2b:7f:4a:5d:a1:
f8:ad:1e:2d:30:9f:01:7e:22:44:07:9b:21:d8:e9:92:3d:e9:
c2:19:cf:b4:fe:a0:9c:f7:81:f0:5e:58:6b:38:ae:b7:6d:7b:
44:3e:bd:b5:39:10:8f:54:7b:fb:f0:c6:29:b1:1b:e4:4a:74:
f8:d4:8a:dd:17:67:78:f5:c1:97:c9:92:09:ac:20:ba:7f:0d:
51:ce:9a:a1:04:0a:71:83:ff:cc:f4:59:9e:d7:c2:bb:3a:4d:
4b:ef:6c:72:3d:48:01:c2:4e:4e:e4:b3:e4:17:00:10:be:b7:
2e:24:10:07:08:23:65:66:0d:0c:f0:17:44:1d:6f:5a:13:5b:
5d:4e:5f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:48 2026 by rpki-client