Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UYPgBeYg6KhxqN8KMiScXb9d3iY.roa
File: UYPgBeYg6KhxqN8KMiScXb9d3iY.roa (raw, json)
Hash identifier: NoAcSFwn2ZQxxJmCsTTvbGy+E2ymy9JzakwnDRYWs04=
Subject key identifier: 51:83:E0:05:E6:20:E8:A8:71:A8:DF:0A:32:24:9C:5D:BF:5D:DE:26
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0FCDE1FCD4EF8A2E863D6D330E5D503BA
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UYPgBeYg6KhxqN8KMiScXb9d3iY.roa
Signing time: Fri 02 Oct 2026 13:46:50 +0000
ROA not before: Fri 02 Oct 2026 13:46:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32613
IP address blocks: 185.248.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:de:1f:cd:4e:f8:a2:e8:63:d6:d3:30:e5:d5:03:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 2 13:46:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5183e005e620e8a871a8df0a32249c5dbf5dde26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:ec:10:47:3c:ab:5e:fd:f9:cf:10:2b:e4:
d9:fd:3d:97:11:cd:8f:88:d1:4c:9b:9b:11:80:66:
68:f8:1c:5d:e6:ec:61:cc:92:83:81:12:26:89:2b:
40:76:ef:9c:ee:18:a3:35:b8:f6:43:c9:68:9d:f2:
39:33:e3:34:8b:63:b2:d2:9f:56:2a:47:f2:68:fd:
df:8a:c6:4d:72:e1:4c:dc:2a:fe:07:fa:d1:eb:b0:
7b:57:95:c2:f5:5a:7b:b4:ac:13:58:9c:76:f8:3b:
ae:2b:f1:57:bf:fd:25:fd:43:53:84:3b:8d:2d:2f:
6c:01:d9:a3:70:6c:45:3a:02:46:82:4c:7d:64:78:
c1:8d:21:47:7d:47:b5:da:f8:25:bd:bf:16:a1:45:
56:4b:20:77:7a:d9:74:44:6f:f9:4e:4c:5a:bc:4a:
73:8d:a9:42:96:a6:bc:e4:15:b3:01:49:30:f9:de:
3a:6f:c0:bc:01:95:fe:6c:91:3a:05:00:45:1d:a1:
9f:c1:f8:8a:eb:0e:b7:a0:e1:89:53:0c:6e:c0:f5:
d1:cc:03:2b:56:62:f3:c2:e1:96:0e:89:2a:4c:5b:
88:5a:05:f7:7f:a1:53:51:3c:b6:68:23:aa:1f:64:
d6:77:92:25:ae:51:ed:82:1a:88:b1:8f:4a:76:62:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:83:E0:05:E6:20:E8:A8:71:A8:DF:0A:32:24:9C:5D:BF:5D:DE:26
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UYPgBeYg6KhxqN8KMiScXb9d3iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.51.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:df:73:49:4e:85:4c:35:de:74:fd:5d:66:01:a4:00:0f:15:
99:d7:93:ca:5d:c8:e9:15:3b:98:2e:d0:45:d3:0a:c2:1b:8d:
d9:41:f8:5a:72:65:77:2e:64:c3:bc:a5:50:6c:9f:f0:94:2b:
e0:45:7e:04:cc:79:23:36:b3:e8:c3:b3:99:99:40:00:8e:0e:
7d:36:7b:3b:45:af:96:87:72:d6:48:04:bc:bf:0b:27:84:be:
c0:b8:0f:f8:41:2a:5c:88:ea:7c:47:5c:f6:3b:ac:ad:52:8e:
61:0a:f0:75:f5:f1:80:6e:9a:c1:d4:54:14:78:9a:21:74:85:
73:d2:e3:06:80:b5:07:42:1a:a8:ce:a4:64:25:4e:19:be:aa:
4c:c6:46:38:e6:ff:a5:52:10:b9:b6:bd:03:43:c2:8b:a2:20:
89:5c:e5:43:79:05:22:0a:1b:ca:dd:a4:16:b6:7f:a5:7d:bd:
74:3d:66:73:0a:24:2e:76:02:a6:13:0c:9d:a3:b4:55:64:bc:
0b:4d:9c:c5:c6:bb:f7:5e:e8:67:13:f2:e9:8b:9d:da:ae:c4:
5d:ae:3d:ff:24:85:ce:6d:92:c3:a8:0a:5d:de:bc:26:8c:b4:
21:10:02:1b:56:fd:85:98:2e:d3:d4:a8:9d:50:c2:55:61:7d:
96:9c:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:12 2026 by rpki-client