Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/UPHfwXfR02Th6cbsvtMgrgEJJL8.roa
File: UPHfwXfR02Th6cbsvtMgrgEJJL8.roa (raw, json)
Hash identifier: WMF5bJJEpf/rg7Q3u4NcJ3tDnBoKVVGAVUpTfvsuLBo=
Subject key identifier: 50:F1:DF:C1:77:D1:D3:64:E1:E9:C6:EC:BE:D3:20:AE:01:09:24:BF
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 019E8429692D85A3C9FAB7C3926855715444
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/UPHfwXfR02Th6cbsvtMgrgEJJL8.roa
Signing time: Mon 01 Jun 2026 17:09:26 +0000
ROA not before: Mon 01 Jun 2026 17:09:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 109.232.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:29:69:2d:85:a3:c9:fa:b7:c3:92:68:55:71:54:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Jun 1 17:09:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50f1dfc177d1d364e1e9c6ecbed320ae010924bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:49:c3:72:ab:b8:93:e3:24:cf:93:83:53:
1d:5d:e8:9c:a1:71:65:54:33:c1:3c:b1:b9:da:59:
55:81:30:da:42:e6:2b:f7:a5:7c:e7:7f:fd:dd:30:
81:26:c6:4c:25:95:2f:11:85:1b:eb:99:e8:26:46:
77:22:0e:80:f7:b5:51:4a:85:c1:73:75:b5:15:00:
e3:45:45:97:4e:70:b5:af:42:3c:17:f7:b0:05:4b:
d6:cd:1c:af:5b:ea:dc:8f:cd:25:0b:bf:10:03:26:
cf:2a:ec:3e:fa:dd:2c:8b:89:a0:6b:33:12:e3:d6:
93:76:f5:a9:53:84:36:63:64:25:62:52:b7:41:b8:
00:d0:f0:29:44:c4:e9:25:88:35:46:26:af:30:6b:
0f:51:96:cc:15:ec:2e:e8:14:a6:b4:ce:72:34:56:
05:92:1f:26:62:47:44:52:f4:de:fa:c7:28:1c:b3:
d3:82:ea:8d:b8:7c:b2:8d:b1:57:18:3f:96:f4:2e:
94:5f:81:79:00:36:42:23:12:5b:cb:4b:c3:c7:87:
e8:8c:29:bc:83:6e:65:0b:9d:e8:63:66:cc:b8:b8:
f7:8a:6c:50:99:7f:b7:c0:e9:71:72:aa:fb:28:4d:
67:d1:f3:6f:60:5c:d7:bb:d6:13:eb:43:b2:e7:13:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:DF:C1:77:D1:D3:64:E1:E9:C6:EC:BE:D3:20:AE:01:09:24:BF
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/UPHfwXfR02Th6cbsvtMgrgEJJL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4b:0e:77:dc:61:c9:8d:87:15:98:68:b3:6c:6a:66:a1:91:
ba:5e:92:ed:6d:2b:5a:f0:13:75:43:a8:db:57:d5:3d:a2:3f:
fa:f7:bf:13:91:40:4e:8d:db:c9:9a:7b:82:d0:0d:c3:6e:f5:
1b:d9:f8:b9:ee:a6:c6:bc:06:b1:f6:a5:d2:53:2e:cd:bc:83:
53:cd:2c:df:4e:92:30:4c:d8:0b:b8:61:1b:72:a6:bf:24:5c:
21:44:53:e7:94:cd:07:4a:bb:a2:ff:37:b9:24:81:8b:99:44:
27:dd:67:94:e7:95:be:79:9b:ba:85:e8:2c:09:81:96:4c:ee:
b6:a1:c4:a3:70:16:db:13:0e:b2:b9:f9:fd:66:7b:c8:3b:5c:
4f:a2:e2:fe:3e:3d:35:1d:ab:ae:2b:c1:e1:7f:36:7c:b0:bb:
fb:a9:19:d4:e3:ce:93:e4:f7:3c:42:e5:2e:3b:ee:72:1d:95:
af:5d:46:82:bb:1a:83:e5:d9:b0:0c:98:de:9c:a3:04:c8:22:
2e:5f:1e:c9:bb:13:ec:b4:c6:b5:d7:eb:4b:e5:80:30:30:cc:
84:d2:bf:dc:bf:7b:60:01:bd:9e:26:c6:1a:4e:30:ff:ae:ba:
b5:63:7f:38:b0:61:60:d6:fa:98:96:c6:3e:2e:7e:ca:29:b7:
1a:ea:0f:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6EKWkthaPJ+rfDkmhVcVREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWEyZjA4M2Y0NzFkZmI5NTA3YjRjOTczY2I1YzNhY2Q0
OTc1OWQwHhcNMjYwNjAxMTcwOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGYxZGZjMTc3ZDFkMzY0ZTFlOWM2ZWNiZWQzMjBhZTAxMDkyNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrtJw3KruJPjJM+Tg1MdXeicoXFl
VDPBPLG52llVgTDaQuYr96V853/93TCBJsZMJZUvEYUb65noJkZ3Ig6A97VRSoXB
c3W1FQDjRUWXTnC1r0I8F/ewBUvWzRyvW+rcj80lC78QAybPKuw++t0si4mgazMS
49aTdvWpU4Q2Y2QlYlK3QbgA0PApRMTpJYg1RiavMGsPUZbMFewu6BSmtM5yNFYF
kh8mYkdEUvTe+scoHLPTguqNuHyyjbFXGD+W9C6UX4F5ADZCIxJby0vDx4fojCm8
g25lC53oY2bMuLj3imxQmX+3wOlxcqr7KE1n0fNvYFzXu9YT60Oy5xOWrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFDx38F30dNk4enG7L7TIK4BCSS/MB8GA1UdIwQY
MBaAFB6aLwg/Rx37lQe0yXPLXDrNSXWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYt
MjVkNmU4NjEzZGM0LzEvVVBIZndYZlIwMlRoNmNic3Z0TWdyZ0VKSkw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYtMjVkNmU4NjEzZGM0
LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbehYMA0G
CSqGSIb3DQEBCwUAA4IBAQCLSw533GHJjYcVmGizbGpmoZG6XpLtbSta8BN1Q6jb
V9U9oj/6978TkUBOjdvJmnuC0A3DbvUb2fi57qbGvAax9qXSUy7NvINTzSzfTpIw
TNgLuGEbcqa/JFwhRFPnlM0HSrui/ze5JIGLmUQn3WeU55W+eZu6hegsCYGWTO62
ocSjcBbbEw6yufn9ZnvIO1xPouL+Pj01HauuK8HhfzZ8sLv7qRnU486T5Pc8QuUu
O+5yHZWvXUaCuxqD5dmwDJjenKMEyCIuXx7JuxPstMa11+tL5YAwMMyE0r/cv3tg
Ab2eJsYaTjD/rrq1Y384sGFg1vqYlsY+Ln7KKbca6g9V
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:08 2026 by rpki-client