Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/UGBs5qvKj7IvjN-pmPTgRm9F_tY.roa
File: UGBs5qvKj7IvjN-pmPTgRm9F_tY.roa (raw, json)
Hash identifier: gtFOl8T5ygY0dGRXN+RqAtx4ZYOkn6k5In5ZS1Pw5gI=
Subject key identifier: 50:60:6C:E6:AB:CA:8F:B2:2F:8C:DF:A9:98:F4:E0:46:6F:45:FE:D6
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 01A135C95BD24F35414BC4647AD3D5841092
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/UGBs5qvKj7IvjN-pmPTgRm9F_tY.roa
Signing time: Tue 13 Oct 2026 15:02:31 +0000
ROA not before: Tue 13 Oct 2026 15:02:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50266
IP address blocks: 31.20.0.0/16 maxlen: 24
31.21.0.0/16 maxlen: 24
31.184.64.0/18 maxlen: 24
31.187.128.0/17 maxlen: 24
62.166.128.0/17 maxlen: 24
62.250.0.0/17 maxlen: 24
62.250.128.0/17 maxlen: 24
81.59.0.0/17 maxlen: 17
82.172.0.0/17 maxlen: 17
82.174.0.0/16 maxlen: 24
85.223.0.0/17 maxlen: 24
87.208.0.0/16 maxlen: 24
87.209.0.0/16 maxlen: 24
87.210.0.0/16 maxlen: 24
87.211.0.0/16 maxlen: 24
87.212.0.0/16 maxlen: 24
87.214.0.0/16 maxlen: 24
92.254.0.0/17 maxlen: 24
94.157.0.0/16 maxlen: 24
95.98.0.0/15 maxlen: 24
95.99.0.0/16 maxlen: 16
143.176.0.0/16 maxlen: 24
143.177.0.0/16 maxlen: 24
143.178.0.0/17 maxlen: 24
143.178.128.0/17 maxlen: 24
143.179.0.0/16 maxlen: 24
178.224.0.0/16 maxlen: 24
178.226.0.0/16 maxlen: 24
188.88.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c9:5b:d2:4f:35:41:4b:c4:64:7a:d3:d5:84:10:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Oct 13 15:02:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50606ce6abca8fb22f8cdfa998f4e0466f45fed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:e1:ba:96:f8:8a:a5:99:a2:40:7e:cf:7c:
9d:c5:f6:1f:bf:c8:89:b4:d2:9a:c1:1c:d5:30:c3:
87:9b:97:01:ef:6f:20:3c:d8:60:92:a3:28:7b:df:
ce:e7:46:0e:db:44:4e:99:44:3b:d9:68:ff:33:d9:
db:2c:a3:19:eb:0e:ad:ce:88:05:e1:7f:d3:fd:f2:
a6:24:1d:09:da:d5:c3:aa:ae:7a:0d:a9:a6:36:7e:
c1:48:88:96:21:dc:b0:30:18:9e:54:4a:05:ee:46:
1f:ea:58:1c:bd:b3:db:07:54:3a:32:52:fc:55:50:
14:d5:f9:09:4b:e1:36:c4:ce:e0:fc:10:2d:6c:87:
16:f6:d3:ca:ee:54:0b:86:fd:b6:53:d2:cf:f9:bb:
bc:76:c4:f2:29:69:b5:bd:e3:c8:1b:29:7a:95:fd:
35:f3:06:b2:72:cc:38:26:34:50:d0:d3:da:f7:e0:
4b:86:62:f3:42:70:e5:aa:29:31:bc:51:37:cf:40:
d2:cc:99:81:11:f6:3d:0b:71:44:4b:f4:d5:31:e6:
91:73:51:05:89:29:c1:1d:b2:26:43:30:76:47:c1:
0a:63:99:53:9c:9d:d4:2e:a2:f0:3e:20:12:27:e6:
a9:f0:fd:16:3a:b4:52:c2:fe:36:eb:07:fd:e4:f9:
dd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:60:6C:E6:AB:CA:8F:B2:2F:8C:DF:A9:98:F4:E0:46:6F:45:FE:D6
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/UGBs5qvKj7IvjN-pmPTgRm9F_tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.20.0.0/15
31.184.64.0/18
31.187.128.0/17
62.166.128.0/17
62.250.0.0/16
81.59.0.0/17
82.172.0.0/17
82.174.0.0/16
85.223.0.0/17
87.208.0.0-87.212.255.255
87.214.0.0/16
92.254.0.0/17
94.157.0.0/16
95.98.0.0/15
143.176.0.0/14
178.224.0.0/16
178.226.0.0/16
188.88.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a4:07:ca:37:68:89:77:47:dc:08:a9:eb:17:ba:72:7d:18:73:
02:2d:8e:dc:0b:fd:6b:19:fe:16:63:cb:9e:77:e5:c4:ca:f3:
aa:e8:65:85:81:b6:b0:cd:59:18:6e:15:55:04:16:e2:e5:6d:
ac:f9:b4:f6:10:20:e3:a2:98:f0:93:0c:53:fc:53:b0:03:94:
6f:41:b6:62:da:4b:cb:6f:33:ec:c2:64:e7:27:57:db:29:72:
0f:eb:e2:91:a4:98:e2:4c:9c:a4:d7:60:22:09:b8:cf:f0:b3:
b4:b2:c1:94:65:af:d1:39:ee:9a:a7:14:58:94:65:67:0e:5c:
b0:90:79:e3:3a:05:a4:ef:89:a1:01:c9:b3:69:b5:3a:fe:b9:
67:f8:91:ea:fe:fa:b5:02:1d:7d:4b:f9:95:8e:20:5c:25:7e:
74:7e:7a:48:90:99:34:13:5b:ef:b4:db:49:3b:41:9d:54:ae:
fb:f2:ac:35:b6:e8:d0:dc:43:1c:b2:a8:62:64:89:1c:a1:fb:
a3:ad:1f:22:1d:21:9b:0a:52:be:28:16:a3:e2:fa:54:72:f3:
32:4d:1a:54:85:4f:12:26:f5:85:8c:5b:76:94:09:d2:12:a6:
83:78:21:80:09:a9:dd:07:16:d9:4e:68:b9:1c:60:12:a2:4a:
75:13:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:55 2026 by rpki-client