Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/UDH_1tnf99LPgPhIT1ItGY9SsOs.roa
File: UDH_1tnf99LPgPhIT1ItGY9SsOs.roa (raw, json)
Hash identifier: 0E5qq9ZTPli2QQSs3YDaqQLmpnDd0gKNyl9jc1IWEm0=
Subject key identifier: 50:31:FF:D6:D9:DF:F7:D2:CF:80:F8:48:4F:52:2D:19:8F:52:B0:EB
Certificate issuer: /CN=cfcbc2a6798df9f91d5be9f3d7ca0a239a7fc558
Certificate serial: 01A08C28EC6E9FDCE2FE347B809B5148830C
Authority key identifier: CF:CB:C2:A6:79:8D:F9:F9:1D:5B:E9:F3:D7:CA:0A:23:9A:7F:C5:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8vCpnmN-fkdW-nz18oKI5p_xVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/UDH_1tnf99LPgPhIT1ItGY9SsOs.roa
Signing time: Thu 10 Sep 2026 16:31:27 +0000
ROA not before: Thu 10 Sep 2026 16:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57608
IP address blocks: 45.9.233.0/24 maxlen: 24
45.9.234.0/24 maxlen: 24
45.9.235.0/24 maxlen: 24
185.242.127.0/24 maxlen: 24
194.11.132.0/24 maxlen: 24
194.11.216.0/24 maxlen: 24
194.11.220.0/24 maxlen: 24
194.11.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8vCpnmN-fkdW-nz18oKI5p_xVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:28:ec:6e:9f:dc:e2:fe:34:7b:80:9b:51:48:83:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcbc2a6798df9f91d5be9f3d7ca0a239a7fc558
Validity
Not Before: Sep 10 16:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5031ffd6d9dff7d2cf80f8484f522d198f52b0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:90:d6:ed:d2:f7:69:b4:29:e6:31:ed:65:
5e:3f:1c:cc:e7:b8:1b:01:cf:c4:55:85:71:ba:3e:
42:ca:c4:38:e9:a5:a5:07:c1:7e:8f:e0:44:85:fe:
cb:b2:66:db:0e:d3:cd:08:03:6d:af:64:72:cc:30:
61:b7:6f:ff:1d:c4:9b:e0:2a:96:75:30:04:22:df:
0a:fa:06:9e:d0:da:3e:66:e6:08:a1:18:e7:69:80:
ec:f9:0f:38:d1:38:9e:5d:59:63:ca:8b:4a:cd:ec:
10:87:b4:3e:8c:c3:36:66:17:0d:f7:17:d7:46:2c:
45:5c:3e:14:b9:de:6d:55:50:0c:bd:e2:5a:b2:c6:
2d:db:aa:7f:27:29:ff:03:ab:04:e6:36:09:53:7d:
d3:6f:34:d3:32:04:07:2f:d7:62:5b:b0:93:65:e3:
a5:fd:b0:49:61:43:74:0f:ad:60:8f:82:61:f8:9a:
8f:2e:6a:d0:8e:63:40:65:3f:96:c8:da:34:d4:dc:
b2:e4:fd:8a:50:60:b4:cb:69:0c:83:7a:c2:49:da:
6b:76:c1:78:02:c1:4a:b4:a7:e3:b5:e7:eb:8d:26:
1b:cd:4a:3e:51:71:88:63:6d:bd:00:f1:98:e8:45:
95:c7:1e:54:20:57:c8:d0:8a:5a:32:a4:05:83:b6:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:FF:D6:D9:DF:F7:D2:CF:80:F8:48:4F:52:2D:19:8F:52:B0:EB
X509v3 Authority Key Identifier:
keyid:CF:CB:C2:A6:79:8D:F9:F9:1D:5B:E9:F3:D7:CA:0A:23:9A:7F:C5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8vCpnmN-fkdW-nz18oKI5p_xVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/UDH_1tnf99LPgPhIT1ItGY9SsOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f5561d-df29-47b0-a149-eb0d9a7e4cf4/1/z8vCpnmN-fkdW-nz18oKI5p_xVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.233.0-45.9.235.255
185.242.127.0/24
194.11.132.0/24
194.11.216.0/24
194.11.220.0/24
194.11.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:47:f4:42:26:ad:65:ad:c9:0a:15:e6:ec:d0:6a:71:d5:04:
b4:d2:a1:34:57:b4:28:8e:1a:7e:2a:ff:62:dc:e9:fb:a6:71:
e2:33:e0:f6:c1:0a:2a:62:18:54:07:ed:ed:e6:1c:3f:27:d2:
a6:e5:2f:03:27:b2:38:35:3f:53:fe:c9:05:86:8a:94:7c:54:
b9:fc:c7:9b:c8:86:28:7e:60:f7:40:7b:55:72:0c:d1:72:c0:
b3:90:ff:d2:0e:57:c8:21:13:1a:c9:ac:0c:b2:9b:d7:14:d0:
43:f2:dc:b0:97:82:30:db:29:70:25:49:6c:dc:ab:29:2c:c6:
fe:20:59:4f:01:25:1c:ec:4e:82:02:e9:de:ed:0c:d1:74:0e:
cb:7b:15:6e:de:23:cb:f5:e9:53:81:97:62:5a:77:23:48:b5:
11:d0:c8:ba:ec:bb:92:c0:8e:ad:cf:eb:62:e7:a7:c4:a1:c4:
6b:a0:55:87:6d:53:31:c4:b2:c5:c8:5e:c3:b1:aa:da:1f:15:
ab:c8:8c:ea:11:76:82:e9:dc:38:cc:51:e4:c0:fc:c2:a1:a0:
90:19:a0:6b:bf:39:02:22:f9:0e:87:ba:14:56:57:e8:14:2b:
da:88:9c:a3:3c:80:21:27:97:6e:e0:03:5a:ff:8d:ae:c5:82:
a1:bc:37:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:10 2026 by rpki-client