Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/UFUNHcp59zFp-s7epnaBCk3fSDI.roa
File: UFUNHcp59zFp-s7epnaBCk3fSDI.roa (raw, json)
Hash identifier: 5JNnpeUYOHWtCY7aisWTKc4iY+kJ/fdA3iBaqT6fPPA=
Subject key identifier: 50:55:0D:1D:CA:79:F7:31:69:FA:CE:DE:A6:76:81:0A:4D:DF:48:32
Certificate issuer: /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial: 019B76EB5E7107969411C4A1571A9F1EB746
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/UFUNHcp59zFp-s7epnaBCk3fSDI.roa
Signing time: Thu 01 Jan 2026 00:18:15 +0000
ROA not before: Thu 01 Jan 2026 00:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34885
IP address blocks: 193.138.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:5e:71:07:96:94:11:c4:a1:57:1a:9f:1e:b7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Validity
Not Before: Jan 1 00:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50550d1dca79f73169facedea676810a4ddf4832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:7b:78:dc:6a:86:31:9d:66:8b:fc:5e:d0:
1a:50:87:39:eb:96:20:02:e0:c3:7c:bb:8e:d4:12:
14:f6:91:61:27:26:68:63:05:41:98:f3:db:0b:d0:
31:6d:96:bb:aa:cc:8a:a8:cf:6f:56:41:2a:80:a0:
e8:a3:c1:58:af:95:9d:8e:f6:74:1e:be:e8:01:a7:
53:9b:bb:80:26:62:ec:d5:b0:10:7e:8d:66:6c:cb:
dc:df:03:77:42:b7:78:35:ad:be:de:fc:74:4d:5e:
1e:62:bb:dd:fb:fd:3b:65:10:4e:0b:de:98:21:8d:
15:ce:7e:b0:63:79:66:09:52:10:85:51:a3:3e:4b:
6e:12:c2:bd:78:99:fe:2b:15:60:fd:13:dc:a9:8d:
0c:95:18:1c:b9:05:f9:b2:ff:66:bb:4c:f1:47:c8:
12:f2:e2:8c:df:e9:39:f1:ab:40:9c:83:5a:f0:cd:
ce:ff:f9:40:1b:f6:e3:09:69:e5:d5:66:f0:0f:e6:
71:37:ba:9a:d4:36:11:30:1c:7f:32:45:b9:2d:ab:
d6:16:47:5c:b2:37:ed:13:9f:4b:ad:c8:39:49:9b:
08:ec:75:90:7f:ce:7e:55:b4:23:94:23:cd:49:92:
aa:34:30:82:f2:85:8b:e3:90:41:2c:54:25:1a:04:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:55:0D:1D:CA:79:F7:31:69:FA:CE:DE:A6:76:81:0A:4D:DF:48:32
X509v3 Authority Key Identifier:
keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/UFUNHcp59zFp-s7epnaBCk3fSDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.0.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0f:5e:04:08:55:64:35:6e:50:2c:0c:f2:8d:0c:c7:b3:29:
7d:87:6b:bc:5a:e4:5a:55:9c:e5:8b:c3:c9:3a:e2:7d:9b:03:
64:6b:c8:7d:f5:04:48:72:84:9c:d0:ba:13:81:2b:dd:fc:8a:
85:cd:20:3e:99:f4:ae:67:26:b5:c6:a2:81:c1:d0:db:10:fc:
90:49:c7:7c:fe:5f:69:4b:98:ff:28:1f:5d:76:6b:93:1a:67:
50:a2:42:47:b4:90:86:c4:b3:23:59:23:01:d5:60:90:ec:0e:
9d:d8:cd:cb:5f:59:bc:67:23:b5:c2:23:86:a4:c3:17:e6:0c:
9d:a3:53:0d:f2:eb:2e:e9:6f:ac:bf:0c:37:a4:87:d5:71:b8:
98:ca:88:59:b2:da:d7:ea:d6:69:d0:c8:24:d4:0e:b7:2b:3e:
22:40:33:15:e6:4a:93:a5:e2:3c:38:25:64:e1:4e:2f:a3:d7:
d5:83:d8:b6:8c:4b:dd:b7:5e:48:7b:c6:47:23:31:a7:02:e6:
15:e3:d9:33:fc:42:da:55:fe:b5:c7:8d:34:ae:1d:a8:6e:d7:
77:71:d3:f5:29:c8:d0:35:90:8c:5a:28:b5:97:61:e6:ec:80:
a0:74:07:e6:d6:09:7b:d6:61:66:b9:22:27:9f:d5:c7:88:d8:
b9:d8:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:51 2026 by rpki-client