Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/UNrxa7mNWshV_JbrB0BZ0cpuOEk.roa
File: UNrxa7mNWshV_JbrB0BZ0cpuOEk.roa (raw, json)
Hash identifier: Eo6ANkMPIflh/NyGmKlWOHkmfnD61QM+DTkeJS9gQ+g=
Subject key identifier: 50:DA:F1:6B:B9:8D:5A:C8:55:FC:96:EB:07:40:59:D1:CA:6E:38:49
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 019B7D5CF82102AAFEFA6CE908919FC0581A
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/UNrxa7mNWshV_JbrB0BZ0cpuOEk.roa
Signing time: Fri 02 Jan 2026 06:20:03 +0000
ROA not before: Fri 02 Jan 2026 06:20:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39480
IP address blocks: 46.182.72.0/21 maxlen: 21
195.225.204.0/23 maxlen: 23
195.225.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:f8:21:02:aa:fe:fa:6c:e9:08:91:9f:c0:58:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Jan 2 06:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50daf16bb98d5ac855fc96eb074059d1ca6e3849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:60:6c:71:5b:93:e0:c6:8c:d1:91:46:09:
22:24:b0:df:c5:71:3b:ac:95:a2:21:ce:31:11:0b:
7e:28:f9:20:b9:40:bd:94:49:d3:ad:2a:54:9f:27:
28:82:3c:44:02:79:e2:fc:6e:c2:1a:cf:3e:f0:91:
cb:d7:b7:1a:ab:0a:8c:80:01:7b:ba:3e:f0:a3:30:
59:4e:bd:38:bb:10:86:0c:61:e0:dd:8e:c0:44:54:
3a:19:81:dd:94:f3:1b:c5:54:98:6a:f4:32:a7:71:
a9:fc:9b:ae:ba:f2:30:d8:f5:2f:65:29:c9:74:4b:
f2:a6:a0:45:71:19:71:0d:a9:20:f4:69:a8:e8:05:
ff:4d:60:0f:5d:07:d5:20:8e:ff:47:2e:c3:98:31:
b3:48:cf:7c:74:b0:1c:b6:4e:e9:e4:f7:c6:b3:68:
e7:3e:16:98:d8:85:4a:26:b1:52:7f:7f:18:e1:8a:
a4:26:e6:9b:47:80:21:bf:fe:56:5f:29:ca:f8:16:
6a:68:9f:83:83:6b:96:f9:a0:65:8b:d3:da:42:05:
65:d4:b6:83:9f:d1:a4:72:33:31:c0:0a:ae:59:ee:
14:d6:1b:0e:5d:26:36:6c:8a:ad:26:d4:9e:e7:77:
87:a5:c3:fa:1b:24:0d:ba:e1:b0:b4:af:f8:88:82:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DA:F1:6B:B9:8D:5A:C8:55:FC:96:EB:07:40:59:D1:CA:6E:38:49
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/UNrxa7mNWshV_JbrB0BZ0cpuOEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.72.0/21
195.225.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:d4:89:86:62:e6:7d:9d:d0:b6:a2:d0:14:38:04:47:da:f0:
ea:a9:c4:ab:6c:83:55:b0:2e:34:32:cc:55:e3:c7:47:cc:27:
45:d6:4e:09:f8:bf:3f:33:bc:b4:46:0a:db:c4:e4:86:30:4c:
e3:2b:91:ba:70:a7:fb:5e:07:aa:d5:5e:d5:31:10:22:c2:18:
27:e9:c6:1e:cd:46:97:02:d6:d9:98:e4:19:3c:52:dc:c5:c3:
84:8e:e0:fa:eb:c7:bb:45:8e:73:8a:12:cb:ff:21:0a:1c:d9:
e5:77:1d:1b:3e:0e:48:e0:a8:45:39:0d:3d:36:73:1a:21:05:
09:f8:8e:4e:cd:67:bc:f2:a4:9f:86:0c:63:72:bd:5f:c4:fd:
81:f8:1c:e7:a0:bf:d7:e5:ec:33:d0:2e:0f:46:da:40:c1:08:
f5:af:58:47:7a:04:73:21:f7:f7:6d:41:ea:4d:8c:33:75:dc:
29:78:be:a1:1d:37:56:f4:10:99:35:2a:46:e9:f2:58:16:89:
25:f7:8d:96:83:cc:c1:eb:cd:ad:fa:e6:e0:40:88:50:fc:c4:
aa:9d:8f:c6:bc:a1:e8:4f:e0:35:6b:d5:19:31:95:85:d3:68:
c0:11:df:21:b5:03:94:a9:ee:35:2d:f6:54:f3:1d:a9:9e:85:
16:10:2c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:48 2026 by rpki-client