Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/UndtBE71rgFq3VSP56Yl4Zum6UE.roa
File: UndtBE71rgFq3VSP56Yl4Zum6UE.roa (raw, json)
Hash identifier: XSw+U9DSF8M8zGn1H59NzXKmpA+1JDfRKuxfQGuYCAE=
Subject key identifier: 52:77:6D:04:4E:F5:AE:01:6A:DD:54:8F:E7:A6:25:E1:9B:A6:E9:41
Certificate issuer: /CN=d626a4f5ee714d0b445c1ba610cbf9b15af4671c
Certificate serial: 01A0431BC90E3F146CA9BC0637739789B719
Authority key identifier: D6:26:A4:F5:EE:71:4D:0B:44:5C:1B:A6:10:CB:F9:B1:5A:F4:67:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iak9e5xTQtEXBumEMv5sVr0Zxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/UndtBE71rgFq3VSP56Yl4Zum6UE.roa
Signing time: Thu 27 Aug 2026 12:04:49 +0000
ROA not before: Thu 27 Aug 2026 12:04:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35328
IP address blocks: 31.130.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iak9e5xTQtEXBumEMv5sVr0Zxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:1b:c9:0e:3f:14:6c:a9:bc:06:37:73:97:89:b7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d626a4f5ee714d0b445c1ba610cbf9b15af4671c
Validity
Not Before: Aug 27 12:04:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52776d044ef5ae016add548fe7a625e19ba6e941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:c1:ec:e1:79:66:26:01:d3:63:ae:5a:8d:
29:49:4a:eb:f9:0f:d6:8a:34:b2:5a:35:a5:5d:67:
25:61:33:93:4c:14:6e:55:25:d5:b7:92:21:91:52:
7f:fb:5b:50:a8:66:b2:54:95:6c:ba:ab:f0:8d:ff:
00:78:ed:6b:99:b8:94:2c:fa:19:76:27:55:5e:cf:
1c:fb:02:fb:0a:65:ea:58:a3:e2:b6:f9:73:d1:a9:
d6:9d:a5:e4:f9:e8:38:8c:ff:b0:64:43:95:cd:19:
d1:d7:63:5e:e7:ec:1c:30:0b:56:74:42:f2:28:f3:
df:38:09:7d:0e:60:d7:cb:02:d1:04:01:60:19:13:
25:43:0a:c6:3c:ac:b6:c6:28:f8:4e:fa:80:14:e3:
e9:f5:4d:77:9e:60:09:45:a4:51:8c:25:51:ab:af:
73:37:bf:23:33:06:24:85:7c:5f:38:64:4a:03:6a:
51:ab:a0:1d:e4:ce:a6:3f:86:27:5e:5e:8f:ee:27:
b8:8b:55:72:8c:3d:f0:11:fa:2d:f4:64:f3:28:c5:
c6:cb:84:7b:14:f6:13:e2:65:52:8f:43:37:ee:c6:
c2:cb:bf:1e:5d:67:40:95:42:57:c3:a2:da:c3:0b:
a0:8b:42:9d:c0:40:46:1f:ba:52:0e:ee:9e:d3:51:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:77:6D:04:4E:F5:AE:01:6A:DD:54:8F:E7:A6:25:E1:9B:A6:E9:41
X509v3 Authority Key Identifier:
keyid:D6:26:A4:F5:EE:71:4D:0B:44:5C:1B:A6:10:CB:F9:B1:5A:F4:67:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iak9e5xTQtEXBumEMv5sVr0Zxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/UndtBE71rgFq3VSP56Yl4Zum6UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:89:83:e3:c1:99:80:2a:59:fe:82:10:6e:08:d3:a9:51:de:
b2:bd:65:99:8a:44:74:b7:f4:46:97:03:95:d8:5e:fa:c6:47:
31:bc:2c:46:fa:06:ae:1c:49:b3:4b:d3:45:d7:21:48:62:21:
54:f2:d9:ed:ad:37:5e:55:3f:56:f1:dd:49:e1:9e:76:b8:da:
3a:d7:45:11:e0:81:60:a0:e3:5a:14:82:e7:e0:55:fd:d6:51:
a5:88:c9:cd:83:be:3b:9f:1f:e7:a9:67:ae:81:25:96:08:f7:
15:18:1f:22:9d:4f:61:3d:db:58:36:47:99:f1:78:15:85:40:
d7:88:1e:7f:c7:c7:ff:1c:5d:1f:71:bc:9f:7e:3a:98:f5:e2:
ac:f2:67:41:f7:20:4f:6f:00:86:62:55:0f:a0:f1:ae:14:40:
83:14:6c:83:49:cd:4e:2f:ff:bc:f3:bb:f7:a1:11:c2:54:dc:
e1:35:29:6e:68:bc:9e:15:1e:b8:bb:9e:41:f3:ab:f8:dd:0b:
84:34:78:b2:43:ff:12:34:9f:78:25:fc:c4:b5:43:e5:81:11:
01:27:b0:fa:2f:27:5b:d3:57:e9:67:42:26:71:c5:ba:78:0c:
0e:47:ce:6b:ef:57:ad:42:3c:fd:1e:30:52:54:77:7c:9c:b2:
02:3c:b3:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBDG8kOPxRsqbwGN3OXibcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjZhNGY1ZWU3MTRkMGI0NDVjMWJhNjEwY2JmOWIxNWFm
NDY3MWMwHhcNMjYwODI3MTIwNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mjc3NmQwNDRlZjVhZTAxNmFkZDU0OGZlN2E2MjVlMTliYTZlOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+3B7OF5ZiYB02OuWo0pSUrr+Q/W
ijSyWjWlXWclYTOTTBRuVSXVt5IhkVJ/+1tQqGayVJVsuqvwjf8AeO1rmbiULPoZ
didVXs8c+wL7CmXqWKPitvlz0anWnaXk+eg4jP+wZEOVzRnR12Ne5+wcMAtWdELy
KPPfOAl9DmDXywLRBAFgGRMlQwrGPKy2xij4TvqAFOPp9U13nmAJRaRRjCVRq69z
N78jMwYkhXxfOGRKA2pRq6Ad5M6mP4YnXl6P7ie4i1VyjD3wEfot9GTzKMXGy4R7
FPYT4mVSj0M37sbCy78eXWdAlUJXw6Lawwugi0KdwEBGH7pSDu6e01FtOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFJ3bQRO9a4Bat1Uj+emJeGbpulBMB8GA1UdIwQY
MBaAFNYmpPXucU0LRFwbphDL+bFa9GccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlhazllNXhUUXRFWEJ1bUVNdjVzVnIwWnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80ZGJjNGYtNTcwNS00OTZlLWExOTEt
MzVlMDU5MDJkY2FlLzEvVW5kdEJFNzFyZ0ZxM1ZTUDU2WWw0WnVtNlVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80ZGJjNGYtNTcwNS00OTZlLWExOTEtMzVlMDU5MDJkY2Fl
LzEvMWlhazllNXhUUXRFWEJ1bUVNdjVzVnIwWnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH4KgMA0G
CSqGSIb3DQEBCwUAA4IBAQCKiYPjwZmAKln+ghBuCNOpUd6yvWWZikR0t/RGlwOV
2F76xkcxvCxG+gauHEmzS9NF1yFIYiFU8tntrTdeVT9W8d1J4Z52uNo610UR4IFg
oONaFILn4FX91lGliMnNg747nx/nqWeugSWWCPcVGB8inU9hPdtYNkeZ8XgVhUDX
iB5/x8f/HF0fcbyffjqY9eKs8mdB9yBPbwCGYlUPoPGuFECDFGyDSc1OL/+887v3
oRHCVNzhNSluaLyeFR64u55B86v43QuENHiyQ/8SNJ94JfzEtUPlgREBJ7D6Lydb
01fpZ0ImccW6eAwOR85r71etQjz9HjBSVHd8nLICPLO9
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:32 2026 by rpki-client