Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/UbGWweJfVY5bb5MkONE879d5Pig.roa
File: UbGWweJfVY5bb5MkONE879d5Pig.roa (raw, json)
Hash identifier: +KCuhZJeI/s1n+6AjDmRT0GCoiTheHngNokFolidwTU=
Subject key identifier: 51:B1:96:C1:E2:5F:55:8E:5B:6F:93:24:38:D1:3C:EF:D7:79:3E:28
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 019EB1B46BACA427B947E4BB139345A67200
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/UbGWweJfVY5bb5MkONE879d5Pig.roa
Signing time: Wed 10 Jun 2026 13:24:11 +0000
ROA not before: Wed 10 Jun 2026 13:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 5.23.0.0/19 maxlen: 19
80.231.0.0/16 maxlen: 16
80.231.8.0/21 maxlen: 21
80.231.11.0/24 maxlen: 24
80.231.22.0/24 maxlen: 24
80.231.56.0/24 maxlen: 24
80.231.71.0/24 maxlen: 24
80.231.93.0/24 maxlen: 24
80.231.94.0/24 maxlen: 24
80.231.96.0/21 maxlen: 21
80.231.112.0/21 maxlen: 21
80.231.136.0/24 maxlen: 24
80.231.176.0/21 maxlen: 21
80.231.187.0/24 maxlen: 24
80.231.202.0/24 maxlen: 24
80.231.216.0/24 maxlen: 24
80.231.235.0/24 maxlen: 24
195.219.0.0/16 maxlen: 16
195.219.22.0/24 maxlen: 24
195.219.38.0/24 maxlen: 24
195.219.40.0/24 maxlen: 24
195.219.41.0/24 maxlen: 24
195.219.43.0/24 maxlen: 24
195.219.44.0/24 maxlen: 24
195.219.45.0/24 maxlen: 24
195.219.47.0/24 maxlen: 24
195.219.96.0/24 maxlen: 24
195.219.168.0/23 maxlen: 23
195.219.204.0/24 maxlen: 24
195.219.232.0/24 maxlen: 24
195.219.235.0/24 maxlen: 24
195.219.238.0/24 maxlen: 24
195.219.240.0/24 maxlen: 24
195.219.246.0/24 maxlen: 24
195.219.248.0/21 maxlen: 21
195.219.253.0/24 maxlen: 24
2a01:3e0::/29 maxlen: 29
2a01:3e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:b4:6b:ac:a4:27:b9:47:e4:bb:13:93:45:a6:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jun 10 13:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51b196c1e25f558e5b6f932438d13cefd7793e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:57:6b:0c:12:44:92:9a:30:e7:47:f4:8d:
ed:b5:2e:5f:fd:83:6e:16:14:8e:2a:09:c5:99:16:
26:fb:86:de:ef:ea:91:0c:74:33:1e:c3:40:82:91:
5a:5c:66:31:51:f9:69:d1:93:d7:b2:0d:9c:1b:56:
9f:9f:04:22:c1:04:de:70:b6:e8:82:b9:46:da:0a:
d5:61:0a:63:5f:3e:7a:30:99:64:41:60:e9:55:e6:
20:c2:e7:de:eb:23:f4:e8:58:01:b9:c4:78:bb:e2:
21:5a:36:19:63:da:8d:27:5b:1f:91:89:57:91:86:
0f:5b:88:b3:fa:c7:b1:de:73:fc:45:bc:24:51:69:
ec:b2:dc:32:d0:7d:67:11:9a:b3:12:9b:ee:97:4d:
38:52:fa:c3:8f:aa:7b:a9:dd:54:3f:25:81:4e:ed:
48:65:9a:b2:e7:9d:c1:82:8b:89:84:90:cb:d9:10:
a5:db:e0:f1:de:84:30:01:4a:86:2a:fe:04:10:f1:
91:c3:a6:6f:7a:e0:f3:42:43:83:59:a2:2f:da:1a:
d2:70:d1:9e:51:2a:21:69:8d:83:83:82:77:4f:7e:
6f:bb:12:3b:9a:ab:99:18:53:d2:77:09:84:bd:d4:
8a:d7:ec:81:c2:04:85:96:ca:37:71:c1:a0:88:fb:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B1:96:C1:E2:5F:55:8E:5B:6F:93:24:38:D1:3C:EF:D7:79:3E:28
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/UbGWweJfVY5bb5MkONE879d5Pig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.0.0/19
80.231.0.0/16
195.219.0.0/16
IPv6:
2a01:3e0::/29
Signature Algorithm: sha256WithRSAEncryption
67:0d:03:73:07:85:98:3c:47:52:23:6f:30:45:84:32:18:e5:
b2:b7:4d:38:30:24:9f:4a:ed:b2:df:a2:f1:3c:43:23:89:f7:
ec:d9:7d:59:dd:e6:7a:a5:a4:bd:28:bd:92:d0:b2:66:c3:0f:
4e:57:3a:27:d2:34:58:bc:a3:42:a1:8d:f0:0d:aa:31:16:7a:
1f:08:0e:79:37:8f:52:17:21:4c:da:40:bf:93:3f:80:e2:2c:
87:bf:e1:70:25:4e:5f:cd:ea:35:f1:11:d0:50:d7:2f:54:25:
60:fd:0c:7d:c5:33:86:5b:90:4f:39:91:7c:61:35:5e:c8:3d:
e8:cc:a2:6e:db:57:52:bf:c7:9f:79:a0:79:fc:3c:30:98:55:
74:e0:1a:05:2c:7a:e3:0c:31:55:dd:f9:13:e7:ca:39:f4:61:
93:73:9d:f1:73:30:1d:bf:85:e0:65:26:a2:18:56:eb:97:f1:
5f:5f:48:c7:62:9c:b0:a2:42:21:31:f3:1f:0f:cb:61:e6:77:
dd:4b:03:9e:ec:09:c4:81:24:eb:79:a3:21:04:1d:1d:76:f0:
a5:d5:9d:62:f1:9f:08:50:83:d4:e3:ae:d8:f9:59:0e:18:91:
36:fb:20:5a:6d:dd:cb:47:b0:68:f6:4b:a8:8a:6a:3b:e3:85:
7c:a6:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:07 2026 by rpki-client