Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/UNRAfchlzK7hegIxk0UizqVW59Q.roa
File: UNRAfchlzK7hegIxk0UizqVW59Q.roa (raw, json)
Hash identifier: Ix4XpUkKhSvIcIyTuJtxIIijVRzFE7EHP9yPsvu8G4M=
Subject key identifier: 50:D4:40:7D:C8:65:CC:AE:E1:7A:02:31:93:45:22:CE:A5:56:E7:D4
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0998900B2255C56DF78D8E115034AA860
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/UNRAfchlzK7hegIxk0UizqVW59Q.roa
Signing time: Sun 13 Sep 2026 06:51:27 +0000
ROA not before: Sun 13 Sep 2026 06:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 79.182.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:89:00:b2:25:5c:56:df:78:d8:e1:15:03:4a:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 13 06:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50d4407dc865ccaee17a0231934522cea556e7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:f2:6c:25:b9:9c:47:c3:af:19:ea:9f:16:
f6:fa:62:8c:92:68:3d:10:85:98:a2:c4:6c:52:20:
10:94:1e:99:f1:a3:d4:0a:5f:a7:81:24:76:e2:d7:
cc:de:f2:70:18:4d:80:c4:a1:74:b2:e4:45:08:79:
d3:11:88:25:be:6a:6a:d9:9d:61:26:9d:b1:14:57:
a1:d3:72:ce:9f:0e:8d:13:39:6f:85:dc:61:e6:a5:
9e:d2:3d:fa:a9:73:9a:31:a1:a5:95:ea:93:ef:7d:
ca:84:b3:eb:da:7e:fd:dd:02:9c:c3:d3:23:2f:c8:
fa:5a:ff:e2:40:42:c8:7f:cc:ac:39:ee:cc:f7:bc:
5c:71:0f:c9:48:b6:18:fb:db:b7:d0:81:90:e5:df:
9c:f8:7d:9f:fd:fa:15:ab:d0:da:78:9c:58:a2:e2:
6a:f7:4d:84:09:4a:e9:ee:70:36:34:15:7c:97:c6:
b2:70:3f:db:be:55:1b:bd:61:c2:45:f8:02:6a:7f:
41:ef:74:ff:2a:57:fb:8c:ae:08:d8:e1:3e:7f:2c:
5d:94:94:4a:d5:e1:4b:2f:3c:ad:90:55:b2:a2:0d:
1b:73:8b:b0:de:a0:ee:cb:9b:f3:fb:af:a2:af:a3:
b3:ca:60:3f:d2:92:0a:e7:a4:91:ce:e7:80:99:dd:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D4:40:7D:C8:65:CC:AE:E1:7A:02:31:93:45:22:CE:A5:56:E7:D4
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/UNRAfchlzK7hegIxk0UizqVW59Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.182.0/24
Signature Algorithm: sha256WithRSAEncryption
42:26:f4:56:8c:0f:03:f8:62:f1:fc:49:02:4d:66:b9:18:97:
67:ef:82:c0:06:30:6e:46:f6:d1:7f:7f:a0:1b:a1:15:e5:03:
4e:5a:3f:07:47:1a:cf:2f:a6:1b:3c:d2:2d:bf:86:6d:ac:e8:
e5:b2:3b:32:ad:c5:52:7f:bb:cb:00:0b:6e:da:1f:12:e0:bf:
91:7c:1c:35:5f:79:37:1f:1d:5d:59:f9:5b:c5:6c:6f:ef:ca:
49:10:5c:9d:b3:0e:eb:ae:5e:4d:13:ff:84:dd:ad:c3:da:c2:
9c:40:1e:52:c1:a3:28:4a:5a:0e:b7:81:99:eb:55:6b:fa:39:
21:12:7d:4f:03:82:16:5d:ba:99:90:08:d8:03:17:79:e3:aa:
f3:db:ca:ac:04:8c:f5:70:0d:20:6e:90:e1:52:3b:0c:b9:f0:
e5:08:70:e0:61:71:8d:4e:9d:9c:b4:6c:9c:49:95:a9:c4:b5:
c5:2d:3a:58:a8:3f:49:6c:70:a3:aa:b3:d6:f4:0d:7f:44:01:
ae:9f:11:1f:c8:e5:9c:71:aa:53:0a:5f:7b:6b:40:08:e4:f0:
7c:e5:42:cf:fe:78:38:bf:31:bc:f2:c1:e3:19:87:61:79:b6:
b5:0f:7d:e2:5e:1f:6c:b6:83:59:38:5d:18:ed:38:5f:57:a9:
a3:36:00:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:32 2026 by rpki-client