Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UAhAd15sm6zy6_JCC2foG_CxY9Q.roa
File: UAhAd15sm6zy6_JCC2foG_CxY9Q.roa (raw, json)
Hash identifier: QNJtOZDMc5d6KWlXodyqH9IN72fjqjARygPkojFQzwM=
Subject key identifier: 50:08:40:77:5E:6C:9B:AC:F2:EB:F2:42:0B:67:E8:1B:F0:B1:63:D4
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019D72C7A6E17498ABC0593EE6C52DA3B568
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UAhAd15sm6zy6_JCC2foG_CxY9Q.roa
Signing time: Thu 09 Apr 2026 15:06:20 +0000
ROA not before: Thu 09 Apr 2026 15:06:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401450
IP address blocks: 185.238.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:c7:a6:e1:74:98:ab:c0:59:3e:e6:c5:2d:a3:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Apr 9 15:06:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=500840775e6c9bacf2ebf2420b67e81bf0b163d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:48:a9:f3:d5:dd:9c:07:e7:84:34:af:a2:
3f:b6:04:a5:66:3e:21:4f:36:36:b1:cb:86:44:6e:
71:41:d8:71:d7:0f:3b:53:af:75:36:d1:b0:3d:a2:
a1:b4:12:3c:e4:d9:13:0a:90:03:d1:4f:35:77:07:
b4:e9:d4:6a:b5:76:bc:5f:e2:b3:95:42:82:bc:d9:
26:28:53:7a:1b:f5:b3:b2:d6:c2:b9:c3:cf:dc:30:
89:63:bc:5c:e4:7a:28:17:2a:1a:b3:d1:97:bb:30:
63:ef:01:91:d2:f0:92:4c:5b:3e:b4:2d:c4:c1:ab:
df:b7:d8:38:ae:52:df:eb:3b:6f:39:c1:ee:65:1d:
bb:1e:cf:02:ad:df:40:84:5b:3d:a4:3d:64:3e:f8:
91:6b:af:77:9b:2b:ef:50:80:8f:17:7c:48:68:18:
10:2b:4c:dd:66:a9:73:ae:f9:71:b3:f5:ad:ad:9e:
cc:fe:e5:e2:62:2d:38:1e:b9:28:fa:01:49:1c:0e:
6c:76:cf:6f:a2:c5:c5:ce:41:8c:d5:a7:44:ef:a7:
c3:7e:99:24:b4:a0:a4:f7:b3:6f:25:2c:cd:ba:5f:
2a:b8:1d:be:22:7a:b4:36:fd:0a:d8:ea:b8:f8:9c:
2e:f4:c2:f6:ea:65:b9:81:ec:b1:ea:07:cc:65:b7:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:08:40:77:5E:6C:9B:AC:F2:EB:F2:42:0B:67:E8:1B:F0:B1:63:D4
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UAhAd15sm6zy6_JCC2foG_CxY9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d5:8f:be:43:75:33:4b:56:8a:d8:af:db:20:cb:2c:e6:ee:
fd:33:ce:b5:1b:e1:93:31:62:4f:28:0c:ba:32:f7:60:80:f2:
20:69:4e:ed:bc:e5:44:2f:e9:04:09:19:d3:ec:ee:45:da:37:
ef:c7:9a:e7:af:40:65:a2:ab:43:d0:c3:5d:ce:9a:f3:91:b5:
bd:a5:25:d4:4d:a9:67:5a:a9:03:d1:0d:8d:b7:fa:7f:a1:12:
01:ca:72:ba:56:51:a6:36:9a:14:fd:7c:3d:75:e5:ee:c0:92:
ba:64:81:0b:1d:32:b9:b2:3f:08:66:62:ab:f9:58:a0:21:d5:
c2:a9:be:66:dd:49:f4:92:3f:47:6a:fe:6a:7a:58:ee:9e:ca:
9e:68:9c:16:65:b1:75:ec:19:83:35:a5:44:c3:c0:4e:b3:1f:
2c:70:34:2f:1e:40:bd:a8:7e:75:17:c7:f4:81:34:c5:c4:86:
82:37:4f:a8:a1:ee:4b:9f:94:fa:99:de:13:e8:f6:7e:1c:e2:
ee:82:b7:94:ed:cb:83:0b:f4:e1:cf:49:06:a3:38:65:76:4c:
c5:38:e7:74:d4:48:23:5b:08:04:90:3f:52:cc:47:79:22:ab:
f1:9e:52:9e:49:30:fb:f4:3d:12:fa:a0:90:56:c0:bc:f5:34:
0f:29:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:46 2026 by rpki-client