Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/XUpYfFZrRoK43748PbzY9S0Dkyo.roa
File: XUpYfFZrRoK43748PbzY9S0Dkyo.roa (raw, json)
Hash identifier: NiSR6nZpJTWkS62+fe5cepySCVa+LLm03NmZtpZig/I=
Subject key identifier: 5D:4A:58:7C:56:6B:46:82:B8:DF:BE:3C:3D:BC:D8:F5:2D:03:93:2A
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FA911A790F1422FB9DA834FF9A8685292
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/XUpYfFZrRoK43748PbzY9S0Dkyo.roa
Signing time: Tue 28 Jul 2026 14:12:14 +0000
ROA not before: Tue 28 Jul 2026 14:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 91.132.86.0/24 maxlen: 24
185.219.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:11:a7:90:f1:42:2f:b9:da:83:4f:f9:a8:68:52:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 28 14:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d4a587c566b4682b8dfbe3c3dbcd8f52d03932a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:dd:73:b3:ad:11:fc:8e:8c:35:c3:fd:60:
9c:0f:04:ec:18:4e:d7:aa:46:fd:f5:d1:c3:60:3f:
28:39:52:07:7f:f7:61:a1:ff:94:b1:1e:83:b3:dc:
a0:e4:1e:c2:1c:8a:b2:73:b7:dc:72:4b:90:99:b7:
e2:b6:7e:80:35:4e:6a:7c:93:5c:68:d5:4f:0d:35:
5a:b5:cc:f4:7d:ad:cc:fa:5b:fe:90:9f:04:be:3e:
0f:8d:c1:fd:20:75:87:ff:91:fe:85:df:64:54:20:
ee:96:7f:cf:84:96:28:69:e5:7b:b4:9e:ea:4d:b8:
be:bc:2d:27:57:05:ba:f5:27:71:6a:83:02:e2:f0:
c6:c7:c2:5e:43:52:a3:5a:de:25:12:1d:ec:45:25:
ef:3d:d0:48:24:31:37:c5:f0:de:67:7f:db:1f:fe:
c9:42:45:01:79:fc:cb:fa:a3:f9:f5:6d:57:19:0c:
3e:85:d3:67:2d:40:db:37:ec:bd:6b:e7:46:30:e5:
38:54:75:05:5e:a3:ff:b2:2e:81:24:29:72:bc:01:
80:54:d5:01:14:8b:ff:ea:34:96:28:e3:35:75:94:
f8:04:b1:67:88:4c:ef:76:fc:02:be:a2:22:76:9a:
e2:07:3a:71:32:92:0f:8c:25:57:35:c0:dd:16:23:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4A:58:7C:56:6B:46:82:B8:DF:BE:3C:3D:BC:D8:F5:2D:03:93:2A
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/XUpYfFZrRoK43748PbzY9S0Dkyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.86.0/24
185.219.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a2:3d:57:dc:8b:31:2c:fd:8a:2a:66:4d:e8:b9:c3:4f:a6:
c6:91:86:e7:63:cd:5c:ac:7f:aa:d7:78:49:94:01:ad:fb:5b:
ae:38:98:31:ce:64:92:1c:54:0d:a2:9b:b8:77:d4:c1:7b:e5:
ea:a8:38:e1:7e:9c:35:d7:48:0d:c1:67:42:56:de:72:42:3c:
67:30:9d:33:8f:88:83:8f:89:f3:06:98:e6:d5:6c:b2:59:83:
de:16:1f:bc:72:4f:e7:ec:ff:90:26:10:3a:86:ac:ec:dc:7c:
45:90:30:bd:4c:17:80:58:65:97:1a:ff:35:6a:86:1c:c7:12:
22:55:cb:04:f5:01:77:1a:c2:95:56:8a:86:fd:ed:0f:cb:8f:
6b:6a:24:91:29:29:e3:47:4a:d3:5f:d8:e1:b9:e0:88:df:d1:
74:12:5b:fa:24:38:dd:68:6f:d8:56:18:9c:43:c6:70:45:42:
f6:03:76:69:c4:18:1e:20:9e:c5:db:e9:9b:74:17:00:24:23:
ec:fb:8d:24:37:5d:40:3e:8f:20:bb:82:3d:fc:47:c4:41:75:
04:4c:01:22:f3:8c:dc:f9:93:a7:e4:eb:1b:6d:8f:2d:5a:7a:
81:36:65:35:f6:87:4d:2e:a0:f2:3f:24:a4:83:07:01:38:81:
cb:1f:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:07:36 2026 by rpki-client