Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Ub1rQMr9zwI6DdqFy3I1JiIVr2w.roa
File: Ub1rQMr9zwI6DdqFy3I1JiIVr2w.roa (raw, json)
Hash identifier: 6R77MD4vli/6LB5h9gS9Gn1L0gGY3Z1V5wepOXOC+R0=
Subject key identifier: 51:BD:6B:40:CA:FD:CF:02:3A:0D:DA:85:CB:72:35:26:22:15:AF:6C
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019C280FDDE57241D2DE9A535BDEE9990B4A
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Ub1rQMr9zwI6DdqFy3I1JiIVr2w.roa
Signing time: Wed 04 Feb 2026 09:50:54 +0000
ROA not before: Wed 04 Feb 2026 09:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212087
IP address blocks: 84.232.22.0/24 maxlen: 24
84.232.114.0/24 maxlen: 24
84.232.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:0f:dd:e5:72:41:d2:de:9a:53:5b:de:e9:99:0b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Feb 4 09:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51bd6b40cafdcf023a0dda85cb7235262215af6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:66:72:38:2f:20:d9:cd:f5:40:98:20:3c:
c3:a2:b3:7f:ab:31:9b:3f:38:ec:6b:b6:d9:55:bf:
9d:f7:62:b4:f7:b4:6c:4f:17:0a:30:54:ed:b5:b7:
36:6c:7b:d2:1b:8e:c7:18:c1:b6:ad:6c:a4:d2:82:
58:7c:33:56:da:53:70:9f:4d:1b:8b:de:61:96:e5:
e9:01:5a:9f:08:94:ff:ce:3d:b7:1b:b2:33:ff:6a:
97:1e:ce:8e:bc:f6:4d:32:7d:a0:af:9c:8e:15:b0:
de:d7:ba:84:0e:25:8a:a0:c6:02:54:83:ec:6e:c9:
0b:35:93:62:80:e1:0f:3c:24:f1:f7:8b:27:6c:89:
76:12:25:ae:26:9d:f4:37:0c:bd:5f:a4:5e:ba:7f:
fc:2c:a4:9e:10:48:6c:b8:7f:da:75:3a:8f:6b:0b:
86:55:b2:9f:fb:de:e0:ef:fa:59:ab:b6:71:0e:e0:
61:e4:38:a6:0d:d9:8d:75:76:47:1c:a5:b5:eb:f9:
a1:36:2a:c2:43:56:c8:6b:02:57:b0:34:7a:10:30:
94:47:ee:42:11:e6:3b:3e:32:09:76:d0:9f:3c:c4:
6a:75:e4:3b:09:e5:8b:01:a2:65:85:a3:21:56:c1:
eb:b5:c1:7d:92:c3:a3:46:3d:2c:f9:3c:f3:e5:0e:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BD:6B:40:CA:FD:CF:02:3A:0D:DA:85:CB:72:35:26:22:15:AF:6C
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Ub1rQMr9zwI6DdqFy3I1JiIVr2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.22.0/24
84.232.114.0/24
84.232.121.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a9:a5:9f:82:a4:b4:98:44:f2:8e:16:ff:44:c5:c7:20:30:
b3:fc:35:ab:65:43:f2:1b:de:02:04:50:5f:7d:29:4b:1a:22:
6a:d1:a8:dd:b4:3b:e0:4d:9a:66:85:3d:ae:8f:4b:87:2d:1e:
19:d3:dc:63:91:83:79:16:72:c6:98:1f:4c:5f:1e:6c:b7:da:
c3:e6:22:80:1a:d2:30:b7:15:95:6e:de:fb:86:c7:cf:1c:23:
1f:a9:62:fd:30:37:05:d5:a7:f0:e5:cd:ce:3e:ce:2b:01:53:
08:d5:1f:d1:2c:f0:b6:31:c7:d0:7f:cb:7f:b1:07:7a:e2:ca:
55:f2:85:1c:e5:48:62:aa:a0:b0:b2:68:63:b6:0a:bb:4a:66:
d4:18:a1:c2:2c:ba:43:17:ae:b2:28:49:62:78:a7:06:d7:88:
28:66:97:23:da:bf:c1:43:f9:e0:00:d3:9c:5d:68:74:d3:75:
b9:48:c5:8a:ce:80:03:bc:05:25:6b:9b:0c:b0:cc:e6:b9:6e:
eb:17:82:84:b2:5e:50:ec:b1:cf:af:5d:94:fb:b4:49:0c:ec:
7b:b7:b7:b6:8e:60:26:31:38:ca:d7:0d:bc:01:f0:69:6c:91:
47:0f:44:fe:1c:c3:1e:07:f9:10:2d:0e:6c:83:f1:e6:d9:fc:
12:04:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:23:12 2026 by rpki-client