Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/UgRQ-S_2_jSMHR28Yfy4B7uMcDM.roa
File: UgRQ-S_2_jSMHR28Yfy4B7uMcDM.roa (raw, json)
Hash identifier: 2q1tfYfhbbmDrJeuTIKGf6ksnLxn1XENXGZ1v4ftHM8=
Subject key identifier: 52:04:50:F9:2F:F6:FE:34:8C:1D:1D:BC:61:FC:B8:07:BB:8C:70:33
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 01A06E2A983A0853A9F9AF060C91CDA0F58C
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/UgRQ-S_2_jSMHR28Yfy4B7uMcDM.roa
Signing time: Fri 04 Sep 2026 20:44:40 +0000
ROA not before: Fri 04 Sep 2026 20:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201407
IP address blocks: 2a11:5dc0:700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:2a:98:3a:08:53:a9:f9:af:06:0c:91:cd:a0:f5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Sep 4 20:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=520450f92ff6fe348c1d1dbc61fcb807bb8c7033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:e8:1d:72:c2:9a:fd:61:d7:ee:db:ca:d9:
c3:a9:f1:7b:67:56:b3:f9:4b:07:8e:7d:89:a8:8f:
63:5e:ab:0f:03:21:9a:f6:8a:bb:1d:d1:a8:69:b6:
d4:6b:80:b7:30:7d:fc:f8:33:77:33:7f:a9:5f:d5:
28:4a:60:e2:21:16:19:29:48:e8:fb:12:91:47:22:
96:af:4d:a2:0e:01:48:73:04:5a:f1:b4:fc:f4:5b:
e9:a8:9a:80:4d:9c:ad:e4:18:31:ae:63:64:36:e0:
e1:81:af:60:6a:ee:a2:6b:ee:c0:a7:0e:84:73:ac:
0d:d8:03:1b:bd:23:c6:d4:41:09:78:7a:87:0b:29:
77:2e:24:1d:7d:a5:9f:3c:26:9e:74:06:b2:98:79:
28:3a:00:d1:61:42:d2:f3:8c:e3:da:28:cf:6f:04:
85:96:58:97:f4:36:7f:b3:e1:13:d9:19:2a:51:47:
aa:68:38:30:28:b9:7f:02:52:17:2d:e1:f7:ce:8e:
c3:03:f5:f0:53:50:0a:af:b8:09:17:e9:1f:96:b9:
bf:6c:18:f9:b5:2c:0c:c1:f2:19:96:81:bd:ff:55:
cd:11:41:d4:b3:af:f9:ec:b9:9c:07:12:de:de:e9:
5c:91:e6:55:f9:a8:1d:8b:14:9a:2e:02:c3:6a:57:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:04:50:F9:2F:F6:FE:34:8C:1D:1D:BC:61:FC:B8:07:BB:8C:70:33
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/UgRQ-S_2_jSMHR28Yfy4B7uMcDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5dc0:700::/40
Signature Algorithm: sha256WithRSAEncryption
1d:bf:a6:9e:54:31:e2:99:c5:77:1b:da:29:fc:7e:ea:31:78:
fe:95:d1:0f:ce:5a:ea:30:3a:70:c2:5d:ff:ef:29:20:00:ba:
64:d8:e2:12:ba:19:c9:b5:52:27:2a:6c:91:67:af:69:f1:ea:
ea:5a:9d:76:c6:f5:aa:f4:22:5c:75:09:d2:91:b0:b6:c9:9c:
84:5a:3a:40:51:08:c4:92:43:20:00:c1:60:cf:ee:d7:5a:da:
89:50:b9:9c:18:48:33:40:fd:64:44:42:c7:80:df:d4:5b:c2:
05:cc:c6:29:cc:51:9e:73:ab:33:26:b9:4c:fc:fa:64:11:77:
95:e2:af:86:a3:00:56:94:0f:7b:e7:9e:07:c1:c1:02:55:23:
e4:f8:b2:04:83:e4:27:15:37:1a:2e:35:9c:85:63:56:17:b6:
c9:3a:26:e3:4d:f4:ac:d6:74:75:b2:51:e7:1c:10:fb:e0:e4:
68:f9:6d:ac:e4:af:53:6d:11:19:8c:e0:34:ff:1b:01:c3:f8:
cc:54:48:76:9a:34:1b:31:8a:a1:01:a1:9f:cc:bb:4a:b0:80:
c8:df:b6:db:d7:5e:9e:66:0c:45:f2:1f:6a:22:52:82:1d:00:
17:94:3d:57:a5:ae:7a:fb:d3:5b:50:1e:9b:b7:cb:e4:6e:c0:
11:f4:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:31 2026 by rpki-client