Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/UpgEGqcu1GJuaf10KzAyz7aDr-8.roa
File: UpgEGqcu1GJuaf10KzAyz7aDr-8.roa (raw, json)
Hash identifier: FafcYCab2MaXN/I3JHkDEUMkIjEyTMvrCthzIZARBZY=
Subject key identifier: 52:98:04:1A:A7:2E:D4:62:6E:69:FD:74:2B:30:32:CF:B6:83:AF:EF
Certificate issuer: /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial: 019B7910E7004A724514259BC8B2D06582D9
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/UpgEGqcu1GJuaf10KzAyz7aDr-8.roa
Signing time: Thu 01 Jan 2026 10:18:29 +0000
ROA not before: Thu 01 Jan 2026 10:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211128
IP address blocks: 5.181.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:e7:00:4a:72:45:14:25:9b:c8:b2:d0:65:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Validity
Not Before: Jan 1 10:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5298041aa72ed4626e69fd742b3032cfb683afef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:30:78:1f:3a:87:87:51:92:12:5c:68:64:
ba:43:0f:3b:fa:72:37:44:b4:79:43:da:c4:e7:32:
be:fa:0e:28:e7:e7:49:b6:11:cd:49:0e:a2:69:46:
dd:6d:44:30:63:00:61:e6:da:29:44:41:35:90:29:
01:88:9f:b7:48:6f:ed:79:3b:54:a2:fa:95:ce:e1:
ae:96:2b:d2:0e:25:d9:a0:39:fd:c3:ab:91:5d:2c:
ee:d7:a9:0b:81:90:61:f3:73:f0:11:45:0a:92:bc:
85:be:6b:65:5a:63:cf:72:cc:fe:ff:2e:81:30:36:
e8:45:9b:cd:93:9b:7e:c5:98:f8:1e:88:e8:89:78:
f4:87:d3:9a:e9:07:46:9a:6f:6b:6a:73:8c:d8:7a:
09:24:d4:89:d1:16:ef:f6:5d:40:4d:82:eb:af:4b:
5e:39:eb:04:cc:b8:59:b1:aa:c4:8b:03:b1:e7:97:
ab:05:f2:d6:0f:1c:8d:8f:3b:e4:fd:aa:96:6b:92:
54:7a:27:23:f4:86:59:35:8f:05:45:da:90:0a:05:
05:a6:eb:68:8e:ae:4d:19:0e:8d:b1:5b:49:32:d9:
92:48:1c:d9:4b:6e:ac:c6:23:87:6a:1d:ca:91:4d:
4c:2d:44:ef:bf:b7:83:5a:b8:e8:74:b4:98:67:ca:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:04:1A:A7:2E:D4:62:6E:69:FD:74:2B:30:32:CF:B6:83:AF:EF
X509v3 Authority Key Identifier:
keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/UpgEGqcu1GJuaf10KzAyz7aDr-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.55.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0d:6c:25:26:df:4a:86:c9:e2:0c:7e:a7:3e:da:f9:ef:ae:
f7:d0:80:b5:b7:9f:2e:f1:09:58:2f:7c:f5:50:e8:98:d4:ed:
5a:2b:38:61:85:ee:9c:49:17:62:a7:2f:db:59:2f:dd:f7:78:
fc:3f:15:c1:28:88:af:69:ae:22:03:14:ef:a4:69:da:de:39:
4f:0b:e1:aa:40:3e:26:23:64:d6:ac:80:bc:be:ec:a8:45:95:
4f:ee:bd:ec:7c:67:8b:5c:7e:64:e7:21:32:ab:d8:05:78:3d:
eb:3a:98:5c:d8:4c:48:f0:c2:82:37:cc:87:c7:fd:d0:11:60:
3b:62:12:22:1e:c7:5d:df:d8:17:6f:d9:e7:03:51:ca:bd:aa:
10:df:67:6f:a7:21:68:49:2c:98:1a:46:49:18:28:5f:ed:1b:
d7:ec:a0:74:3c:61:ab:91:06:ed:93:0a:42:9b:8a:f0:db:3c:
7a:25:3b:ae:c9:9d:a0:92:7b:b1:a6:16:cc:d5:a2:e7:45:c0:
27:26:f7:55:2b:d9:c5:90:a3:23:d6:c1:58:1a:f8:c4:23:58:
b4:e3:b4:d7:11:a5:2a:09:e9:e8:cf:55:a5:82:cb:6e:ea:65:
0f:7d:ba:50:76:63:49:25:98:1f:8d:5c:7c:ec:c4:42:47:b8:
36:11:d4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:29:52 2026 by rpki-client