Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/UG4gN9aA_f7YEAcfB1dO7NY5_ek.roa
File: UG4gN9aA_f7YEAcfB1dO7NY5_ek.roa (raw, json)
Hash identifier: nJyT2MQFpU6Fg7zPK7kL/FvpROU0th0KaXDPuCdaUZ0=
Subject key identifier: 50:6E:20:37:D6:80:FD:FE:D8:10:07:1F:07:57:4E:EC:D6:39:FD:E9
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019D8181CB0E22F68D597FDFCC9E137966AB
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/UG4gN9aA_f7YEAcfB1dO7NY5_ek.roa
Signing time: Sun 12 Apr 2026 11:44:20 +0000
ROA not before: Sun 12 Apr 2026 11:44:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 91.225.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:81:cb:0e:22:f6:8d:59:7f:df:cc:9e:13:79:66:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 12 11:44:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=506e2037d680fdfed810071f07574eecd639fde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:1d:90:b7:9e:f3:fc:77:9b:a8:90:67:50:
12:6a:b1:7f:43:fc:01:07:61:e8:21:51:58:c2:a3:
8f:ab:42:f0:2c:75:75:db:1d:fd:4e:9b:96:69:64:
59:06:90:0f:62:34:c3:57:f2:74:35:0c:b6:39:1c:
2f:32:e8:05:53:08:4d:51:e6:d8:3e:7f:a3:2d:f2:
61:63:8e:b3:04:bb:26:eb:50:e0:cc:10:97:00:2a:
68:20:cc:f7:12:d0:c3:e5:7f:b0:04:41:49:63:42:
8d:fb:2d:38:aa:4f:ee:3b:17:4f:11:c6:77:70:59:
52:73:47:a1:27:6b:55:a4:4b:ee:e0:59:14:ed:e4:
37:a6:5c:99:c1:9a:33:0b:58:3f:bf:87:fe:70:19:
36:e5:a7:8d:90:5a:85:fc:90:b9:23:7b:7f:16:58:
3f:e9:2a:8c:c9:0a:cf:21:ab:cc:00:cb:c0:51:18:
2a:df:ef:dd:ed:44:87:be:31:8c:fe:54:e7:ed:bd:
cf:55:e9:98:b5:ce:c2:08:10:13:9d:55:6c:05:42:
0d:63:56:cb:1b:56:07:5a:f5:6a:3f:7b:78:32:20:
e6:6d:4e:75:68:8f:d2:82:76:02:76:6a:33:4b:79:
59:99:43:d8:dd:54:9b:9d:52:b9:7a:8f:d7:dd:1b:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6E:20:37:D6:80:FD:FE:D8:10:07:1F:07:57:4E:EC:D6:39:FD:E9
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/UG4gN9aA_f7YEAcfB1dO7NY5_ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
Signature Algorithm: sha256WithRSAEncryption
62:98:8f:98:d4:89:04:20:a6:ef:6b:a0:b1:4b:cd:ea:25:06:
99:37:98:7b:b1:e4:e1:fa:5c:c1:a1:d1:0c:6f:a0:58:11:41:
5e:05:cb:64:55:2a:e3:e6:4e:f5:27:dd:c8:9b:bd:c1:ba:90:
2a:60:55:66:69:eb:11:60:cc:aa:ab:ff:f8:79:f0:1b:0b:6c:
46:a2:2b:70:b6:33:87:7d:f2:cc:1e:d6:6c:53:f1:4e:e4:cc:
2d:a1:37:3f:32:4c:6e:94:b4:5a:1a:7a:17:93:68:59:9b:15:
4d:9e:5a:3d:d5:fb:ec:c2:ac:bc:25:4f:eb:e5:57:70:6e:94:
25:56:53:45:70:17:4f:61:fd:5f:e1:a8:dd:c4:71:b2:e5:64:
05:ca:65:e8:07:66:4b:d0:ab:d8:cd:d7:f5:0c:a0:c7:40:67:
87:e4:07:2e:01:bf:17:31:45:ba:52:b2:b1:df:c1:8c:5e:fe:
34:c1:76:5f:72:c5:2b:fd:cc:b4:21:2d:40:5f:a0:09:8f:f2:
34:61:35:9f:f0:f5:ce:1e:d5:4e:53:30:9e:f1:00:22:2e:14:
e0:10:b3:8f:97:63:ea:99:ca:7a:05:49:51:cd:0e:2d:f7:c3:
0b:82:5c:b5:5a:0e:b4:04:37:4b:ea:3b:90:1a:22:0f:a3:85:
3e:a3:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:21 2026 by rpki-client