Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/u-LFevv9UmRW0SQ9R806-5YaMS0.roa
File: u-LFevv9UmRW0SQ9R806-5YaMS0.roa (raw, json)
Hash identifier: eOrmSu0BPBRQ+dOgFG1zJsbQ19Gh+xaI4FPX8VkZCr0=
Subject key identifier: BB:E2:C5:7A:FB:FD:52:64:56:D1:24:3D:47:CD:3A:FB:96:1A:31:2D
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01A08B60C22CEA592E5D1E0B3AD3CF2A936C
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/u-LFevv9UmRW0SQ9R806-5YaMS0.roa
Signing time: Thu 10 Sep 2026 12:52:49 +0000
ROA not before: Thu 10 Sep 2026 12:52:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204528
IP address blocks: 62.56.156.0/24 maxlen: 24
81.199.3.0/24 maxlen: 24
81.199.4.0/24 maxlen: 24
81.199.15.0/24 maxlen: 24
81.199.20.0/24 maxlen: 24
81.199.62.0/24 maxlen: 24
81.199.94.0/24 maxlen: 24
81.199.97.0/24 maxlen: 24
81.199.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:60:c2:2c:ea:59:2e:5d:1e:0b:3a:d3:cf:2a:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Sep 10 12:52:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbe2c57afbfd526456d1243d47cd3afb961a312d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:85:58:45:15:c8:f3:af:1d:8a:9c:e7:71:
7c:a3:9e:ca:31:c2:62:b7:8d:74:2a:17:84:48:9c:
bf:0f:5f:99:0e:be:6f:31:1d:9f:fe:61:17:ea:3f:
1d:d6:a9:d3:7f:3b:69:ec:16:f6:bc:ac:0b:da:a5:
89:f7:8c:e3:ba:26:0f:5f:83:61:1b:96:b6:0c:ef:
8f:aa:59:5e:b4:14:2d:ea:f5:1c:36:53:62:c7:d9:
7a:0d:ff:56:9d:67:60:a3:b2:30:61:c6:ef:03:95:
09:9e:8b:24:1e:21:9c:dd:d8:39:fa:e9:f4:44:b8:
5b:d3:4d:6b:80:70:91:e3:09:aa:ec:1d:7d:34:88:
5f:c6:b8:65:e8:e4:bf:ab:56:7a:f8:80:99:e2:4e:
22:56:92:f5:72:14:e6:1d:76:e5:b4:eb:2f:d1:20:
79:9b:a8:ba:8f:57:c4:6a:ce:03:bf:2a:74:77:0f:
7e:90:12:83:bc:c8:7b:d4:a8:80:df:14:77:38:15:
07:e9:1a:11:17:a3:96:ba:6d:cb:f7:e2:30:59:aa:
d4:f0:23:86:27:a0:07:52:40:57:1d:0d:a2:6e:df:
75:22:35:06:59:13:24:2f:52:17:8e:33:88:41:9f:
fe:c2:f5:5f:8c:00:ec:03:18:83:5f:cf:d9:9b:b9:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E2:C5:7A:FB:FD:52:64:56:D1:24:3D:47:CD:3A:FB:96:1A:31:2D
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/u-LFevv9UmRW0SQ9R806-5YaMS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.156.0/24
81.199.3.0-81.199.4.255
81.199.15.0/24
81.199.20.0/24
81.199.62.0/24
81.199.94.0/24
81.199.97.0/24
81.199.201.0/24
Signature Algorithm: sha256WithRSAEncryption
93:da:49:15:0d:07:bd:e3:ca:d4:6c:26:1e:eb:f7:24:76:9e:
80:7c:89:b6:9a:3a:61:64:8b:08:b4:5a:c4:28:b3:af:11:a8:
16:30:36:b9:04:85:bc:80:c6:ab:fa:27:fb:97:e4:f3:f6:88:
ba:bc:9a:e1:fd:5b:55:eb:3c:3c:6e:54:ba:20:f3:a4:17:01:
a9:54:ab:59:24:95:c2:09:3f:c3:d1:55:44:87:86:ba:51:e2:
77:6d:40:24:3e:a9:63:85:0a:b7:fa:07:9a:90:5e:fc:24:d7:
e7:c3:76:d6:85:80:59:56:c1:3f:d0:b4:e6:05:39:da:cc:fb:
ed:21:ff:86:d6:65:b4:23:3b:de:9c:48:2f:18:95:d1:09:ae:
df:6c:61:98:e8:1b:bc:f9:ee:c0:1b:3d:92:8c:7b:b6:ff:ab:
62:97:77:23:45:f6:6c:be:cc:51:fc:60:92:78:7d:f8:41:8d:
ab:b0:46:79:97:b7:0e:d3:c5:04:2f:01:a9:d6:0d:6f:a0:dd:
a9:59:cc:06:bd:a4:a2:da:77:d0:be:25:62:6a:b8:4e:3c:e7:
2a:e9:4a:74:13:ec:97:f0:80:a7:97:67:31:78:e9:6d:5d:2f:
c6:97:67:c5:d1:81:60:11:1b:53:51:27:35:1a:e2:09:8d:9e:
6e:bb:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:22:32 2026 by rpki-client