Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/ULnrH166iu8auXUOTQYLMVcuwPk.roa
File: ULnrH166iu8auXUOTQYLMVcuwPk.roa (raw, json)
Hash identifier: k9Mtj8q1pozOJYt/vho8lDs2BTdgqNsBWmKHtaEq8wQ=
Subject key identifier: 50:B9:EB:1F:5E:BA:8A:EF:1A:B9:75:0E:4D:06:0B:31:57:2E:C0:F9
Certificate issuer: /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial: 01A1976C16CD77026F9A587CABBC52FE1B16
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/ULnrH166iu8auXUOTQYLMVcuwPk.roa
Signing time: Sun 01 Nov 2026 14:03:25 +0000
ROA not before: Sun 01 Nov 2026 14:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 2.152.87.0/24 maxlen: 24
2a0e:e000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:6c:16:cd:77:02:6f:9a:58:7c:ab:bc:52:fe:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Validity
Not Before: Nov 1 14:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50b9eb1f5eba8aef1ab9750e4d060b31572ec0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:91:07:b9:f3:c9:b4:dd:4c:7b:6b:cb:97:
01:21:e5:0b:9c:34:16:0e:5f:06:5a:c9:31:4d:a8:
62:9e:ca:39:4b:1d:54:7b:98:e4:29:4b:bc:53:39:
b6:e7:06:d3:13:bd:46:a4:c9:25:29:3b:b3:e1:8a:
05:6f:15:40:e3:cb:c3:9c:6d:de:c6:70:b3:0d:47:
74:8f:5f:28:67:d7:17:a9:be:c3:07:c1:40:53:e4:
4e:cd:73:71:d2:a9:e1:60:6c:4b:21:cf:0d:a5:c0:
a8:d9:f0:42:0d:90:8e:65:81:27:9e:bd:cb:d7:51:
0d:50:31:5d:18:34:b0:25:36:4e:5c:da:57:3c:ae:
8d:7a:6b:50:16:ea:e5:af:bf:ab:50:24:a4:f0:f2:
90:1e:7e:d4:08:27:b7:59:3e:11:8f:55:ec:46:46:
cc:5e:ff:eb:c7:46:c0:46:b4:c4:30:8a:28:af:cd:
07:71:34:13:ee:a8:8c:97:28:5d:cc:2f:86:2b:f9:
54:e3:cc:9c:3e:df:8c:cf:cb:74:c7:8e:5e:72:81:
4e:b0:40:6a:5f:cf:0e:54:fe:88:22:f7:4d:5c:50:
13:fe:8b:82:d9:ee:f5:e8:05:ef:97:d3:b6:70:6b:
51:4e:e4:cd:ab:8c:e0:44:f6:6f:bc:70:62:2b:8a:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B9:EB:1F:5E:BA:8A:EF:1A:B9:75:0E:4D:06:0B:31:57:2E:C0:F9
X509v3 Authority Key Identifier:
keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/ULnrH166iu8auXUOTQYLMVcuwPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.87.0/24
IPv6:
2a0e:e000::/32
Signature Algorithm: sha256WithRSAEncryption
87:0d:96:7c:a5:f6:58:1a:b3:17:61:d4:97:89:e3:3a:26:73:
bf:7c:f3:cd:c6:2d:49:91:cf:f8:ee:45:63:9c:a7:d8:45:8d:
c8:23:a9:50:a9:e6:84:cd:42:78:32:a1:dd:75:a7:59:81:d8:
5d:55:80:86:b5:6d:48:01:4c:a0:39:75:04:de:3f:b7:cc:2f:
4c:3b:8c:fa:59:9a:ac:ed:f1:48:e7:51:eb:e5:ba:b9:bc:4c:
dc:8b:3f:50:e0:b2:95:28:48:4f:90:cd:3a:00:42:9f:2c:85:
23:34:3d:94:18:e0:b7:90:51:16:a7:ef:54:54:85:8d:0d:a6:
6e:44:dd:9f:8c:da:ed:0b:89:32:83:7f:bf:f5:75:f0:a6:f7:
85:b2:10:af:4c:e1:84:79:36:14:dd:bd:a1:29:79:b0:67:80:
74:d9:6a:3e:94:3d:53:0b:fd:0e:c7:93:fc:2a:ca:b6:fe:00:
21:39:df:27:d4:7a:0c:e8:e1:31:69:0b:9d:cd:b1:4c:d5:5a:
f9:d1:2f:0a:b4:24:46:2c:18:f4:a0:6d:b0:cb:32:49:27:1e:
a6:04:48:53:00:95:fe:30:b7:0f:52:89:c5:0f:b8:97:c0:11:
ce:ec:da:a2:3b:e3:ac:61:15:ff:6e:1d:27:5a:f0:26:03:5c:
1f:c5:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:15:34 2026 by rpki-client