Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/UPPv-d05KLxtS4t0vBV_WgGiCRc.roa
File: UPPv-d05KLxtS4t0vBV_WgGiCRc.roa (raw, json)
Hash identifier: gDvcPLVEDvmXuVVyEbVZE7xY3E+m8q0jOR+2dZVBJu0=
Subject key identifier: 50:F3:EF:F9:DD:39:28:BC:6D:4B:8B:74:BC:15:7F:5A:01:A2:09:17
Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial: 019C8F51784FE86BC0406E6F2520165DA6A6
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/UPPv-d05KLxtS4t0vBV_WgGiCRc.roa
Signing time: Tue 24 Feb 2026 11:03:26 +0000
ROA not before: Tue 24 Feb 2026 11:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50107
IP address blocks: 45.66.24.0/22 maxlen: 22
45.66.25.0/24 maxlen: 24
45.66.26.0/24 maxlen: 24
2a09:6140::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:51:78:4f:e8:6b:c0:40:6e:6f:25:20:16:5d:a6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Validity
Not Before: Feb 24 11:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50f3eff9dd3928bc6d4b8b74bc157f5a01a20917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:c2:23:dd:9b:f9:d0:04:66:e2:04:54:d6:
6b:58:4f:7b:3c:d2:c8:2a:9a:a9:43:e1:f4:19:88:
a7:74:4b:28:0e:53:c3:7d:f0:4d:d8:68:cd:a3:4c:
38:ab:21:09:c0:63:df:5c:43:47:91:f9:b8:de:3f:
a5:47:c5:6a:9f:af:2d:6e:ed:d0:4b:4f:e5:0b:2c:
36:28:a7:56:84:03:7a:ed:fb:36:9b:85:2b:de:d3:
86:21:73:5f:be:7f:58:59:9d:15:2a:85:4e:9a:03:
d0:13:ad:c9:97:d8:1b:2e:35:e8:92:f5:57:0a:43:
fc:ba:1e:97:49:d9:b3:c7:cd:04:1d:f2:46:47:f3:
e8:a8:5c:30:9d:bb:b1:bd:91:a9:07:a2:6f:dc:52:
b4:8b:45:a8:57:33:6a:2d:93:21:51:dc:c3:6e:78:
77:a3:84:c2:20:b4:e3:d7:96:f7:d4:62:8f:35:50:
7c:2a:72:da:c4:92:87:c8:b7:8f:69:6f:b0:0a:19:
42:86:a0:f5:4a:68:70:69:06:3a:a3:84:05:5b:ed:
8f:63:5a:8b:77:06:92:0a:f9:09:75:ba:a1:05:6e:
6b:07:37:f3:f2:2b:72:7e:59:e9:54:63:b3:86:81:
7b:a0:36:27:ae:a8:0b:c3:a7:de:0d:97:7c:05:f8:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:EF:F9:DD:39:28:BC:6D:4B:8B:74:BC:15:7F:5A:01:A2:09:17
X509v3 Authority Key Identifier:
keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/UPPv-d05KLxtS4t0vBV_WgGiCRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.24.0/22
IPv6:
2a09:6140::/29
Signature Algorithm: sha256WithRSAEncryption
75:60:2e:7f:61:8c:6b:2a:d9:2e:cc:35:e8:05:06:97:5a:32:
d2:0b:8c:a1:44:86:0a:14:b8:86:6f:0c:7b:bf:92:dd:4b:5f:
03:4a:d4:7a:f8:31:8c:40:6f:18:99:b8:3e:a9:24:10:a9:56:
11:49:bc:9b:66:ec:e7:c2:ff:d0:4d:9d:0c:e0:ef:38:98:44:
eb:81:d0:e7:f8:cb:1e:94:b9:21:92:39:ca:5b:b4:d7:07:4a:
3a:73:29:f6:57:68:bb:57:8a:0c:88:df:2f:2d:fa:25:e3:3b:
31:2a:ce:b7:e0:36:95:00:d0:af:e5:df:88:9c:dc:25:f3:3d:
61:65:89:31:45:69:87:8d:22:8e:67:d5:3c:e8:02:33:a4:0e:
0f:3d:0e:c9:fc:66:bb:00:07:9a:35:92:be:bc:91:73:57:1b:
20:0a:d8:90:76:e0:72:dd:7b:c3:0e:e0:b5:8f:d6:55:30:c1:
9d:2e:31:f6:3c:9e:a5:ab:7c:1e:e8:5e:c2:0b:26:66:4a:0d:
6b:2a:14:a7:fd:ee:ae:d4:45:b3:d3:33:34:ee:fe:14:de:9c:
d6:9c:42:12:a1:e7:16:9d:af:68:22:f6:87:1a:40:be:35:1d:
a9:83:d1:a7:2e:d0:44:3e:f5:5e:53:b0:18:ef:80:69:e0:92:
93:4c:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:42 2026 by rpki-client