Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/UlGaSuDMau5ZGyrjkAMOcMezFCA.roa
File: UlGaSuDMau5ZGyrjkAMOcMezFCA.roa (raw, json)
Hash identifier: tIgBFjHC4RtnwcOFwi6pfQeXH5SQmjVlKc4uzuL0yKw=
Subject key identifier: 52:51:9A:4A:E0:CC:6A:EE:59:1B:2A:E3:90:03:0E:70:C7:B3:14:20
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A1A2D24029477E50F6A8B4527B7DA18253
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/UlGaSuDMau5ZGyrjkAMOcMezFCA.roa
Signing time: Tue 03 Nov 2026 19:10:50 +0000
ROA not before: Tue 03 Nov 2026 19:10:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f040::/29 maxlen: 29
2a0b:b480::/29 maxlen: 29
2a0e:d300::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a0f:e3c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:be40::/29 maxlen: 29
2a13:d0c0::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:d2:40:29:47:7e:50:f6:a8:b4:52:7b:7d:a1:82:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Nov 3 19:10:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52519a4ae0cc6aee591b2ae390030e70c7b31420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:6a:06:4a:69:3a:39:ad:43:bb:44:83:dd:
c3:87:46:3a:94:cb:4d:f2:2b:e4:75:43:e8:f1:ce:
8c:00:7f:44:c4:1d:98:ea:aa:45:0e:9d:cc:9e:de:
72:5a:aa:55:0e:61:9b:a2:c5:67:7d:e5:5f:4e:87:
6c:a7:d8:3c:58:94:26:c7:58:8c:f2:33:d2:77:a8:
7f:d0:bc:e7:a5:0f:ee:73:c3:d1:28:34:b7:e6:11:
64:e4:79:a8:af:c3:3b:a4:1e:d7:75:74:b6:8d:c8:
99:7e:c9:b3:70:5b:77:81:9a:2e:c8:26:6a:a6:95:
73:64:58:3d:89:e8:58:5c:0d:15:f3:08:04:b0:b0:
01:cd:ee:53:85:db:b7:28:ff:0d:b8:43:36:06:c3:
d8:ca:d0:13:83:22:e2:76:dc:07:fb:17:fc:dd:28:
7a:b7:55:0d:24:28:2c:2f:29:93:92:e4:0f:ef:2b:
5c:84:bf:64:b2:1f:06:99:4b:6c:ba:d7:ec:06:c0:
71:2d:e8:23:20:5d:59:c9:07:60:90:15:82:9b:b9:
d2:51:39:16:7d:4c:24:d4:12:87:6f:e5:76:f7:42:
a7:2c:c9:ea:21:8d:41:48:54:96:ce:2b:59:fc:05:
97:66:af:fb:df:ff:4f:b9:5f:de:03:f1:ec:c9:4d:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:51:9A:4A:E0:CC:6A:EE:59:1B:2A:E3:90:03:0E:70:C7:B3:14:20
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/UlGaSuDMau5ZGyrjkAMOcMezFCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f040::/29
2a0b:b480::/29
2a0e:d300::/29
2a0f:89c0::/29
2a0f:e3c0::/29
2a10:7ac0::/29
2a13:b740::/29
2a13:be40::/29
2a13:d0c0::/29
2a13:d1c0::/29
2a13:dd40::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
66:a2:ee:12:d5:35:cb:cc:c5:31:8a:ba:fb:3d:f5:01:45:7a:
b9:c0:56:b0:6d:b7:22:97:ee:e2:6e:27:61:89:59:8f:28:a2:
b2:84:f0:3a:5c:a6:a0:fa:19:65:00:0e:45:79:da:89:9f:41:
ad:13:54:02:82:43:ea:81:c2:55:11:75:c7:ce:06:8b:1e:d5:
38:de:e5:1e:c4:95:01:50:d5:b5:06:a2:8a:2d:9f:98:cc:ad:
38:0a:11:ab:02:ec:fe:72:5c:ad:71:92:ab:3d:cf:a6:37:af:
d8:04:8c:34:02:af:95:14:01:20:be:fa:f7:b6:08:b6:e3:65:
63:db:97:58:df:5c:15:ca:94:60:fc:ff:93:2d:cf:8b:75:4d:
af:6d:36:a2:8b:c2:7e:81:b0:89:92:a1:c6:b1:45:33:1d:ee:
85:3d:1f:93:c1:2e:cb:43:45:3e:a0:a0:c7:d2:e6:44:5b:78:
bb:ee:28:9d:19:13:ed:ea:43:7f:e7:ff:59:5a:cb:e0:a3:bf:
6f:12:a1:5f:2e:9e:49:95:06:b0:3e:10:49:7c:cb:5c:4b:8e:
0f:43:a5:56:07:19:db:25:c5:a8:f4:05:20:4b:67:b4:53:b7:
84:d9:3e:3a:e0:25:65:f0:21:6d:89:f9:91:ff:1a:49:87:6b:
98:41:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:50:07 2026 by rpki-client