Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UFLc2uR5dLSr9I_nW5VNhm550pA.roa
File: UFLc2uR5dLSr9I_nW5VNhm550pA.roa (raw, json)
Hash identifier: xkcfUUBYfB6xP25+y0pAXrePVtgWNOcUhqunv7GOkbY=
Subject key identifier: 50:52:DC:DA:E4:79:74:B4:AB:F4:8F:E7:5B:95:4D:86:6E:79:D2:90
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01A174C84B769F945B64A2FD5387CC062A92
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UFLc2uR5dLSr9I_nW5VNhm550pA.roa
Signing time: Sun 25 Oct 2026 20:37:25 +0000
ROA not before: Sun 25 Oct 2026 20:37:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218479
IP address blocks: 185.166.237.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:c8:4b:76:9f:94:5b:64:a2:fd:53:87:cc:06:2a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Oct 25 20:37:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5052dcdae47974b4abf48fe75b954d866e79d290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:df:24:de:34:88:c5:2e:b1:ab:e0:63:22:
be:51:6d:1a:f0:0c:de:5d:38:56:92:f3:0a:61:92:
07:87:29:26:20:96:56:b3:ef:02:d7:91:23:36:83:
94:2c:f4:54:f3:bf:2b:c1:a7:3a:e2:14:02:ec:d1:
6d:a4:13:d0:dd:da:66:75:8b:cb:fa:31:21:52:bc:
5f:5e:21:81:98:a0:21:17:df:ab:82:75:70:a0:74:
85:8c:6a:c2:61:15:e6:c6:40:bb:b3:d7:87:aa:ac:
09:80:2b:13:86:e0:71:50:40:5b:0f:e5:6a:21:f6:
19:96:52:35:67:8a:6c:52:60:32:3c:59:14:18:43:
62:38:ca:db:4e:82:04:61:28:2f:83:eb:39:c6:a5:
af:b7:5a:d0:c2:a8:dc:1e:23:67:6b:a9:df:fe:72:
ef:f9:29:f3:f6:21:64:09:64:1e:53:54:5a:f5:4d:
b9:a1:15:a4:03:21:f2:db:24:f8:e5:22:38:bf:18:
37:18:c3:5c:9c:c2:8b:e3:aa:9b:ba:20:05:6d:f0:
ac:56:2a:c6:ae:75:9e:b4:33:99:99:91:44:1b:74:
2a:67:ea:ae:0f:d0:95:72:db:bf:3f:47:36:bc:d2:
b5:2b:ec:68:ac:7d:11:17:92:9c:1e:08:d6:f9:c0:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:DC:DA:E4:79:74:B4:AB:F4:8F:E7:5B:95:4D:86:6E:79:D2:90
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UFLc2uR5dLSr9I_nW5VNhm550pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.237.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2b:08:df:f1:38:25:5d:46:c2:56:01:72:78:bf:6e:6c:01:
28:57:e6:cb:0f:f0:b9:35:4c:fe:45:27:7c:c6:d4:d9:46:1a:
68:8e:23:58:dd:ed:d5:da:dc:79:f5:16:21:e9:bd:8d:74:7a:
98:e5:17:68:82:7a:40:22:e7:2e:89:e0:2d:26:3d:26:d8:32:
84:5b:c3:e3:90:11:73:7e:6f:91:dc:64:cb:73:35:ab:8d:69:
80:cb:73:2c:b2:e3:4a:1e:8c:b2:bf:83:97:c7:89:ab:3b:69:
fe:3c:43:97:9e:bc:e8:50:af:bd:46:08:08:9c:83:f5:35:60:
e1:fd:47:ea:4d:df:63:b2:33:47:5a:70:08:75:3b:28:aa:be:
ec:c0:2c:4f:71:1b:a3:b9:51:bb:83:5a:43:88:ef:65:94:bb:
fc:b7:d8:38:91:35:6b:c7:c6:86:73:3a:8d:08:1b:fb:2f:77:
0a:3c:f4:e9:98:98:ba:55:59:83:ad:ff:e9:70:ca:2c:99:21:
ad:64:d9:4d:db:14:33:82:aa:00:2b:69:fd:ec:43:7d:b9:44:
95:01:bf:89:fd:a4:fc:97:82:bd:e5:92:95:c2:9d:92:05:26:
71:5a:50:5f:b3:42:a8:ce:4e:7e:2f:ce:de:40:cc:90:91:69:
76:57:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:54:06 2026 by rpki-client