Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UdW-SueWNgexE75K7w6JHwlbLos.roa
File: UdW-SueWNgexE75K7w6JHwlbLos.roa (raw, json)
Hash identifier: agbX2QNNm/SVOEPBgyGkonynnBnUjOIq00YwzaqSF5E=
Subject key identifier: 51:D5:BE:4A:E7:96:36:07:B1:13:BE:4A:EF:0E:89:1F:09:5B:2E:8B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0B564A74AB0FEE7967268F3BB5F183061
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UdW-SueWNgexE75K7w6JHwlbLos.roa
Signing time: Fri 18 Sep 2026 16:41:07 +0000
ROA not before: Fri 18 Sep 2026 16:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 189.12.54.0/24 maxlen: 24
189.31.211.0/24 maxlen: 24
191.217.173.0/24 maxlen: 24
191.219.30.0/24 maxlen: 24
191.222.248.0/21 maxlen: 24
200.102.186.0/24 maxlen: 24
200.181.92.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:64:a7:4a:b0:fe:e7:96:72:68:f3:bb:5f:18:30:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 18 16:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51d5be4ae7963607b113be4aef0e891f095b2e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:73:ec:8e:09:32:28:2e:4b:08:52:37:2a:
52:b7:8d:34:a3:3a:7b:cb:64:ab:02:f7:60:97:23:
c2:f5:13:37:bc:5a:82:ec:1d:a7:cb:c7:b5:a3:1b:
fc:01:f0:6b:92:89:4f:d2:4a:44:3f:65:09:03:34:
e5:4a:7c:9c:23:51:ce:2f:08:78:81:e0:ec:0d:4f:
88:e1:82:5a:34:5d:d3:14:37:ab:d9:06:e6:4c:12:
e7:a9:b2:65:c5:ec:66:6f:6c:ac:3f:aa:4c:5c:66:
dd:19:4a:2a:c0:4c:16:b7:d8:9e:c8:27:5c:1a:bc:
52:25:fe:62:67:89:7a:7b:75:66:ae:63:b9:9e:a6:
d4:8f:7d:1f:85:54:80:a5:a7:23:c0:0b:7d:2e:c8:
22:97:21:7f:a0:74:d6:94:37:c2:13:40:19:9b:a8:
d9:57:71:dd:d5:f2:3a:3a:b7:6a:ae:81:1f:71:ab:
f1:e5:17:61:4c:3c:b9:4d:d7:41:6a:0e:7b:d8:7d:
36:2b:05:44:76:4f:ad:03:01:4c:61:29:e3:c5:46:
c9:4b:84:c3:66:c2:6e:26:e5:a1:79:d2:78:dd:04:
81:25:72:f3:5f:5b:70:56:e3:3d:2b:94:57:e6:49:
6a:a4:ef:72:eb:37:18:88:8b:cf:79:1a:6f:40:bb:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:BE:4A:E7:96:36:07:B1:13:BE:4A:EF:0E:89:1F:09:5B:2E:8B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UdW-SueWNgexE75K7w6JHwlbLos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.54.0/24
189.31.211.0/24
191.217.173.0/24
191.219.30.0/24
191.222.248.0/21
200.102.186.0/24
200.181.92.0/24
201.11.224.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a8:8d:af:11:75:ad:f6:10:a3:35:4d:8a:6e:39:14:fa:10:
1a:2f:03:9a:47:eb:41:8d:c4:36:5e:98:27:7b:f0:9a:e0:80:
56:5f:57:bb:d7:69:a7:05:fd:9d:bf:7b:61:ec:1a:7a:30:cc:
36:6f:c1:8e:9b:ad:e9:ad:1f:f4:b8:a5:35:2d:10:0c:3a:52:
89:38:54:e7:3e:8a:e6:ba:e7:fc:b4:88:a4:d4:c8:c8:7b:b0:
42:dd:bd:a0:f1:e1:1d:c9:a8:9e:60:ae:dc:88:1b:89:fb:6b:
fd:a8:c7:be:7e:0e:d6:72:3d:a5:07:58:58:cb:ca:86:f4:dd:
d6:70:53:d1:49:ec:c6:05:02:af:3e:98:c0:7a:1d:4b:ab:0b:
79:35:ee:ee:33:a5:06:46:1c:86:37:8b:ea:3b:8c:4a:21:cb:
e0:16:93:9e:b7:03:1a:a7:8e:7a:04:54:c0:d2:cf:2b:1e:b6:
b5:0c:a3:f4:40:43:1f:f1:9f:6d:24:37:60:e2:eb:3b:48:fc:
af:6d:61:14:50:a3:81:87:ee:fd:02:9e:db:0d:4b:7e:53:18:
5d:49:ad:c1:e8:46:e6:b6:bf:62:0f:3c:f2:0e:15:3e:19:16:
ab:76:32:41:fb:e4:80:20:14:ef:b9:50:14:b0:68:6a:19:b2:
39:34:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:40 2026 by rpki-client