Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/UMFicQc5pR1BZjbSliFsmn9hVsQ.roa
File: UMFicQc5pR1BZjbSliFsmn9hVsQ.roa (raw, json)
Hash identifier: J5/XGYpI2q8qdb/0SuhhGpJUPu+HCV/urhJXWQ6uRoM=
Subject key identifier: 50:C1:62:71:07:39:A5:1D:41:66:36:D2:96:21:6C:9A:7F:61:56:C4
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 019D4AA4C5FA5E7D34BB6F4C932BE641DB1B
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/UMFicQc5pR1BZjbSliFsmn9hVsQ.roa
Signing time: Wed 01 Apr 2026 20:03:25 +0000
ROA not before: Wed 01 Apr 2026 20:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 2a13:df40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4a:a4:c5:fa:5e:7d:34:bb:6f:4c:93:2b:e6:41:db:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Apr 1 20:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50c162710739a51d416636d296216c9a7f6156c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:c0:3e:83:fc:ab:8f:71:d0:c4:96:b3:eb:
c7:83:ff:05:b1:d8:c1:ea:be:d2:fa:02:6b:0e:ef:
07:a4:02:8e:6b:b3:9f:42:a6:06:bb:90:64:f2:97:
60:97:00:b8:dd:5e:b6:8f:05:77:be:c0:a1:a2:08:
52:21:8b:ef:4c:b6:fe:90:29:bd:40:91:11:04:16:
f4:9b:01:4b:0e:15:43:09:26:e7:4d:dd:1f:eb:6d:
db:47:3c:c7:4e:b4:39:e7:7c:2f:ea:d8:3b:a9:bd:
f1:66:79:e6:ef:96:15:d7:9a:bc:c2:b4:ef:21:ef:
a2:11:ac:94:9b:15:45:7e:be:63:9c:e3:a9:84:84:
60:01:26:7b:9e:dc:85:e3:d4:6c:d3:14:6a:a5:08:
9a:c6:f0:2a:05:db:81:90:2f:f2:dd:27:26:21:77:
60:77:19:eb:58:80:ae:07:fd:2b:94:30:6c:b3:09:
72:d4:0d:1e:84:47:d8:22:4f:a7:5b:76:fd:e6:53:
ac:d6:44:57:62:3f:da:89:8a:27:65:0d:65:35:3c:
c9:a0:dc:45:c3:c5:86:12:47:00:1b:ae:d4:13:0b:
3d:0c:83:22:19:a0:d8:83:13:ef:ee:08:43:c2:71:
ab:75:aa:85:c0:2d:24:34:ad:90:4c:ae:4f:ae:54:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C1:62:71:07:39:A5:1D:41:66:36:D2:96:21:6C:9A:7F:61:56:C4
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/UMFicQc5pR1BZjbSliFsmn9hVsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df40::/29
Signature Algorithm: sha256WithRSAEncryption
99:4e:55:ee:9f:3b:bd:c9:15:a8:6d:43:60:9b:ad:bb:c3:2f:
07:01:47:22:23:16:07:ab:7e:90:0f:c8:7b:ab:83:86:a4:eb:
d4:23:ec:df:3c:45:d7:22:a4:8c:d9:26:95:0b:85:7b:09:d3:
6a:87:d9:a0:45:67:dc:45:c0:cb:bb:2d:12:62:fa:a5:1f:ed:
cd:44:27:e2:51:46:a7:79:e7:c5:99:d8:68:bb:e9:f1:3d:5b:
fc:65:6e:a4:a5:20:8d:ab:e7:c8:be:d7:c7:3d:0f:e1:75:07:
02:44:f7:b0:49:67:9f:f4:d1:6f:78:1c:70:1b:a6:55:4f:3b:
75:d8:53:e0:31:92:4a:a7:fe:a3:9b:e7:4d:42:e3:a3:c3:e3:
71:db:01:33:30:71:52:86:12:a3:4d:3a:83:6d:ed:51:b9:41:
c0:ae:ce:5a:99:65:e4:e3:eb:0a:1f:ba:ac:11:a0:05:9c:a1:
55:09:15:8a:a8:20:d6:c2:b7:a0:77:65:bc:55:57:5a:9c:96:
89:d3:1c:1e:62:cc:43:69:be:2f:dc:0b:b9:7e:07:1b:bc:32:
51:05:b2:3f:b8:99:d0:81:99:4e:97:93:ee:a7:4a:08:be:4b:
f6:9f:da:bc:75:11:9c:d5:4f:6a:d0:de:87:41:05:2c:ec:46:
33:f3:6d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:10 2026 by rpki-client