Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/UT3BTEsmQB5V4NSsWg8g_OQUbzE.roa
File: UT3BTEsmQB5V4NSsWg8g_OQUbzE.roa (raw, json)
Hash identifier: +wuAS13aaUBlOAA1D8XkwMLecf7+8qgOe7OV3OgaNhc=
Subject key identifier: 51:3D:C1:4C:4B:26:40:1E:55:E0:D4:AC:5A:0F:20:FC:E4:14:6F:31
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F88BC5F06E178D38F1ED39131A5C6DF6B
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/UT3BTEsmQB5V4NSsWg8g_OQUbzE.roa
Signing time: Wed 22 Jul 2026 07:31:14 +0000
ROA not before: Wed 22 Jul 2026 07:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56097
IP address blocks: 85.92.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:bc:5f:06:e1:78:d3:8f:1e:d3:91:31:a5:c6:df:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 22 07:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=513dc14c4b26401e55e0d4ac5a0f20fce4146f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:5b:68:7a:b7:29:87:c0:87:12:f0:f6:65:
e4:ae:ed:76:22:fd:b5:9a:dd:32:26:ad:ad:e9:b1:
2e:3c:55:a8:46:e2:ed:6e:45:80:26:03:83:6b:5e:
04:91:67:88:b1:ab:c4:3f:89:7a:50:27:a5:49:c2:
93:1d:8e:0e:72:37:08:4d:8c:a9:02:87:83:a2:86:
c8:7e:32:5e:25:87:7a:4b:1d:c0:12:5d:ac:d0:a8:
f2:64:64:93:9d:ae:76:78:48:a1:01:0f:a2:d0:55:
6c:c0:77:fc:2d:b4:b7:d0:bc:07:65:48:69:d2:18:
88:cf:95:e0:95:94:d4:eb:98:e5:f9:18:c8:9c:19:
1a:2f:0d:56:04:df:fa:2c:b4:25:9d:72:41:68:2d:
51:6e:4e:cb:ac:f5:34:41:55:ae:cb:e0:43:8d:af:
a9:c3:e0:22:5f:21:a8:58:07:a1:ef:c9:0a:06:d8:
59:fe:64:7d:87:1c:6f:d4:2c:f5:17:f0:53:cb:ee:
9c:ef:ae:c8:d3:7b:35:93:1c:cd:9a:1d:05:32:36:
5a:0b:a4:98:c2:73:5e:7b:52:3e:fe:aa:a6:d0:c3:
1a:db:90:f2:b6:26:6b:c9:39:a3:28:0d:de:f0:b9:
44:ff:a3:53:78:a3:9f:e1:5c:1a:1a:c3:96:2a:ca:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:C1:4C:4B:26:40:1E:55:E0:D4:AC:5A:0F:20:FC:E4:14:6F:31
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/UT3BTEsmQB5V4NSsWg8g_OQUbzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:58:9d:77:ac:63:cc:16:b1:ef:9b:94:6b:ed:b7:7b:a6:f2:
01:67:59:91:df:27:c0:5f:36:85:45:72:07:2b:d6:2d:84:ca:
80:0f:39:0a:50:ac:b9:57:5b:d2:81:fd:69:64:30:20:77:d8:
13:3f:f8:1d:0d:1b:3e:d9:65:b2:22:22:68:6e:84:f0:5d:e6:
46:82:5c:1d:63:82:9a:86:cd:ad:6b:4b:7d:37:33:2c:c1:42:
c3:9e:0f:22:a6:c2:9e:29:0f:4f:54:48:10:b0:cd:9c:da:61:
bb:e9:39:9b:cd:55:15:80:64:d3:16:28:4b:67:94:6f:29:db:
55:93:48:28:8e:86:dc:66:83:e3:af:da:98:d1:98:e9:5f:0e:
d2:1a:98:ab:9f:02:f8:71:f9:7c:55:a7:63:64:c6:90:62:9d:
e6:f0:a8:ce:25:78:90:48:4b:df:9e:eb:63:73:87:7c:aa:b7:
50:44:b1:77:0b:7f:fe:ca:f4:0a:8f:47:62:e8:fb:f8:5d:10:
58:15:10:6c:11:a1:fe:1e:2a:3c:01:f0:61:8a:b2:f9:23:79:
5e:b2:5d:97:2f:a9:37:77:7f:79:60:36:de:57:a4:ec:c5:25:
bb:d7:38:52:7d:9a:0c:0e:2c:91:71:ea:13:40:b4:98:8e:a6:
08:05:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:42 2026 by rpki-client