Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/udoouQATCkEo0BVGOQfdgqKPUlc.roa
File: udoouQATCkEo0BVGOQfdgqKPUlc.roa (raw, json)
Hash identifier: 4yL6Nh/82ia13kLw2JOzRSWOYqiIzrXQLoySgz//Jo4=
Subject key identifier: B9:DA:28:B9:00:13:0A:41:28:D0:15:46:39:07:DD:82:A2:8F:52:57
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019F7F93B551B4D070FD28FBBFB0A32C562F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/udoouQATCkEo0BVGOQfdgqKPUlc.roa
Signing time: Mon 20 Jul 2026 12:50:14 +0000
ROA not before: Mon 20 Jul 2026 12:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 89.251.21.0/24 maxlen: 24
193.93.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:93:b5:51:b4:d0:70:fd:28:fb:bf:b0:a3:2c:56:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 20 12:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9da28b900130a4128d015463907dd82a28f5257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:4d:2d:3b:8a:b6:af:08:19:c4:ed:f2:52:
35:cc:4e:e3:f3:bd:92:b9:52:ca:a9:fd:ce:06:12:
a4:a7:23:b4:8e:5f:ac:0a:8a:9b:15:d5:c1:57:ff:
f3:91:b4:84:5e:d5:b1:c4:01:fb:3e:d2:34:dc:8f:
e9:ed:d1:43:58:bf:10:4c:da:a1:bb:74:65:54:2a:
e5:06:8e:9d:34:c6:b6:8b:d2:15:24:6c:cc:6a:b6:
1d:da:d8:04:39:a5:2b:90:22:fd:5d:fd:32:b5:d1:
bd:14:51:33:0d:f0:64:43:ce:f5:80:b3:c7:cf:b0:
89:56:31:81:2d:cb:e6:32:15:d1:ab:1b:af:0d:7a:
7f:57:63:96:e2:45:cf:f0:18:e6:4c:b5:a6:56:2b:
6e:25:e5:e9:64:6e:f8:d6:39:bf:5b:ff:f5:38:6f:
16:3e:4c:1a:1d:ed:d7:cb:fc:db:36:55:5c:42:00:
4e:1b:d0:5b:88:48:51:09:3f:41:09:b8:2e:19:0f:
bb:79:70:32:ec:ab:32:83:e5:1a:3f:80:2e:89:b0:
98:a3:ea:2c:46:00:0d:37:8e:55:c8:d4:8b:42:2b:
a5:e3:2e:2e:d8:9b:f5:5f:9a:b5:80:e9:ba:48:cf:
f0:2b:70:e8:e4:89:a0:0e:88:7e:44:39:ad:72:7d:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DA:28:B9:00:13:0A:41:28:D0:15:46:39:07:DD:82:A2:8F:52:57
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/udoouQATCkEo0BVGOQfdgqKPUlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.21.0/24
193.93.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:53:99:1a:c1:01:9e:07:3e:e6:b1:d7:6c:7f:a8:74:7d:ce:
7f:f7:38:60:e2:21:a0:a7:78:21:a9:f0:6c:d9:12:6c:33:df:
69:d4:29:00:ad:73:6b:85:c8:3b:1b:77:e7:29:31:dd:9e:52:
5f:49:3c:63:53:89:2b:21:7f:10:3d:a2:4c:e2:5a:01:f9:66:
ee:6b:e5:9b:cf:f9:87:16:10:1f:75:57:05:65:88:f4:85:6e:
7e:58:86:d4:cd:f4:70:30:e7:97:e0:34:5c:27:c1:c2:c9:24:
17:a3:56:86:f9:b8:43:01:83:a9:61:26:7e:77:36:00:db:49:
2c:83:09:20:31:e6:2e:bc:5f:26:41:ad:79:27:f8:01:70:c3:
ff:71:57:23:e6:f5:62:d3:66:35:f3:ea:b5:cb:3f:e4:3d:07:
c2:e8:d4:2b:7d:73:4c:a4:a6:5b:43:aa:38:a4:d0:4f:3c:ba:
64:da:7d:ab:b1:3e:c6:e4:28:6b:95:0f:40:f1:29:3a:62:45:
16:b9:16:b9:b7:79:fc:6a:3a:1d:81:74:ce:2d:7b:fe:e3:f3:
ab:94:7d:01:d3:2a:ab:4b:29:b9:22:e1:08:99:d2:c5:01:08:
0e:84:92:6a:d5:f9:d8:47:e1:52:de:d0:ab:5a:4c:e8:71:b2:
68:6e:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:10:11 2026 by rpki-client