Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/UeGdNC4U51ORsmr7bEC0_4tro5Q.roa
File: UeGdNC4U51ORsmr7bEC0_4tro5Q.roa (raw, json)
Hash identifier: AJVieY8jxr5EX1PgLZI54D+fgbYw+CCmG+HZJa/NVL8=
Subject key identifier: 51:E1:9D:34:2E:14:E7:53:91:B2:6A:FB:6C:40:B4:FF:8B:6B:A3:94
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 01A1A2261F91FC0144CE02DD4BFF3206848C
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/UeGdNC4U51ORsmr7bEC0_4tro5Q.roa
Signing time: Tue 03 Nov 2026 16:02:49 +0000
ROA not before: Tue 03 Nov 2026 16:02:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20568
IP address blocks: 45.88.204.0/22 maxlen: 22
45.88.204.0/24 maxlen: 24
45.88.206.0/24 maxlen: 24
45.88.207.0/24 maxlen: 24
91.144.100.0/24 maxlen: 24
2a03:9900:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:26:1f:91:fc:01:44:ce:02:dd:4b:ff:32:06:84:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Nov 3 16:02:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51e19d342e14e75391b26afb6c40b4ff8b6ba394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:4c:b7:9c:16:37:7c:1b:6b:02:66:8d:db:
18:db:df:c6:88:c4:af:7f:3f:16:c4:7d:7a:d3:9c:
47:29:5d:92:94:d1:5f:74:85:f7:c8:63:17:31:a1:
87:28:f5:59:d2:8e:a6:30:60:83:5f:42:5a:77:0e:
68:e5:38:3d:2b:1a:17:f0:17:4f:73:52:32:57:3e:
27:cd:6a:61:8b:f1:d2:62:f0:80:1e:67:35:ce:38:
27:50:87:da:a2:b1:86:e7:7b:17:3f:01:1a:ba:69:
7f:28:9d:b5:5c:5f:b4:ed:8a:4c:89:5b:5e:91:5d:
59:52:9c:2e:38:89:f8:7f:46:f4:64:91:2b:9f:02:
ec:7f:25:01:37:a7:75:89:b1:81:63:7d:cb:ba:31:
3f:8c:2c:b8:46:00:2c:fe:fc:d7:6b:f9:20:83:86:
5e:df:a0:d4:f1:bd:81:84:09:a5:3d:d4:ed:f7:67:
b7:8d:36:ee:15:48:bc:c2:6c:30:47:7f:13:54:f0:
56:a0:7b:a0:12:59:07:35:f6:bf:3d:86:10:c7:ac:
f5:3c:fd:e5:04:d4:91:2f:6e:c0:32:eb:7b:c5:fe:
88:3f:c9:21:70:0d:09:a0:c3:6f:5f:c1:4a:8e:7a:
3b:ec:80:8a:34:74:7b:52:31:d5:a8:45:7e:e8:45:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E1:9D:34:2E:14:E7:53:91:B2:6A:FB:6C:40:B4:FF:8B:6B:A3:94
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/UeGdNC4U51ORsmr7bEC0_4tro5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.204.0/22
91.144.100.0/24
IPv6:
2a03:9900:100::/48
Signature Algorithm: sha256WithRSAEncryption
12:39:3a:c0:b6:c7:46:81:a4:1d:27:f5:50:23:c8:b3:15:c8:
e5:67:58:9b:5d:dd:b2:1d:f5:54:d1:a3:d9:30:5f:d4:d7:0e:
4a:cd:4d:d3:b9:34:c8:19:7f:ad:b0:ca:70:c3:b6:1f:2b:46:
db:9b:fe:01:78:b3:2b:91:4d:90:bc:e7:d7:e8:4b:ca:52:c3:
e4:28:dd:18:53:dd:74:16:59:0b:c0:6b:7b:03:85:a3:be:23:
42:34:8d:dd:e4:a1:27:3b:83:f9:65:fc:fe:38:e0:9b:ca:52:
ac:cf:bd:96:28:92:69:b1:8b:3f:6f:06:47:46:96:b2:b4:d1:
1b:31:11:26:3b:60:bd:ea:40:3e:8d:87:6d:36:e3:83:52:82:
55:8e:a1:5a:d6:59:2f:1b:9c:71:1a:bf:00:f1:dc:f7:73:72:
d6:ea:61:0f:3a:ce:a3:ed:ad:46:cb:17:cb:73:9a:88:1b:37:
25:1b:eb:cd:bb:fd:76:fa:05:da:6e:43:77:12:2f:c6:9d:61:
6f:c4:c4:91:75:36:45:56:e2:7a:d7:dc:36:bb:bd:56:3e:f9:
b6:62:45:75:70:83:56:b2:cb:b9:3d:2b:79:91:2b:2a:29:88:
d0:ac:1b:98:67:b1:46:63:94:a3:6e:16:fa:2a:3e:ac:f7:4c:
5c:77:97:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:00:02 2026 by rpki-client