Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/UbZ2SPbY4okiTXM5AfdEnS10_Es.roa
File: UbZ2SPbY4okiTXM5AfdEnS10_Es.roa (raw, json)
Hash identifier: PXQQVoIm69bnLgyq/S5RdMXgtOcrtVDgQ2+xqsOy19A=
Subject key identifier: 51:B6:76:48:F6:D8:E2:89:22:4D:73:39:01:F7:44:9D:2D:74:FC:4B
Certificate issuer: /CN=b53f40894867bfb4ed5181017da80ea2bded2ae4
Certificate serial: 019F2369116460F02CC27B28B9127FBB042F
Authority key identifier: B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/UbZ2SPbY4okiTXM5AfdEnS10_Es.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210422
IP address blocks: 80.68.154.0/24 maxlen: 24
2a12:9f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:11:64:60:f0:2c:c2:7b:28:b9:12:7f:bb:04:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f40894867bfb4ed5181017da80ea2bded2ae4
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51b67648f6d8e289224d733901f7449d2d74fc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:66:47:f1:d7:bd:fa:43:57:57:4d:d2:d3:
43:28:90:4c:66:e6:ae:5a:87:fe:61:e3:5f:de:c1:
bd:29:2b:b9:d5:1b:e6:10:72:4c:3e:d9:5e:c9:64:
83:8a:40:24:84:50:95:05:7b:84:7f:44:e5:3f:37:
0c:25:54:c6:82:2c:62:1e:b2:48:fb:e9:5c:47:65:
23:1e:8d:9f:8e:f5:cb:c2:b1:fe:f5:dc:58:64:e8:
49:05:84:b6:e6:07:a5:29:46:6d:3a:86:02:db:66:
3b:41:c8:0a:f8:de:89:47:d4:2c:46:1b:bd:a8:00:
27:3e:de:f2:fc:6c:be:12:f6:97:9a:2a:65:f5:d1:
d3:23:2c:f5:9c:c1:63:75:b8:7d:c9:0e:fc:c7:3c:
e1:f1:c2:6a:62:39:d1:30:ff:e7:01:2b:b6:db:60:
01:8d:c7:ae:9c:ba:54:d1:b8:2a:79:47:6a:87:05:
2d:e1:ac:83:3a:51:79:17:1a:f9:ea:af:96:b5:61:
3b:8b:7d:ea:a0:1e:0f:b8:62:61:7a:d6:da:c4:f6:
f6:a3:6e:cf:c3:7b:47:99:2a:10:8b:38:26:d4:71:
a9:78:5d:7e:e5:2d:43:17:e8:e0:58:ee:91:bc:26:
c0:e8:88:1a:f2:b1:58:6b:46:ad:82:b7:d2:6f:40:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B6:76:48:F6:D8:E2:89:22:4D:73:39:01:F7:44:9D:2D:74:FC:4B
X509v3 Authority Key Identifier:
keyid:B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/UbZ2SPbY4okiTXM5AfdEnS10_Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.154.0/24
IPv6:
2a12:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
a3:5a:ac:5a:4f:1a:30:3c:95:b8:72:ef:ff:17:15:c8:c0:3f:
99:23:87:8b:a6:f7:ef:4f:92:90:d3:c9:88:66:ce:cc:34:e2:
ef:52:f3:2e:a0:be:46:e3:e8:b4:e7:25:da:94:b4:05:76:67:
73:6e:92:ea:8b:14:08:18:90:aa:ff:f5:8a:0e:87:df:80:f5:
5e:d6:d8:20:5b:6e:b4:d7:76:a0:75:a8:7e:44:11:26:3b:c5:
1a:19:7b:3e:a6:56:f9:5c:25:83:8a:5f:bc:02:44:f0:99:2c:
5b:18:04:b8:08:02:ca:f4:c0:b6:90:f3:83:70:b4:a8:b7:0a:
f2:01:3b:25:1c:8a:55:8c:05:c3:d3:35:9c:89:37:68:6a:da:
6c:d1:ee:b5:b3:0d:84:23:90:6b:80:54:71:00:b7:af:a4:2c:
96:c6:83:15:ee:72:4d:4f:db:a3:84:58:75:5e:0b:2c:64:6d:
3d:ea:a4:66:3d:ff:01:21:ea:89:28:18:d5:78:5d:f1:c2:89:
68:d1:00:89:09:ae:f3:94:41:45:e1:f6:d9:14:e5:d6:7f:d8:
69:cf:1f:ee:6e:b6:3f:fa:65:2e:7e:f8:b2:03:20:71:df:b6:
e5:70:71:b2:86:0e:fa:01:18:3b:6d:3b:f5:5c:1f:43:59:ee:
53:5f:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:16 2026 by rpki-client