Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UBm5_YxA81v5Ymuqp7QEa09xsF8.roa
File: UBm5_YxA81v5Ymuqp7QEa09xsF8.roa (raw, json)
Hash identifier: bGmM6n0wh1GQkkNlx2ZeNnwiBAOakkdTzMBeBkE1Z9E=
Subject key identifier: 50:19:B9:FD:8C:40:F3:5B:F9:62:6B:AA:A7:B4:04:6B:4F:71:B0:5F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F056A8DF05CFA2DD57C53CF4C6AF25B0E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UBm5_YxA81v5Ymuqp7QEa09xsF8.roa
Signing time: Fri 26 Jun 2026 19:31:36 +0000
ROA not before: Fri 26 Jun 2026 19:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 212.189.86.0/23 maxlen: 24
212.189.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:6a:8d:f0:5c:fa:2d:d5:7c:53:cf:4c:6a:f2:5b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 26 19:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5019b9fd8c40f35bf9626baaa7b4046b4f71b05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:99:aa:79:de:ae:fc:bd:f5:e2:91:6e:d8:
d5:a1:28:c5:07:d8:32:06:9d:ce:8e:20:09:2c:47:
c5:69:a1:9f:8a:10:56:29:cf:b7:ed:a9:76:f3:bf:
ab:ad:17:1e:3d:76:02:e9:b0:5d:d9:4d:c4:b5:5d:
78:c7:2b:4e:23:1b:12:94:2b:a4:bd:b6:9e:64:35:
f3:3c:9e:46:cc:f0:ca:f9:67:5d:b2:04:ea:f7:06:
f5:17:db:a0:41:32:8d:55:44:fb:e8:24:77:69:dd:
75:69:e9:d3:26:00:45:28:3e:7c:a7:54:d8:ff:f1:
86:f7:a1:e0:5d:a8:b3:6f:c8:8f:81:37:d0:20:3d:
a3:d0:af:ad:1d:c5:46:9b:62:bb:07:2a:3f:5a:c9:
59:fa:13:b8:97:53:84:c4:aa:9e:cc:46:cc:73:eb:
fb:10:1d:5e:c4:92:8b:2b:b8:2b:82:31:f3:8e:ee:
8e:80:a6:e5:36:28:5d:ed:4d:7a:ed:f2:97:79:f9:
f4:b4:0b:87:97:7e:e9:6d:41:3a:80:df:5b:28:79:
17:48:a8:a6:f3:0c:ca:a2:3e:2a:47:3b:f9:55:a5:
a4:3e:07:0b:b7:e2:67:03:2d:ec:9b:45:ec:f1:10:
1a:f9:a6:1f:3e:59:4f:fc:77:47:c2:73:e5:4e:a7:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:19:B9:FD:8C:40:F3:5B:F9:62:6B:AA:A7:B4:04:6B:4F:71:B0:5F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UBm5_YxA81v5Ymuqp7QEa09xsF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.86.0/23
212.189.92.0/23
Signature Algorithm: sha256WithRSAEncryption
23:18:73:38:a2:02:fa:6d:1d:ef:77:39:e6:f7:dd:ae:67:b6:
77:b0:6f:ce:b0:75:ae:2d:8b:bf:db:bf:d6:10:f9:c1:18:fe:
cb:dc:6d:73:6e:4b:be:ac:47:39:92:46:0d:7c:37:6e:d1:a7:
ef:86:0f:2f:2a:d3:5d:38:80:ad:95:81:df:46:e4:ef:cb:ef:
e4:09:96:6b:e7:f4:ff:25:9c:ca:d1:b3:fc:54:d1:48:1e:0c:
56:75:ca:da:46:e9:c2:33:8a:c7:0f:03:9c:08:9c:cf:e8:b0:
8e:57:55:f2:e6:57:d5:5b:5c:65:4d:93:18:98:fd:9f:6c:24:
6e:cd:ff:2c:2d:68:64:bf:93:17:54:ca:1e:4f:be:01:b7:13:
ee:91:72:8f:35:51:56:eb:0c:d6:aa:48:b4:e0:8e:e1:98:6c:
87:d2:45:ce:29:5a:9b:c8:7e:18:54:a6:6b:3a:97:22:9d:2c:
3d:59:91:47:8a:22:48:61:94:c7:c5:6a:47:fb:96:bc:29:b4:
64:00:44:c6:b5:85:fb:9f:68:65:9e:7c:e7:ea:a0:b7:15:4b:
55:f6:5f:26:07:16:c4:5d:45:e5:92:b1:b5:e8:f8:3c:e3:0e:
65:20:f4:4d:9e:a7:01:6b:2e:5b:84:27:49:1c:7e:77:7b:3e:
59:38:1f:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8Fao3wXPot1XxTz0xq8lsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNjI2MTkzMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDE5YjlmZDhjNDBmMzViZjk2MjZiYWFhN2I0MDQ2YjRmNzFiMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriyZqnnervy99eKRbtjVoSjFB9gy
Bp3OjiAJLEfFaaGfihBWKc+37al287+rrRcePXYC6bBd2U3EtV14xytOIxsSlCuk
vbaeZDXzPJ5GzPDK+WddsgTq9wb1F9ugQTKNVUT76CR3ad11aenTJgBFKD58p1TY
//GG96HgXaizb8iPgTfQID2j0K+tHcVGm2K7Byo/WslZ+hO4l1OExKqezEbMc+v7
EB1exJKLK7grgjHzju6OgKblNihd7U167fKXefn0tAuHl37pbUE6gN9bKHkXSKim
8wzKoj4qRzv5VaWkPgcLt+JnAy3sm0Xs8RAa+aYfPllP/HdHwnPlTqcIpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFAZuf2MQPNb+WJrqqe0BGtPcbBfMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvVUJtNV9ZeEE4MXY1WW11cXA3UUVhMDl4c0Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1L1WAwQB
1L1cMA0GCSqGSIb3DQEBCwUAA4IBAQAjGHM4ogL6bR3vdznm992uZ7Z3sG/OsHWu
LYu/27/WEPnBGP7L3G1zbku+rEc5kkYNfDdu0afvhg8vKtNdOICtlYHfRuTvy+/k
CZZr5/T/JZzK0bP8VNFIHgxWdcraRunCM4rHDwOcCJzP6LCOV1Xy5lfVW1xlTZMY
mP2fbCRuzf8sLWhkv5MXVMoeT74BtxPukXKPNVFW6wzWqki04I7hmGyH0kXOKVqb
yH4YVKZrOpcinSw9WZFHiiJIYZTHxWpH+5a8KbRkAETGtYX7n2hlnnzn6qC3FUtV
9l8mBxbEXUXlkrG16Pg84w5lIPRNnqcBay5bhCdJHH53ez5ZOB8G
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:26 2026 by rpki-client