Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/UOevWPpBrse5WT2caWjU9GZEo-g.roa
File: UOevWPpBrse5WT2caWjU9GZEo-g.roa (raw, json)
Hash identifier: 0LSPg8ENwaB9oJ0jBUlwQU/hrSIv4vEXTwXy9LETBpE=
Subject key identifier: 50:E7:AF:58:FA:41:AE:C7:B9:59:3D:9C:69:68:D4:F4:66:44:A3:E8
Certificate issuer: /CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Certificate serial: 019F854E61D7FA4F3C9007736BD4F9CB9931
Authority key identifier: 47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/UOevWPpBrse5WT2caWjU9GZEo-g.roa
Signing time: Tue 21 Jul 2026 15:32:14 +0000
ROA not before: Tue 21 Jul 2026 15:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.127.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:4e:61:d7:fa:4f:3c:90:07:73:6b:d4:f9:cb:99:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Validity
Not Before: Jul 21 15:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50e7af58fa41aec7b9593d9c6968d4f46644a3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:30:2a:54:dd:ae:3f:d2:7c:59:18:0a:ce:
eb:04:a0:70:71:ad:c1:20:e6:07:9c:bf:2c:14:bf:
65:44:ad:6a:6b:b5:22:ef:3f:a2:f7:ce:51:3d:ea:
f7:9e:d8:be:59:b9:48:5a:b0:9d:a2:4c:1b:4b:40:
23:fc:00:a8:50:06:55:22:18:7a:62:00:6e:ab:d7:
4f:33:da:f4:1e:be:28:32:54:69:e7:dd:3a:ec:47:
a2:80:ee:96:02:7a:d4:3d:6f:e2:9c:ee:6a:b2:9d:
80:ba:53:bf:ef:fd:88:b5:aa:9a:69:ee:0c:f1:1a:
93:d0:d6:78:11:fa:f2:37:40:a2:c6:13:41:68:cb:
13:ac:db:cc:2c:0c:8e:10:47:68:c0:f1:46:17:60:
e0:f3:0b:1f:af:01:45:1e:ea:4f:95:a4:89:8c:1d:
c2:34:55:cf:1c:13:73:4d:f1:41:56:5f:79:82:f8:
e3:ce:21:d4:c0:a4:1d:b5:25:0e:fb:35:9c:1d:37:
17:d5:10:78:87:df:3f:91:34:56:0f:50:c4:2e:8c:
fa:ba:88:1e:3f:67:51:18:98:31:e7:92:1d:4b:32:
c1:85:30:1d:cc:7e:74:ef:36:b4:2c:4f:17:71:7f:
0b:f3:10:3e:4a:a9:b6:18:be:fe:87:54:7a:3a:41:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E7:AF:58:FA:41:AE:C7:B9:59:3D:9C:69:68:D4:F4:66:44:A3:E8
X509v3 Authority Key Identifier:
keyid:47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/UOevWPpBrse5WT2caWjU9GZEo-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.153.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9f:41:3a:78:75:8e:5a:35:42:ad:96:64:23:69:5c:75:c8:
b9:73:7c:bc:65:af:f6:a0:e4:9d:42:b1:10:69:b0:23:16:f1:
70:ef:d0:73:f8:01:15:fb:8c:63:48:5c:98:03:02:b4:41:4b:
b2:87:dd:ad:0c:75:cc:ab:f6:74:db:28:25:0a:22:68:78:22:
62:97:63:8b:7c:2c:8f:bb:bd:2e:d0:1c:10:7f:27:fd:a7:0b:
f1:4d:ae:18:20:84:c1:a6:e7:f7:b3:9b:0b:da:af:18:4e:c4:
a5:f9:bb:76:02:72:2f:b3:8d:1c:48:89:0f:96:3c:c8:15:3b:
d6:a3:17:fb:d4:81:64:af:36:19:62:54:c1:dd:ab:e3:58:c1:
a7:0c:c7:66:7d:11:ac:f1:67:0b:0c:11:e0:14:41:71:fb:55:
43:35:81:f3:b2:2f:b5:de:78:37:1a:5f:36:1e:8f:2d:a3:cc:
28:7d:47:3b:9e:6a:36:98:bd:30:cd:6b:7f:7c:8e:ea:94:32:
ca:c2:e9:d3:ab:4a:82:81:9e:c5:87:91:23:87:aa:5f:b3:99:
42:4a:38:6f:0d:e6:31:a2:f6:d7:49:f8:e1:9d:bb:c3:6f:d3:
29:eb:ae:9e:fd:e5:73:d7:a0:5f:f1:a2:dc:d0:3b:f3:76:22:
87:c2:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:52 2026 by rpki-client