Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/UP2Wk7sOC_pJ-r2D-fCXTCeDSaE.roa
File: UP2Wk7sOC_pJ-r2D-fCXTCeDSaE.roa (raw, json)
Hash identifier: ZCG1VWbK0Rc7KJ4YKyLYUpNJzUQV3wJoH1bAvG5hfNM=
Subject key identifier: 50:FD:96:93:BB:0E:0B:FA:49:FA:BD:83:F9:F0:97:4C:27:83:49:A1
Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial: 019F295377AAFBB26FF066BACD28A119046D
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/UP2Wk7sOC_pJ-r2D-fCXTCeDSaE.roa
Signing time: Fri 03 Jul 2026 18:52:43 +0000
ROA not before: Fri 03 Jul 2026 18:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51026
IP address blocks: 85.8.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:53:77:aa:fb:b2:6f:f0:66:ba:cd:28:a1:19:04:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Validity
Not Before: Jul 3 18:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50fd9693bb0e0bfa49fabd83f9f0974c278349a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:cf:29:46:da:4f:fe:10:69:18:44:7d:54:
8e:ad:a1:cc:17:6c:e4:33:89:d3:bb:91:b9:10:be:
3b:5f:c8:fa:75:59:dc:a1:e6:54:42:81:b6:84:63:
0f:80:2e:6c:0d:d7:70:a0:36:91:36:c4:06:41:5a:
08:38:5a:f1:99:b1:a8:84:eb:ce:95:fc:2f:c7:4e:
d8:a5:a1:44:79:f3:30:67:6a:4e:ef:50:b7:2e:2c:
01:e7:57:0d:4b:af:9b:80:3d:bb:df:4b:fe:29:b9:
60:7e:af:32:9c:e5:d1:08:ad:93:07:fd:d0:4a:8f:
c3:45:1d:cc:ea:cd:32:ee:20:c7:b7:65:15:e5:d5:
01:68:c4:f1:7f:21:96:83:92:0f:14:94:13:82:fe:
78:bb:f4:d7:ce:f7:4b:80:54:c2:b8:e8:84:16:a1:
54:2b:3d:8e:ce:5e:64:d7:d4:e9:2d:e8:8e:68:92:
15:30:d6:ba:ec:00:ee:d3:9c:c1:e3:ac:d8:c3:b5:
8d:c4:1f:aa:61:fb:a7:cf:9c:2e:4e:bc:21:a0:62:
3a:c8:e8:af:fa:df:63:94:62:0d:2b:4a:02:7e:9b:
d4:cc:01:43:3d:21:f4:99:88:bb:b1:37:96:28:ab:
f1:b6:4e:a1:58:1a:60:44:e6:a5:be:66:f0:29:d6:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FD:96:93:BB:0E:0B:FA:49:FA:BD:83:F9:F0:97:4C:27:83:49:A1
X509v3 Authority Key Identifier:
keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/UP2Wk7sOC_pJ-r2D-fCXTCeDSaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.230.0/24
Signature Algorithm: sha256WithRSAEncryption
15:dc:c9:0e:ac:e1:8b:aa:e7:8a:76:30:a8:21:3c:01:f0:63:
5f:8e:8a:2a:29:c8:96:c5:d7:2a:67:63:fc:26:d7:54:61:79:
d0:27:d3:bb:44:73:fe:bf:86:a1:7c:a6:b3:c8:1f:16:bc:32:
d8:72:2a:06:71:19:f4:00:10:02:13:0e:3d:3c:7d:ee:ac:75:
be:dd:db:e2:32:f3:bc:0b:b2:11:4a:a5:8a:41:20:ae:71:74:
7e:47:0b:3a:0c:b4:c6:4f:88:51:bc:90:df:36:f5:e3:2b:57:
ab:2f:6e:31:1d:b6:63:86:f0:73:3c:4d:fc:e1:d1:60:99:f6:
87:47:3d:21:91:e2:7a:49:66:4d:a1:f6:7d:7f:44:a3:42:d7:
c7:51:44:fc:02:95:a9:7a:ff:d5:0a:43:c4:29:6e:58:71:fa:
6f:61:d7:1f:5b:10:cf:c4:2b:39:e7:78:9c:04:80:7f:55:b9:
5b:e1:3a:60:38:84:48:99:3e:5a:13:a4:c0:9f:f6:af:ef:b4:
83:29:3e:03:36:b4:ad:8a:9a:98:da:9a:74:f2:4d:bd:00:e3:
d8:82:c2:60:e2:51:29:27:a1:e4:15:d8:80:ec:3f:00:21:ac:
27:96:ca:56:09:dc:b7:77:0c:d6:a4:b5:f5:b2:f2:c4:c6:e7:
75:2a:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:26 2026 by rpki-client