Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/UP4kl-EmIZxH1Z-NLyqGI7oa6OU.roa
File: UP4kl-EmIZxH1Z-NLyqGI7oa6OU.roa (raw, json)
Hash identifier: /jeZBslVeCHBlFYOjsNjjaIbsZdIjZMhsaodooGoKCM=
Subject key identifier: 50:FE:24:97:E1:26:21:9C:47:D5:9F:8D:2F:2A:86:23:BA:1A:E8:E5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A1B0035642373C59AD3E9BB739594BE43B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/UP4kl-EmIZxH1Z-NLyqGI7oa6OU.roa
Signing time: Fri 06 Nov 2026 08:39:30 +0000
ROA not before: Fri 06 Nov 2026 08:39:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52468
IP address blocks: 31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.10.107.0/24 maxlen: 24
45.130.160.0/24 maxlen: 24
45.130.161.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
46.29.28.0/24 maxlen: 24
153.51.248.0/24 maxlen: 24
153.51.249.0/24 maxlen: 24
153.51.250.0/24 maxlen: 24
153.51.251.0/24 maxlen: 24
153.51.252.0/24 maxlen: 24
153.51.253.0/24 maxlen: 24
153.51.254.0/24 maxlen: 24
153.51.255.0/24 maxlen: 24
181.41.147.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/24 maxlen: 24
201.77.53.0/24 maxlen: 24
217.76.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:03:56:42:37:3c:59:ad:3e:9b:b7:39:59:4b:e4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Nov 6 08:39:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50fe2497e126219c47d59f8d2f2a8623ba1ae8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:26:e4:8e:e5:20:5e:4e:5a:8f:11:17:cd:
f6:7c:76:9f:86:11:d0:73:9e:0b:c7:72:96:b8:69:
08:7c:4a:d6:f4:21:5e:ad:2b:27:32:b5:ab:67:4c:
41:82:9a:f1:75:3b:bb:70:66:52:8e:13:db:ed:37:
32:ff:26:7d:a6:ba:e9:80:b8:ee:31:86:a6:77:59:
97:98:db:29:68:fa:e8:0e:de:3e:4a:62:db:fa:ee:
09:6e:07:26:93:58:3c:d7:47:0e:74:fd:bf:05:b2:
d4:21:92:81:46:ff:c5:7b:93:06:97:62:a2:85:c0:
36:47:fb:a9:6d:d6:fd:92:de:50:42:0b:66:2c:5e:
8a:39:d7:b5:d7:ac:60:f6:ec:9d:4a:04:16:ee:c6:
22:eb:71:5e:dc:30:36:f2:6d:ef:ea:64:bf:66:9e:
40:61:6d:35:3c:b7:36:f5:48:46:44:c3:a0:91:da:
22:b1:4a:ac:89:e2:e2:d1:8e:71:d8:81:42:bf:20:
1c:ce:fb:14:5e:fe:ed:db:2b:16:c5:48:ee:f8:43:
3f:f5:11:6f:8f:29:89:91:dc:cc:83:23:72:97:94:
36:7c:04:75:5c:26:e8:fa:ad:d0:c7:e8:a4:07:55:
0f:fa:19:46:c3:27:b0:0b:09:6f:44:d3:99:9b:d1:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FE:24:97:E1:26:21:9C:47:D5:9F:8D:2F:2A:86:23:BA:1A:E8:E5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/UP4kl-EmIZxH1Z-NLyqGI7oa6OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/22
31.15.5.0-31.15.7.255
45.10.107.0/24
45.130.160.0/23
45.150.85.0/24
45.150.87.0/24
46.29.28.0/24
153.51.248.0/21
181.41.147.0/24
194.31.105.0/24
194.31.107.0/24
194.32.112.0/24
201.77.53.0/24
217.76.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:09:1b:a9:a2:06:20:90:e6:17:87:0b:b4:f9:61:cd:89:1e:
a6:1d:a2:b5:de:9a:9e:c8:a7:9f:8b:f9:78:d6:10:57:14:35:
ad:f1:9f:f7:92:67:8d:1e:f3:06:90:b3:06:14:a0:ad:3e:ca:
ff:87:0c:bf:c5:e6:8c:81:b4:89:c2:45:c3:76:a0:1a:02:f8:
66:37:50:4f:72:fe:3b:26:01:0d:d5:da:6d:e1:90:c5:47:0f:
3f:c4:52:16:49:88:f0:eb:63:83:2c:f3:a3:fc:f0:2d:29:c7:
ab:4e:80:55:6a:1f:ee:e0:50:d3:c8:17:03:12:d6:2f:12:d0:
00:cb:6c:87:11:f1:26:3b:d1:95:a6:ad:08:d0:2d:64:5f:19:
b3:ca:57:4c:27:53:93:5e:c2:ec:75:28:fc:92:04:b3:fa:9d:
ed:10:bb:61:79:ed:95:c4:a0:f8:87:a0:80:34:17:64:05:ca:
40:45:23:ba:d9:e2:e4:2e:f6:84:c2:0a:e8:b4:e7:fa:32:a9:
74:80:a4:38:a3:5a:f1:24:bc:94:7c:dc:ac:1d:23:d3:77:98:
15:5e:0d:9a:0d:59:b6:f6:3f:cc:7a:ba:79:ae:19:15:2f:d9:
ba:74:a6:3b:ae:7b:04:fa:b8:31:0f:ac:0f:4c:c3:e2:07:b2:
e6:50:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:41 2026 by rpki-client