Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/UfSYcax7hrnZsapdP8nX8CdA6ac.roa
File: UfSYcax7hrnZsapdP8nX8CdA6ac.roa (raw, json)
Hash identifier: HfQ6PLxHcu26WVTPLuKbtbJcFW7jFqcjCu8B7qggBio=
Subject key identifier: 51:F4:98:71:AC:7B:86:B9:D9:B1:AA:5D:3F:C9:D7:F0:27:40:E9:A7
Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial: 019CD914E4F7186C2B75EC1AF29BC8A2C754
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/UfSYcax7hrnZsapdP8nX8CdA6ac.roa
Signing time: Tue 10 Mar 2026 18:49:11 +0000
ROA not before: Tue 10 Mar 2026 18:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198611
IP address blocks: 185.212.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:14:e4:f7:18:6c:2b:75:ec:1a:f2:9b:c8:a2:c7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Validity
Not Before: Mar 10 18:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51f49871ac7b86b9d9b1aa5d3fc9d7f02740e9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:1b:1b:b1:1f:68:e5:ed:66:e8:90:e0:39:
68:1d:03:ba:c9:c9:56:40:37:16:41:a0:8a:11:da:
ea:6e:90:dc:e9:10:7c:c0:61:57:2c:f1:7d:df:0a:
c7:9a:c7:47:75:39:69:72:b5:89:29:b3:7a:42:29:
0a:7d:ef:01:66:28:4d:31:f8:4a:ea:3a:f2:ae:cd:
e7:1d:e3:89:ae:93:8f:9c:1f:af:3d:8d:4e:7b:b2:
17:8b:e5:5b:a6:d5:40:84:76:1e:3f:80:64:b4:27:
0a:53:66:4b:5f:0e:1e:59:36:23:a7:17:4e:9f:f6:
cc:00:05:f4:1a:83:30:5d:4e:32:e7:5b:3a:78:41:
91:8c:32:5b:70:e5:bd:3b:5e:a0:92:5e:4e:28:e4:
81:49:99:4f:d5:91:c2:ef:02:fe:d5:90:2d:f1:60:
29:52:17:06:3b:ab:36:74:4c:53:7e:05:32:eb:4f:
2c:fa:84:d7:ee:83:9c:3b:cd:09:ff:43:86:cf:99:
68:2d:32:53:15:9a:f6:32:22:a9:94:82:38:2d:f6:
91:de:8c:af:7d:da:92:fc:9c:1e:ca:ff:61:ae:4a:
d1:9c:fe:40:dc:73:97:1e:b1:c9:b0:ba:67:c3:ce:
08:f4:c9:54:40:fb:68:9d:15:d0:f8:7a:2a:48:4b:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F4:98:71:AC:7B:86:B9:D9:B1:AA:5D:3F:C9:D7:F0:27:40:E9:A7
X509v3 Authority Key Identifier:
keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/UfSYcax7hrnZsapdP8nX8CdA6ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.67.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2e:63:f0:fa:a9:0b:a7:f4:a1:d2:97:5a:89:42:4e:20:60:
ae:1f:2e:dd:70:62:92:c9:76:39:8e:52:d2:94:63:76:3a:74:
fa:02:f3:3a:87:90:be:44:46:35:08:de:0b:88:b4:4d:0f:eb:
69:50:39:ea:86:01:b7:e8:ee:a0:4b:59:0c:85:65:64:30:bf:
c4:ac:5f:77:96:7b:2f:1a:1c:11:c8:22:3b:1a:e7:03:18:b0:
bd:68:62:d9:63:2e:b3:d2:14:99:7a:58:20:af:a1:b3:b9:ff:
b2:ac:9f:94:44:02:2a:d5:e5:24:6f:05:2a:99:16:d5:13:b4:
90:10:55:71:22:b9:9c:8c:01:58:98:b8:fd:79:3c:a9:bf:6f:
90:63:88:89:bb:82:eb:67:bd:16:94:ab:76:b3:9b:f1:7c:31:
95:57:43:4a:db:e9:ba:21:4a:5e:14:1b:e5:9c:3f:b5:15:5c:
71:70:a3:78:0a:dd:8a:c2:16:fc:93:fa:9a:20:fa:de:07:87:
fc:35:02:54:20:cb:ad:52:ac:77:8e:8a:63:2b:45:ba:cf:22:
17:0c:3d:ff:64:b3:fe:54:55:f9:80:a2:13:81:3d:48:d9:99:
1e:64:90:45:be:8e:cf:06:fb:24:17:41:aa:6d:30:d9:97:b3:
2b:ea:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:23 2026 by rpki-client