Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/UE4x2J_JjdAdXOITfo1JaB3GqZo.roa
File: UE4x2J_JjdAdXOITfo1JaB3GqZo.roa (raw, json)
Hash identifier: F8+2zT5bS88GS7Q+A9z996t58lNLXeHU3rrhcs+OftY=
Subject key identifier: 50:4E:31:D8:9F:C9:8D:D0:1D:5C:E2:13:7E:8D:49:68:1D:C6:A9:9A
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F80F6EE507C19A4C89E6664EB0F27703E
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/UE4x2J_JjdAdXOITfo1JaB3GqZo.roa
Signing time: Mon 20 Jul 2026 19:18:14 +0000
ROA not before: Mon 20 Jul 2026 19:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206938
IP address blocks: 2a07:4a00::/32 maxlen: 32
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:f6:ee:50:7c:19:a4:c8:9e:66:64:eb:0f:27:70:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 20 19:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=504e31d89fc98dd01d5ce2137e8d49681dc6a99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:5f:36:c2:d3:d1:e9:5e:3d:75:31:5d:e5:
29:20:0f:dd:d6:46:eb:e9:48:e6:6a:3d:d3:b1:8d:
ec:d1:02:f2:cd:14:10:b5:7d:06:cf:a4:26:45:2e:
e5:e6:36:64:d7:bb:ac:bb:77:da:07:2f:37:20:34:
b4:15:ab:dc:76:da:28:02:b1:fc:0a:0d:15:90:f6:
9b:57:6b:c5:9f:b7:73:bd:67:27:54:fe:e8:03:f5:
c0:5d:40:98:18:d6:c9:cb:d8:7a:4d:d6:98:fb:03:
44:bc:7a:49:cc:ef:8c:d9:2a:0c:0e:00:5c:fa:e6:
d8:b6:90:1b:9a:45:d5:97:c7:24:c6:5c:f3:19:ce:
74:84:34:f7:61:15:aa:11:38:fc:64:2a:eb:eb:c1:
28:16:3e:22:61:ae:e7:5e:f4:cb:95:a7:52:cd:f8:
25:a3:5e:f3:bd:58:d7:2b:0b:e8:36:95:5c:83:0f:
8e:c3:e7:62:ac:0c:10:d6:18:58:74:b3:16:c1:dc:
42:8d:5f:3c:81:02:6a:e6:33:c6:43:bd:5f:49:f2:
a6:78:34:8c:64:8c:8f:fe:96:31:b8:d8:f5:9a:8f:
b2:9b:b1:bd:6a:7f:09:5c:77:10:95:c4:9b:fd:54:
2d:6a:a5:2b:a0:d8:e7:17:75:f8:34:b6:06:88:c4:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4E:31:D8:9F:C9:8D:D0:1D:5C:E2:13:7E:8D:49:68:1D:C6:A9:9A
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/UE4x2J_JjdAdXOITfo1JaB3GqZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4a00::/32
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
34:98:7b:0b:8f:6e:1a:aa:8a:e5:14:21:79:ad:fd:e3:7f:70:
90:07:89:2e:0f:a4:20:a4:36:54:87:7c:a4:f7:6a:95:0d:21:
21:fd:71:50:4a:aa:d8:55:54:c9:5e:ec:bc:1f:bb:dc:bb:2e:
b9:b3:86:27:67:50:79:0a:70:82:8c:7b:09:75:b0:1f:0c:1b:
c1:6d:e5:e0:f2:f6:60:95:5e:bc:3d:f0:c6:06:91:3c:2f:4c:
fa:49:15:83:f2:be:53:47:a4:a8:7a:69:b0:88:17:b5:05:53:
e5:c0:d7:d1:f4:f6:f8:5f:04:58:a2:36:4b:94:2e:84:8d:ef:
ef:4e:6d:b2:9f:a1:3a:71:a8:00:0e:33:b4:4a:90:2b:c3:0c:
7d:0c:02:b6:28:90:52:f1:2f:a3:69:11:3e:25:4a:a7:fa:4f:
87:96:9d:4c:d7:99:39:3b:9e:35:f7:8b:54:9c:11:95:25:32:
12:7a:2b:0c:84:b3:b5:13:1a:47:c7:76:b6:65:7b:52:ff:ed:
f5:7d:77:b3:a1:df:50:74:fe:2b:ab:fb:79:77:90:4f:0e:01:
1f:4b:d4:0b:c2:d5:ae:f5:1a:3f:bd:ee:54:29:c5:1f:55:0e:
eb:1a:90:89:63:29:0f:a5:ed:b7:e1:b2:b2:a1:ea:60:56:3b:
8c:99:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:31 2026 by rpki-client