Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/UPqZ5GMoyjUOWC-VEQhweIzbWHM.roa
File: UPqZ5GMoyjUOWC-VEQhweIzbWHM.roa (raw, json)
Hash identifier: 0Zf0+oi042bc7WXpxDDrx9EBealEJOQT4p1hzEnRzww=
Subject key identifier: 50:FA:99:E4:63:28:CA:35:0E:58:2F:95:11:08:70:78:8C:DB:58:73
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 01A0AF32F3B9EF2BF5364A7F3B1EB404628F
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/UPqZ5GMoyjUOWC-VEQhweIzbWHM.roa
Signing time: Thu 17 Sep 2026 11:49:07 +0000
ROA not before: Thu 17 Sep 2026 11:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6823
IP address blocks: 37.202.48.0/21 maxlen: 21
37.202.48.0/24 maxlen: 24
37.202.49.0/24 maxlen: 24
37.202.50.0/24 maxlen: 24
37.202.51.0/24 maxlen: 24
37.202.52.0/24 maxlen: 24
37.202.53.0/24 maxlen: 24
37.202.54.0/24 maxlen: 24
37.202.55.0/24 maxlen: 24
95.133.138.0/24 maxlen: 24
178.251.40.0/21 maxlen: 21
178.251.40.0/24 maxlen: 24
178.251.41.0/24 maxlen: 24
178.251.42.0/24 maxlen: 24
178.251.43.0/24 maxlen: 24
178.251.44.0/24 maxlen: 24
178.251.45.0/24 maxlen: 24
178.251.46.0/24 maxlen: 24
178.251.47.0/24 maxlen: 24
2a01:6be0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:32:f3:b9:ef:2b:f5:36:4a:7f:3b:1e:b4:04:62:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Sep 17 11:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50fa99e46328ca350e582f95110870788cdb5873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:ff:30:60:e8:0b:93:c3:4c:43:03:42:e2:
01:19:3c:e0:e0:4c:7b:48:ed:a1:91:d6:63:32:04:
df:26:49:68:c4:b7:6d:53:cd:65:dc:63:38:ad:9c:
ea:04:8e:b5:fc:16:b9:62:c6:13:97:9e:8d:bb:45:
a3:fc:4f:33:5b:0b:06:41:f4:84:da:14:20:e0:42:
0f:86:54:48:72:b3:e9:4f:af:bc:9f:09:2e:91:28:
6f:3e:34:e9:f7:d8:76:5b:44:1b:9c:25:fd:ce:29:
87:39:23:56:f5:ff:63:c6:95:45:3d:5e:9b:d7:bc:
d2:6b:22:71:47:4b:bf:39:23:06:9f:d5:41:60:c1:
45:38:3a:52:0a:f2:a6:91:38:f9:8b:bf:b7:63:f6:
96:78:31:b2:80:09:d8:79:55:38:1b:8a:69:fe:1d:
93:3e:b1:89:bd:ed:71:64:20:31:f1:f0:41:ef:96:
8a:45:6c:80:76:4d:49:70:22:d4:1d:05:5f:cd:c1:
48:a0:11:9e:b3:4a:25:00:13:1c:84:54:7f:5e:ae:
89:98:a8:75:ba:e0:2b:d9:18:4b:b9:6d:5e:f8:88:
c4:de:b3:ea:24:2a:63:7d:b2:e7:38:8b:c0:67:5d:
dc:9f:c6:59:2f:58:4f:10:11:6f:17:c4:66:ce:84:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FA:99:E4:63:28:CA:35:0E:58:2F:95:11:08:70:78:8C:DB:58:73
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/UPqZ5GMoyjUOWC-VEQhweIzbWHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.48.0/21
95.133.138.0/24
178.251.40.0/21
IPv6:
2a01:6be0::/32
Signature Algorithm: sha256WithRSAEncryption
42:d6:c9:c7:84:15:6d:a8:fe:81:d8:4a:84:f6:c7:7d:5c:ce:
13:e5:08:8e:a9:af:f1:1e:11:e0:11:83:c0:2b:a7:79:58:52:
8f:b3:34:72:8e:1e:4f:40:cc:16:08:a9:34:02:1a:81:d0:42:
72:18:27:c7:f8:9e:10:29:78:0d:df:dc:81:27:f2:b6:dc:62:
ca:0e:04:a5:bf:f0:92:74:61:ca:7f:06:03:49:44:b0:b5:16:
37:5c:d5:bb:0e:68:8b:c9:23:7e:a8:53:c9:98:6c:7d:99:c6:
e0:bf:fc:5a:6d:33:c9:8b:f3:d2:24:1e:b4:c3:d2:8c:42:e9:
22:8c:b2:dc:dc:c8:ff:04:b8:19:8b:ab:90:71:76:75:e7:be:
fb:38:82:28:75:37:52:2b:71:35:41:01:37:44:fe:e8:42:cf:
3e:c1:94:85:64:c8:b8:fe:a5:1f:27:b8:0f:77:cb:2d:f4:f3:
af:d3:ec:27:c3:f7:4a:57:2c:d7:98:6f:cf:5e:0a:62:c9:ae:
38:b7:44:a4:c9:ce:01:78:cf:93:c4:52:ca:cb:47:d3:d6:f7:
62:40:88:29:99:18:4e:9b:11:57:c1:d0:6c:7d:44:02:c3:78:
0e:ca:d5:e0:19:4e:20:28:55:83:0e:46:88:d3:84:81:78:8a:
b2:be:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:29:47 2026 by rpki-client