Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/UpQaalpvFrofiBvJgDzD5ykV4Es.roa
File: UpQaalpvFrofiBvJgDzD5ykV4Es.roa (raw, json)
Hash identifier: htOEHU0XKcxzfErxMNDU5sKxeT/b4gBnMaIIg36jS6Y=
Subject key identifier: 52:94:1A:6A:5A:6F:16:BA:1F:88:1B:C9:80:3C:C3:E7:29:15:E0:4B
Certificate issuer: /CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Certificate serial: 019F23684788C8E17A8DEEFAA8DAFCCAF6BD
Authority key identifier: CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/UpQaalpvFrofiBvJgDzD5ykV4Es.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47132
IP address blocks: 185.227.90.0/24 maxlen: 24
185.236.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:47:88:c8:e1:7a:8d:ee:fa:a8:da:fc:ca:f6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52941a6a5a6f16ba1f881bc9803cc3e72915e04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:c6:10:e3:d4:d3:dd:7d:a6:55:91:ce:0a:
68:82:bb:eb:89:03:6e:2a:c4:28:f8:eb:b6:a7:cb:
d9:e2:d1:6d:21:e2:35:98:60:1a:9c:ba:88:c8:bc:
4f:5f:ce:2d:b1:83:ac:de:f1:4e:4e:f0:cb:3f:58:
b4:1a:a4:18:fc:e7:ce:81:44:6c:0c:33:74:af:aa:
ca:ca:ea:4b:60:fd:df:46:bc:aa:d4:96:a5:4a:5c:
10:ac:64:6c:bc:d9:4f:92:e2:4f:fc:3a:e9:bc:dc:
1f:cd:36:c6:86:d0:46:46:ef:17:fe:7d:98:13:45:
3a:62:05:30:76:05:98:6a:4b:17:22:e6:b8:29:b2:
44:a9:9d:43:65:9b:f6:3c:65:5f:af:ab:db:19:c3:
0c:1d:3d:53:95:e9:c6:0b:95:44:d1:f4:13:08:86:
0b:4c:58:03:b8:bb:60:e3:b0:c0:e3:6c:ed:f9:1c:
23:30:fc:b0:2a:99:10:29:ef:4f:fb:39:f3:23:1f:
44:dc:7f:59:92:bb:5d:69:8c:b6:43:81:b6:2b:a9:
c1:51:43:94:bd:76:01:fd:16:b3:02:c9:2e:7f:2f:
a3:5b:01:9c:79:35:96:49:50:a2:a0:50:c9:41:8d:
8c:a8:2e:70:ae:96:76:d3:f7:e2:ae:51:7f:f1:1b:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:1A:6A:5A:6F:16:BA:1F:88:1B:C9:80:3C:C3:E7:29:15:E0:4B
X509v3 Authority Key Identifier:
keyid:CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/UpQaalpvFrofiBvJgDzD5ykV4Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.90.0/24
185.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c4:91:3f:dd:90:46:d1:b3:3e:56:32:5d:60:8c:63:43:fc:
13:c5:e6:5a:7e:a5:c0:c9:84:d8:59:c9:9a:e0:a7:9a:44:a1:
af:fe:56:26:ba:de:4c:15:02:b2:ba:3c:bf:b1:77:eb:99:95:
78:4d:16:c2:fb:21:01:96:f3:7e:fc:ac:c3:70:53:b4:6d:63:
8e:92:da:bc:75:a5:6b:a3:0e:15:8c:26:96:7c:98:8f:e7:bd:
0b:89:87:dc:50:b1:35:d0:89:27:af:4b:e8:7d:3e:a0:8a:74:
06:35:f4:fb:a0:19:b0:57:53:7e:8f:41:41:f4:46:e3:1b:3c:
e8:ec:b6:28:77:a7:34:7a:b9:98:ae:95:3b:ec:dd:8e:3d:62:
12:83:3d:5a:2f:61:22:76:f3:e7:16:af:26:97:ae:ff:b3:87:
28:a7:16:c8:dc:8f:90:1f:0f:6d:99:a2:85:63:31:19:ea:7f:
ae:88:b7:2c:b5:7e:62:fe:d4:d2:5d:90:e7:dc:6b:0f:43:40:
4c:d8:7b:84:79:0d:94:59:4a:10:b1:c5:74:5d:a6:8b:fa:b6:
86:9c:17:20:19:e7:fe:c5:0a:b8:10:e5:60:ac:0a:23:8e:73:
3d:5b:aa:d9:a1:5f:e1:3b:62:94:a7:da:fd:ff:cd:a8:30:11:
98:10:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:53 2026 by rpki-client