Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/UdkdeVYhwTzpcwHkoNvEUuMpazQ.roa
File: UdkdeVYhwTzpcwHkoNvEUuMpazQ.roa (raw, json)
Hash identifier: eDyrZayqrLgVtB6FmDplU9vweUILeJT/mHR1qcLq2hM=
Subject key identifier: 51:D9:1D:79:56:21:C1:3C:E9:73:01:E4:A0:DB:C4:52:E3:29:6B:34
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 019F277EB75CE3BDC7F08B59540CA1664FFC
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/UdkdeVYhwTzpcwHkoNvEUuMpazQ.roa
Signing time: Fri 03 Jul 2026 10:20:43 +0000
ROA not before: Fri 03 Jul 2026 10:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29555
IP address blocks: 81.91.188.0/24 maxlen: 24
176.64.0.0/24 maxlen: 24
176.64.1.0/24 maxlen: 24
176.64.2.0/24 maxlen: 24
176.64.3.0/24 maxlen: 24
176.64.4.0/24 maxlen: 24
176.64.5.0/24 maxlen: 24
176.64.6.0/24 maxlen: 24
176.64.7.0/24 maxlen: 24
176.64.8.0/24 maxlen: 24
176.64.9.0/24 maxlen: 24
176.64.10.0/24 maxlen: 24
176.64.11.0/24 maxlen: 24
176.64.12.0/24 maxlen: 24
176.64.13.0/24 maxlen: 24
176.64.14.0/24 maxlen: 24
176.64.15.0/24 maxlen: 24
176.64.16.0/24 maxlen: 24
176.64.17.0/24 maxlen: 24
176.64.18.0/24 maxlen: 24
176.64.19.0/24 maxlen: 24
176.64.20.0/24 maxlen: 24
176.64.21.0/24 maxlen: 24
176.64.22.0/24 maxlen: 24
176.64.23.0/24 maxlen: 24
176.64.24.0/24 maxlen: 24
176.64.25.0/24 maxlen: 24
176.64.26.0/24 maxlen: 24
176.64.27.0/24 maxlen: 24
176.64.28.0/24 maxlen: 24
176.64.29.0/24 maxlen: 24
176.64.30.0/24 maxlen: 24
176.64.31.0/24 maxlen: 24
176.64.32.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
176.64.100.0/24 maxlen: 24
176.64.101.0/24 maxlen: 24
176.64.102.0/24 maxlen: 24
176.64.103.0/24 maxlen: 24
176.64.104.0/24 maxlen: 24
176.64.105.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.69.0/24 maxlen: 24
212.96.74.0/24 maxlen: 24
212.96.75.0/24 maxlen: 24
212.96.76.0/24 maxlen: 24
212.96.79.0/24 maxlen: 24
212.96.80.0/24 maxlen: 24
212.96.81.0/24 maxlen: 24
212.96.82.0/24 maxlen: 24
212.96.84.0/24 maxlen: 24
212.96.86.0/24 maxlen: 24
212.96.87.0/24 maxlen: 24
212.96.88.0/24 maxlen: 24
212.96.89.0/24 maxlen: 24
212.96.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:7e:b7:5c:e3:bd:c7:f0:8b:59:54:0c:a1:66:4f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jul 3 10:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51d91d795621c13ce97301e4a0dbc452e3296b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:5a:95:78:87:64:87:bb:20:2e:89:f1:41:
3d:13:44:aa:a0:b0:84:f4:b3:6c:72:e2:85:17:64:
02:27:d0:63:d0:4d:47:eb:f7:ec:dc:fb:b0:c1:1b:
d6:7d:d6:8a:90:36:b1:7a:42:8c:70:23:73:02:8b:
87:a7:9e:05:9b:87:c7:76:53:bb:15:61:82:ff:7c:
ba:5b:fe:6e:e1:b4:15:dd:fa:e8:89:1e:24:6a:ba:
30:ca:33:e3:94:ea:7b:e7:37:4d:53:83:22:86:1d:
a3:05:f4:0c:10:ad:51:84:d5:be:3c:9d:46:c4:7f:
4e:8c:96:24:da:f2:fd:71:e6:5b:e2:5d:26:2e:66:
d8:e8:7c:13:e6:b4:60:31:36:0d:0b:24:f6:35:6c:
7f:19:a3:82:6b:4d:73:77:44:37:22:a7:e1:db:bd:
78:f5:61:ee:b5:0b:9a:5c:d4:45:e6:c8:6b:d6:d4:
b8:d4:25:af:d6:d9:92:56:c7:a4:e0:4c:58:c0:eb:
19:27:76:d3:76:40:a9:96:1e:e8:dd:29:c0:0d:f4:
55:4d:c6:1a:c8:97:6c:d8:1c:3b:2f:23:52:77:44:
72:ea:06:f2:36:98:6e:50:d3:13:8f:21:22:6a:33:
14:66:06:ec:c0:21:0c:72:d9:a0:bb:be:20:2c:71:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D9:1D:79:56:21:C1:3C:E9:73:01:E4:A0:DB:C4:52:E3:29:6B:34
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/UdkdeVYhwTzpcwHkoNvEUuMpazQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.188.0/24
176.64.0.0-176.64.35.255
176.64.100.0-176.64.105.255
212.96.66.0/24
212.96.69.0/24
212.96.74.0-212.96.76.255
212.96.79.0-212.96.82.255
212.96.84.0/24
212.96.86.0-212.96.89.255
212.96.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:19:f2:41:d3:a5:d9:c9:ad:f5:d3:3b:fd:93:a5:b4:3e:56:
ec:6a:83:08:4e:e4:ce:99:65:f9:cc:7f:2c:6e:1c:56:65:32:
94:d8:ed:cc:23:05:43:2b:fa:f0:13:48:b3:a4:1e:34:c6:35:
09:2a:2e:aa:16:af:bb:15:7e:1f:38:7d:82:8f:11:0d:cd:03:
3f:ac:49:80:75:db:b8:bb:fa:d2:20:10:64:fa:7c:e3:7a:a9:
e9:8d:6a:6a:eb:4e:d7:6b:ec:c7:e5:cc:43:8d:39:41:7c:25:
f8:b2:45:3f:f5:a9:f2:6f:79:1f:21:a4:13:24:ec:7e:f9:2a:
ae:52:33:27:26:57:2f:8a:92:4a:d9:d8:d5:4d:8f:63:cc:cb:
ad:07:64:17:ad:77:54:19:34:2e:bb:f6:ae:ad:70:93:6a:e6:
a9:53:e9:12:31:ab:26:64:ad:0a:6b:03:3a:cb:98:5c:37:bc:
0c:b8:d4:4d:3d:f5:45:38:c3:e3:bd:53:4e:6d:36:85:84:b9:
02:1f:d4:2b:0d:a3:88:a3:7c:3f:44:85:52:ce:85:3b:ed:c2:
4f:29:af:47:b4:d5:32:d7:2d:9e:85:a3:98:70:6b:2d:8c:e1:
82:7f:c9:5a:68:f5:fa:22:72:3e:cb:46:18:b1:e9:fe:51:25:
ea:f8:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:02 2026 by rpki-client