Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UPVs_EIFqG7icSM9J_XiKoXXMQU.roa
File: UPVs_EIFqG7icSM9J_XiKoXXMQU.roa (raw, json)
Hash identifier: s7lTHd108Itgdhk1S02vPnBypKdvV7WTv/do88wUe+A=
Subject key identifier: 50:F5:6C:FC:42:05:A8:6E:E2:71:23:3D:27:F5:E2:2A:85:D7:31:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E175E55F216E924FB40960B9069A8840D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UPVs_EIFqG7icSM9J_XiKoXXMQU.roa
Signing time: Mon 11 May 2026 14:08:38 +0000
ROA not before: Mon 11 May 2026 14:08:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 217.60.189.0/24 maxlen: 24
217.60.190.0/24 maxlen: 24
217.60.191.0/24 maxlen: 24
217.60.200.0/22 maxlen: 24
217.60.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:5e:55:f2:16:e9:24:fb:40:96:0b:90:69:a8:84:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 11 14:08:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50f56cfc4205a86ee271233d27f5e22a85d73105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:11:ea:30:ab:83:82:5b:08:fe:45:08:31:
2c:e2:fe:42:8c:a7:eb:ad:e3:fa:51:81:f3:f0:15:
8b:45:aa:55:49:ea:bd:2d:74:9f:96:29:ed:62:30:
db:40:f4:99:41:a7:d7:3b:0d:7d:0e:db:1c:32:f0:
93:9e:63:a1:3e:d5:6f:21:af:5b:4e:80:07:4a:b2:
9c:40:97:4d:44:03:20:69:ae:2d:93:ff:e4:58:d1:
1e:3e:43:14:c4:f2:ba:5f:39:fb:eb:0a:05:62:e9:
2a:92:72:bf:17:00:10:6f:2b:66:39:11:a2:f0:c5:
e9:cc:1d:8e:f9:e9:a7:a1:52:22:9e:c3:9f:df:74:
4b:ec:31:7e:22:5a:48:21:02:8d:a4:a2:c2:d4:0a:
14:1a:18:cb:1b:d3:2d:8d:4e:bf:ac:e3:27:d8:e9:
83:4f:e4:77:9b:eb:05:5d:29:eb:01:af:f4:3b:e8:
1d:e1:de:b9:0b:3c:23:ad:29:b5:98:92:84:4a:d9:
67:c1:3c:5b:25:f0:54:c4:89:09:0b:7c:f6:aa:8d:
48:b4:e2:75:5c:bd:3f:12:05:61:8a:ac:25:9e:7b:
8c:be:5f:6b:0f:55:36:f4:3d:9d:61:4f:8e:e1:a0:
b4:af:b3:50:b7:f1:20:36:e4:70:04:ae:a2:d0:85:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F5:6C:FC:42:05:A8:6E:E2:71:23:3D:27:F5:E2:2A:85:D7:31:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UPVs_EIFqG7icSM9J_XiKoXXMQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.189.0-217.60.191.255
217.60.200.0/21
Signature Algorithm: sha256WithRSAEncryption
40:d8:7d:15:0a:d0:27:7d:52:0a:54:97:63:77:01:35:c8:13:
8e:a1:6d:28:4f:25:67:b1:b8:ca:45:f0:de:d9:8c:47:76:44:
0f:7e:98:03:a2:9f:3d:94:11:66:07:2e:99:96:ea:05:57:c5:
8b:93:98:cc:27:b0:ab:3b:3d:c5:a9:36:8c:b2:be:91:29:fa:
2b:41:7e:65:d9:7f:11:36:e2:bc:7b:50:05:1d:aa:8c:ae:58:
7b:bb:62:fb:97:07:7b:8e:0a:f8:e0:d9:96:70:54:b4:40:67:
45:12:ef:7c:41:d8:5c:15:a6:28:01:43:78:cd:96:0c:df:fa:
96:0a:4f:c4:9d:15:13:c2:fb:95:48:35:07:41:d6:76:d0:e4:
34:6d:c4:11:84:15:14:7f:10:ef:c1:6d:9c:f3:1f:f3:62:68:
e3:9e:e5:e7:3e:35:f4:49:b7:cb:16:0d:db:8e:ca:cc:7b:5c:
2d:91:a8:bc:9c:4f:f8:bf:ae:8c:43:5c:13:4b:38:13:c1:97:
19:63:40:c7:a2:3a:12:58:11:18:64:e0:2a:c3:ce:83:24:cf:
c7:54:a6:5b:86:18:d2:e4:06:e0:09:94:d5:cb:13:4d:12:85:
83:9f:8a:fa:33:3b:a4:b0:83:2c:36:11:9b:70:97:14:ab:66:
67:c3:a6:58
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ4XXlXyFukk+0CWC5BpqIQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNTExMTQwODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGY1NmNmYzQyMDVhODZlZTI3MTIzM2QyN2Y1ZTIyYTg1ZDczMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO4R6jCrg4JbCP5FCDEs4v5CjKfr
reP6UYHz8BWLRapVSeq9LXSflintYjDbQPSZQafXOw19DtscMvCTnmOhPtVvIa9b
ToAHSrKcQJdNRAMgaa4tk//kWNEePkMUxPK6Xzn76woFYukqknK/FwAQbytmORGi
8MXpzB2O+emnoVIinsOf33RL7DF+IlpIIQKNpKLC1AoUGhjLG9MtjU6/rOMn2OmD
T+R3m+sFXSnrAa/0O+gd4d65CzwjrSm1mJKEStlnwTxbJfBUxIkJC3z2qo1ItOJ1
XL0/EgVhiqwlnnuMvl9rD1U29D2dYU+O4aC0r7NQt/EgNuRwBK6i0IUkRwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFD1bPxCBahu4nEjPSf14iqF1zEFMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVVBWc19FSUZxRzdpY1NNOUpfWGlLb1hYTVFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADZPL0D
BAbZPIADBAPZPMgwDQYJKoZIhvcNAQELBQADggEBAEDYfRUK0Cd9UgpUl2N3ATXI
E46hbShPJWexuMpF8N7ZjEd2RA9+mAOinz2UEWYHLpmW6gVXxYuTmMwnsKs7PcWp
NoyyvpEp+itBfmXZfxE24rx7UAUdqoyuWHu7YvuXB3uOCvjg2ZZwVLRAZ0US73xB
2FwVpigBQ3jNlgzf+pYKT8SdFRPC+5VINQdB1nbQ5DRtxBGEFRR/EO/BbZzzH/Ni
aOOe5ec+NfRJt8sWDduOysx7XC2RqLycT/i/roxDXBNLOBPBlxljQMeiOhJYERhk
4CrDzoMkz8dUpluGGNLkBuAJlNXLE00ShYOfivozO6Swgyw2EZtwlxSrZmfDplg=
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:32 2026 by rpki-client