Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/Uj5GyKlE4LUURLBC8AcY_CW88xE.roa
File: Uj5GyKlE4LUURLBC8AcY_CW88xE.roa (raw, json)
Hash identifier: E89+bHMBN0hxB5BmUERWTiv7tjMhLngWybSXBtvX7rA=
Subject key identifier: 52:3E:46:C8:A9:44:E0:B5:14:44:B0:42:F0:07:18:FC:25:BC:F3:11
Certificate issuer: /CN=5a35bc4812ec42b0f2265d7d941ec7714077f1cd
Certificate serial: 01A1D0A9A2B8EC479EDEE66246856ADB179E
Authority key identifier: 5A:35:BC:48:12:EC:42:B0:F2:26:5D:7D:94:1E:C7:71:40:77:F1:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjW8SBLsQrDyJl19lB7HcUB38c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/Uj5GyKlE4LUURLBC8AcY_CW88xE.roa
Signing time: Thu 12 Nov 2026 16:49:00 +0000
ROA not before: Thu 12 Nov 2026 16:49:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 192.108.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/WjW8SBLsQrDyJl19lB7HcUB38c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/WjW8SBLsQrDyJl19lB7HcUB38c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjW8SBLsQrDyJl19lB7HcUB38c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:a9:a2:b8:ec:47:9e:de:e6:62:46:85:6a:db:17:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a35bc4812ec42b0f2265d7d941ec7714077f1cd
Validity
Not Before: Nov 12 16:49:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=523e46c8a944e0b51444b042f00718fc25bcf311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:9d:fe:64:36:06:05:93:14:c5:8d:67:b2:
b8:87:17:42:ec:56:6c:f5:03:7c:d9:ed:0c:6a:71:
38:1d:ac:b4:78:99:5b:be:78:09:7a:e1:7d:e1:69:
60:41:5c:ba:00:17:cc:7b:18:12:20:b6:46:bf:13:
e1:c3:df:b0:f6:6f:4c:64:a6:80:20:3f:98:96:00:
0e:ef:7b:54:c5:1b:b9:26:17:e1:63:46:44:82:d9:
33:3f:e1:86:ac:f7:5a:fb:0e:f0:18:80:83:d8:6c:
32:7e:ca:c7:7c:a6:4e:d4:2f:25:97:63:c2:93:4f:
77:77:e6:2e:8b:24:cb:cf:8b:f7:9c:9d:d9:3c:d2:
04:0d:e6:22:dc:98:5e:02:d0:3c:15:b7:f1:05:71:
65:47:44:e7:b7:42:ed:8b:ab:a1:f6:28:07:1a:a2:
b3:1f:a9:90:c4:15:27:7c:25:0b:c7:89:05:73:5d:
c3:7d:95:c5:e9:24:fa:a7:d5:2a:1d:24:ee:57:7e:
0d:d6:57:95:9d:50:7a:c7:c4:be:92:fd:66:60:76:
ba:50:cd:ef:b2:66:45:4b:73:9d:00:58:3a:8a:96:
9e:60:35:5d:a8:a3:ba:b7:0b:0c:71:9b:30:cd:e3:
fb:7b:0c:b5:db:98:62:ad:9d:c1:53:4c:53:b9:5a:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:46:C8:A9:44:E0:B5:14:44:B0:42:F0:07:18:FC:25:BC:F3:11
X509v3 Authority Key Identifier:
keyid:5A:35:BC:48:12:EC:42:B0:F2:26:5D:7D:94:1E:C7:71:40:77:F1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjW8SBLsQrDyJl19lB7HcUB38c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/Uj5GyKlE4LUURLBC8AcY_CW88xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/WjW8SBLsQrDyJl19lB7HcUB38c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.48.0/24
Signature Algorithm: sha256WithRSAEncryption
50:63:c8:6a:2b:7d:f4:db:50:f9:f1:f9:15:ba:0a:42:f4:4f:
87:47:df:21:bc:4e:60:2e:45:3e:09:5b:7e:20:b9:f1:bc:ef:
34:2e:9b:0c:24:64:c3:0b:b4:24:6b:7f:f6:44:87:27:2e:6e:
0a:c7:48:43:21:23:19:76:0e:6f:fb:e8:fb:85:61:dd:92:8b:
13:a5:78:b5:9c:ac:97:a3:fe:6f:0b:d5:2e:d7:ed:3a:8a:10:
fc:56:97:b3:bc:36:ef:c0:cf:5e:33:f2:94:c8:f4:67:df:11:
2e:af:f0:1f:ce:0b:df:a8:ec:c6:e3:80:1a:c5:35:d7:4b:e7:
2f:65:07:60:f8:ad:2a:42:d2:6d:76:cf:05:f5:a2:75:0f:89:
f0:fc:87:cd:99:a0:aa:80:58:00:58:5d:d3:67:5e:bf:80:9c:
dc:f6:34:22:44:f2:e1:0b:b0:b5:be:ba:d4:3e:fc:78:b9:f1:
e1:90:ef:8d:34:ae:36:8c:83:2c:04:e5:34:e5:ce:44:24:59:
4a:ac:7b:d6:aa:2e:df:60:13:07:e7:e4:50:de:dc:72:bb:b5:
70:41:18:61:10:38:ae:b4:ee:3b:d2:81:df:4a:1a:40:b7:c7:
28:ef:9a:bb:0d:bd:c9:e1:23:e5:c6:d4:b1:88:df:ce:5b:af:
e7:78:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:26 2026 by rpki-client