Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/U4HfGHAP2WoYFqQD4L0of_EnLKI.roa
File: U4HfGHAP2WoYFqQD4L0of_EnLKI.roa (raw, json)
Hash identifier: ZnMT/i5/9pGZI+9FFghOIhbXR3PyKujFwDawHaprb68=
Subject key identifier: 53:81:DF:18:70:0F:D9:6A:18:16:A4:03:E0:BD:28:7F:F1:27:2C:A2
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019F1D3B6B29F236367FA6B76AC0ED89B582
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/U4HfGHAP2WoYFqQD4L0of_EnLKI.roa
Signing time: Wed 01 Jul 2026 10:31:00 +0000
ROA not before: Wed 01 Jul 2026 10:31:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51815
IP address blocks: 213.185.224.0/19 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:3b:6b:29:f2:36:36:7f:a6:b7:6a:c0:ed:89:b5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jul 1 10:31:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5381df18700fd96a1816a403e0bd287ff1272ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:5f:2f:a4:82:a8:55:77:3f:44:b1:d9:78:
9b:c5:a7:5b:50:71:d5:ee:22:9a:21:24:23:d2:af:
8e:12:49:13:3a:eb:34:46:ba:fe:c1:88:91:13:fc:
86:5f:f7:75:f9:9a:7e:63:b8:ad:35:18:bf:63:46:
d8:5b:25:df:a9:b0:bb:f9:a4:24:c0:9a:1a:dd:9d:
80:bc:80:ac:bf:e9:16:90:d8:91:f4:82:39:a8:d5:
b7:fd:55:42:16:18:3b:45:56:2e:45:41:3e:06:92:
d6:7e:ca:28:62:20:ab:5c:cd:cc:0c:b1:18:84:c6:
ce:e5:4d:d3:97:60:e9:15:60:98:f9:bf:6e:e1:35:
f8:1a:78:8b:c0:0d:74:72:bf:94:a4:55:9b:59:7b:
fe:1b:2b:9f:fa:93:c3:75:e2:59:f5:72:57:37:37:
92:d9:6c:a8:36:a6:c2:81:fe:d1:f0:ca:63:e1:fa:
69:47:81:bc:41:20:de:4b:a2:d1:1a:ca:48:6f:81:
1b:94:d6:23:bd:5d:fb:10:c1:91:9f:d0:69:5c:50:
53:50:46:25:4f:f2:2e:e6:d5:b9:64:39:a8:17:4c:
79:8e:2a:98:f8:f9:47:c5:0d:35:67:8f:72:3d:2a:
4f:05:c0:72:d8:58:e8:84:97:c1:1e:c6:c2:6e:82:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:DF:18:70:0F:D9:6A:18:16:A4:03:E0:BD:28:7F:F1:27:2C:A2
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/U4HfGHAP2WoYFqQD4L0of_EnLKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.185.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:18:bc:8a:cd:5d:b0:cc:38:ce:78:ef:8e:57:e2:69:93:05:
93:a0:bf:55:5e:1a:ee:dd:ba:07:92:f2:13:66:44:4d:be:94:
ab:e2:67:32:f0:6f:19:64:95:56:01:42:de:81:95:2d:30:e2:
79:e8:1f:67:87:3c:e2:f7:e5:f5:30:3a:2a:af:25:83:b3:a8:
f2:6c:9b:07:99:04:bd:ab:b6:5c:20:59:26:05:47:86:5c:e9:
1f:23:c8:73:e4:3b:f2:9d:54:a7:af:70:27:2a:8d:b8:aa:35:
14:99:ae:61:b1:a5:2d:dc:84:c7:e7:0b:a1:7b:8a:e0:69:e8:
36:7b:21:5a:7d:ba:ae:47:72:f0:33:a3:d0:ba:d3:a4:41:1d:
6b:5b:8e:b3:d8:59:ee:91:71:ba:9d:aa:c1:db:a0:ad:a3:73:
3d:d9:f5:be:6b:52:75:0c:60:46:ba:d0:24:9a:11:59:6a:fc:
16:e8:81:32:34:b7:a6:72:7a:e3:13:92:33:07:23:17:ab:38:
3c:a5:ae:33:e3:ea:d5:aa:48:7c:e2:ab:6f:2d:7a:73:04:42:
77:2a:70:e1:e5:ee:d3:bf:bb:a2:a9:0e:a4:b1:ef:0f:d8:74:
92:aa:cc:df:00:ab:4d:66:b5:10:a3:dc:30:9c:3f:d2:01:72:
97:4f:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:21 2026 by rpki-client