Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/UmIpX_CW_WbjKOu7gSBIxfUav1k.roa
File: UmIpX_CW_WbjKOu7gSBIxfUav1k.roa (raw, json)
Hash identifier: xh/FWCV9oxmR8lumYAFioa1l3O3b6ExwSOvllJh6Tdc=
Subject key identifier: 52:62:29:5F:F0:96:FD:66:E3:28:EB:BB:81:20:48:C5:F5:1A:BF:59
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019DBD855AEE192A6AA642D27B6C6F5A17DC
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/UmIpX_CW_WbjKOu7gSBIxfUav1k.roa
Signing time: Fri 24 Apr 2026 03:25:26 +0000
ROA not before: Fri 24 Apr 2026 03:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 168.222.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bd:85:5a:ee:19:2a:6a:a6:42:d2:7b:6c:6f:5a:17:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Apr 24 03:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5262295ff096fd66e328ebbb812048c5f51abf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:bf:cd:e1:09:4d:fa:5c:59:ad:d0:e0:66:
c5:d8:e2:2d:a3:da:cc:b9:e7:8b:81:b7:ee:6d:ae:
be:49:87:6c:f8:73:d7:64:b0:af:58:bf:c0:f7:a9:
e0:41:73:e5:eb:7c:98:8d:90:03:4a:32:99:5e:78:
76:ca:eb:74:bb:02:4d:6d:50:45:5b:f3:9f:b7:f0:
64:9c:db:c8:c3:d8:9d:87:5f:48:4e:51:4a:6f:c7:
66:c6:b1:ba:62:a6:ae:9b:2a:44:52:3f:b6:24:f3:
17:11:9c:9e:25:29:7c:96:d3:35:65:b1:e4:5a:5c:
92:07:ee:8a:53:9b:8e:b2:a9:8f:97:0c:71:df:d0:
7a:d0:b0:60:bc:41:a6:f0:94:e1:2b:e1:6a:ba:de:
26:77:ac:40:7b:94:0f:72:e5:4f:15:8f:1c:c8:ef:
0b:d8:80:22:31:68:e6:e1:81:36:22:56:d3:15:86:
7b:45:2d:57:bd:ea:f5:18:83:88:c4:df:39:a7:e2:
2e:44:0c:98:2d:dd:63:a1:dc:86:c7:21:78:df:ef:
15:ef:92:7a:be:9f:8f:10:fd:73:a4:de:38:4a:05:
b1:17:c5:0c:af:00:01:f6:e8:be:39:ee:a6:05:2a:
02:79:22:17:8f:68:cf:01:dd:f4:30:66:f1:a4:2e:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:62:29:5F:F0:96:FD:66:E3:28:EB:BB:81:20:48:C5:F5:1A:BF:59
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/UmIpX_CW_WbjKOu7gSBIxfUav1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.254.0/24
Signature Algorithm: sha256WithRSAEncryption
78:78:a9:87:ab:df:ff:1f:86:f7:99:ce:5a:25:b1:af:b9:1e:
0c:c1:88:33:98:62:41:95:9f:ff:5f:0e:24:32:25:85:9e:9e:
0c:c5:6c:4e:4f:1f:08:d7:aa:b9:61:af:38:f1:60:b9:87:d5:
1e:91:05:61:88:a9:27:77:3f:77:2f:12:ac:ec:8e:7b:b6:fc:
4b:22:bd:87:15:e6:23:1f:cf:de:95:1d:52:c0:3d:d0:2a:bf:
1e:67:ed:5b:1f:4d:9c:3d:70:d2:d5:64:4a:10:d0:20:35:bf:
59:91:8d:30:be:59:58:b6:00:d4:aa:bb:87:32:07:b4:cd:50:
6a:03:b6:2c:cd:2b:9f:7d:6a:e5:3e:6c:23:12:27:26:ed:03:
2b:62:3d:fe:fd:17:61:cf:71:8a:26:d3:85:aa:ee:8f:7d:23:
0e:24:44:d1:ef:81:bc:04:88:f2:05:bb:cf:2e:4a:e3:5d:7f:
d6:47:24:dc:03:e7:8c:43:98:1d:97:17:f4:62:4f:4f:74:86:
9a:1b:53:60:d3:fd:57:59:31:bd:89:a9:f2:88:b4:eb:b1:17:
d8:49:38:b3:f7:9c:c6:37:d8:db:36:d8:b4:f9:3b:bc:93:2d:
9d:18:49:dd:1f:12:c9:b7:f3:a2:b2:6a:9d:bf:59:c0:5b:8b:
9c:7c:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:59 2026 by rpki-client