Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UL8oCh7jC8MrhaCkeuIjsE-ENXk.roa
File: UL8oCh7jC8MrhaCkeuIjsE-ENXk.roa (raw, json)
Hash identifier: EzyQeu5N9vyCieYirP7cUQDe+vJjtb3I3PrNd+S1+Zc=
Subject key identifier: 50:BF:28:0A:1E:E3:0B:C3:2B:85:A0:A4:7A:E2:23:B0:4F:84:35:79
Certificate issuer: /CN=515b545771714f896b7b417125c92541622d0ddd
Certificate serial: 019D007D5F44EA9BE0275C4FF9F11BB93F61
Authority key identifier: 51:5B:54:57:71:71:4F:89:6B:7B:41:71:25:C9:25:41:62:2D:0D:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVtUV3FxT4lre0FxJcklQWItDd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UL8oCh7jC8MrhaCkeuIjsE-ENXk.roa
Signing time: Wed 18 Mar 2026 10:28:29 +0000
ROA not before: Wed 18 Mar 2026 10:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48928
IP address blocks: 195.88.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVtUV3FxT4lre0FxJcklQWItDd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:7d:5f:44:ea:9b:e0:27:5c:4f:f9:f1:1b:b9:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515b545771714f896b7b417125c92541622d0ddd
Validity
Not Before: Mar 18 10:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50bf280a1ee30bc32b85a0a47ae223b04f843579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:56:dc:f6:d7:f7:46:82:21:fd:41:c1:84:
18:a0:f1:8a:56:76:5c:1d:6f:be:58:99:73:19:33:
eb:0a:25:90:36:2d:ef:bb:72:1f:a6:4f:ef:22:b5:
46:38:ae:fe:0b:0a:83:29:2e:ce:17:12:45:17:fa:
09:df:8e:0b:0b:7d:de:fa:2d:87:17:50:cf:63:48:
f9:aa:b1:dd:52:9d:09:fd:96:d4:3b:1d:ac:c4:d0:
e4:3e:be:64:3b:b5:d7:67:91:6e:32:5a:4e:1f:46:
5f:44:ac:e4:24:d7:f4:84:5f:2c:8f:c5:81:5a:ed:
31:2c:31:89:d6:aa:be:3b:7f:f7:ba:5e:c6:fb:cb:
0f:77:15:24:5e:fb:d0:53:39:b2:45:d2:f5:25:80:
b5:61:3e:35:fd:c3:26:14:f7:bb:67:9e:9a:a4:e9:
6b:71:70:63:01:98:06:8b:f3:d9:62:53:48:88:72:
63:79:4d:97:bf:dd:28:b8:5c:73:82:a5:21:c3:59:
8c:5d:d9:1f:e5:02:83:94:1e:9b:66:6f:2c:f2:97:
22:ea:3d:e6:29:4d:c4:dd:36:92:64:18:e1:b6:b3:
90:56:c3:21:30:48:f5:4f:5f:2b:c2:42:54:32:5f:
0a:a1:be:47:a8:a8:e3:e7:26:ac:d2:de:c1:2e:51:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BF:28:0A:1E:E3:0B:C3:2B:85:A0:A4:7A:E2:23:B0:4F:84:35:79
X509v3 Authority Key Identifier:
keyid:51:5B:54:57:71:71:4F:89:6B:7B:41:71:25:C9:25:41:62:2D:0D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVtUV3FxT4lre0FxJcklQWItDd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UL8oCh7jC8MrhaCkeuIjsE-ENXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/bcc468-bd66-4c34-ad37-0efb99724d99/1/UVtUV3FxT4lre0FxJcklQWItDd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.96.0/23
Signature Algorithm: sha256WithRSAEncryption
71:95:86:21:58:18:85:77:5b:00:e8:55:6c:30:82:40:01:4c:
9b:2a:ce:11:8c:54:8d:3a:b3:56:a8:87:d5:fd:aa:e4:3e:97:
d2:2f:47:dc:71:b6:0d:11:7b:95:55:78:86:67:f2:c9:ed:65:
b1:98:3f:2e:91:f2:b1:ee:72:9d:43:9a:ca:8a:a6:9c:e4:fa:
98:05:f2:55:79:b0:ed:9e:b0:7e:38:a7:4d:95:66:22:99:6a:
1e:e0:a1:2e:a2:fb:21:f8:e6:7b:ba:9d:3d:d6:30:07:2c:9c:
07:41:37:26:0e:52:8d:b5:15:97:fe:4c:89:38:88:e6:20:0d:
7d:f0:4f:e8:e9:b4:f8:b9:ca:a6:72:9f:e5:3e:64:89:69:97:
82:a8:b0:5b:7e:d7:31:2e:4c:20:e1:0c:ed:ae:b7:46:17:cc:
33:e3:4b:2a:92:7f:8d:b4:fb:31:13:e5:84:75:92:38:b6:43:
f1:90:fe:27:2c:21:21:42:08:fa:9d:ac:31:88:76:ff:a1:9f:
eb:57:30:7d:09:74:95:3b:1f:2b:1f:90:48:f1:50:6a:53:85:
fd:4c:47:08:ae:b8:31:1d:3d:10:7f:18:0b:7d:41:10:fc:c6:
d5:40:75:27:b2:6b:a5:61:3f:cd:45:2b:3c:9d:98:2d:e2:09:
a3:a8:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:09 2026 by rpki-client