Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/U2EVUUWlWvbUAILqaxAgK8pY0KE.roa
File: U2EVUUWlWvbUAILqaxAgK8pY0KE.roa (raw, json)
Hash identifier: P61yHP4ZBPMnRJW1hcXnzx/7WhRn7HOpJpj+yy4Yx4A=
Subject key identifier: 53:61:15:51:45:A5:5A:F6:D4:00:82:EA:6B:10:20:2B:CA:58:D0:A1
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019EE5D4CA42126DC5D4CF5B7621EE8CBB16
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/U2EVUUWlWvbUAILqaxAgK8pY0KE.roa
Signing time: Sat 20 Jun 2026 16:19:48 +0000
ROA not before: Sat 20 Jun 2026 16:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213157
IP address blocks: 185.254.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:d4:ca:42:12:6d:c5:d4:cf:5b:76:21:ee:8c:bb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jun 20 16:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5361155145a55af6d40082ea6b10202bca58d0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:29:3a:79:05:3e:55:18:4c:5b:05:60:b3:
b8:65:f1:23:b2:2a:cc:d7:80:6e:ce:46:6c:94:52:
e6:28:2d:16:94:c3:57:00:e4:16:5a:20:18:5a:66:
9a:7a:21:5b:02:54:78:69:15:d8:69:3f:d3:19:2f:
d8:90:eb:c5:e8:aa:9b:d6:df:e1:6c:0c:a2:92:dd:
15:65:5d:f8:67:a2:8c:bc:0d:a9:20:7f:45:41:cf:
9d:fc:e3:2e:b3:77:4c:51:34:52:e1:f9:0b:82:dd:
22:92:a3:ad:79:c3:f0:28:8b:7a:8b:f8:26:5d:4a:
e1:ec:9e:88:bb:cf:d9:51:82:a4:eb:67:2a:91:b6:
80:1f:0d:17:1b:53:9e:f6:33:a3:c7:30:d6:3b:7f:
29:e2:66:1b:24:08:02:57:df:a0:1b:84:e2:47:f5:
04:b3:e9:65:f3:6b:a5:ee:e2:cd:10:67:e1:66:90:
9e:6a:16:4e:65:e8:64:87:3c:5b:7e:11:ed:6d:97:
b8:26:1b:e4:c4:92:7a:a7:55:ed:f2:b5:11:07:49:
ff:e5:1b:c2:90:9c:46:13:20:94:e0:2f:87:b8:65:
f8:e5:f9:e0:4d:ed:0a:b1:c3:b0:c5:86:bc:a5:dc:
4f:0f:a7:3f:4a:a7:fd:2c:24:6e:e1:77:33:4d:01:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:61:15:51:45:A5:5A:F6:D4:00:82:EA:6B:10:20:2B:CA:58:D0:A1
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/U2EVUUWlWvbUAILqaxAgK8pY0KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ec:61:ee:7f:74:03:02:3f:fe:31:9a:b7:27:f8:3d:df:13:
bc:2e:b2:a6:aa:cd:c0:3b:56:3d:de:a8:ff:f8:a0:a2:39:1a:
5a:9d:44:05:28:08:a3:e1:b0:7c:7a:12:d6:86:d6:95:45:a7:
18:d2:70:02:cb:01:72:ef:39:34:c1:85:f4:13:ec:f4:c5:94:
36:93:58:93:30:18:b8:f4:27:7d:db:51:ff:75:a4:27:1c:ff:
42:f4:fc:8e:b2:8f:cc:fe:4e:1d:fd:9c:4c:2c:d4:c8:6b:60:
1b:04:f5:2f:ea:5d:72:92:af:d7:81:11:20:a7:f5:f6:38:70:
25:a1:78:a9:58:70:ec:8c:88:7a:6b:6e:1f:f2:e6:c2:fd:1a:
1c:14:2c:8c:72:a3:1e:2a:1c:4b:dd:ee:d4:41:2c:0d:61:14:
2b:15:a2:c9:06:11:90:0d:14:96:9a:50:fe:e2:68:a7:7a:57:
5e:69:c5:c8:b9:f2:82:af:00:01:72:21:b8:c8:e7:c7:19:4b:
db:ea:9f:66:f3:e8:d5:14:e9:39:1c:05:b5:3f:0e:29:f9:dc:
06:f8:50:fa:9a:45:79:3b:4c:8c:04:96:a2:7c:90:ef:5b:56:
a5:36:fe:9d:45:30:26:74:cf:33:66:30:b3:64:ec:d2:d9:5c:
52:be:ad:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:55 2026 by rpki-client