Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/UIgNC7qzgHPyDJX3ZQTGL7fU1DU.roa
File: UIgNC7qzgHPyDJX3ZQTGL7fU1DU.roa (raw, json)
Hash identifier: icSd2GBKjv8TIdC2/fgBp3rG61u6kU3+9ZYUwK85jEY=
Subject key identifier: 50:88:0D:0B:BA:B3:80:73:F2:0C:95:F7:65:04:C6:2F:B7:D4:D4:35
Certificate issuer: /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial: 01A1CEA7E623B439856EDBD449389C3A9271
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/UIgNC7qzgHPyDJX3ZQTGL7fU1DU.roa
Signing time: Thu 12 Nov 2026 07:27:52 +0000
ROA not before: Thu 12 Nov 2026 07:27:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.114.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:a7:e6:23:b4:39:85:6e:db:d4:49:38:9c:3a:92:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
Validity
Not Before: Nov 12 07:27:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50880d0bbab38073f20c95f76504c62fb7d4d435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:7b:66:4e:a0:4d:d5:0b:e8:80:e8:e1:f7:
b9:45:0f:56:34:dd:40:b1:0d:82:5c:df:a7:0b:e0:
4d:ea:d0:91:92:6a:a0:3a:48:e2:69:8c:70:88:cc:
60:3c:3d:a7:5a:65:a5:ec:fc:45:c9:87:92:b1:aa:
ff:d6:cb:c3:d2:f1:be:f3:2c:7e:d2:4a:ae:a7:c0:
39:68:fd:55:2d:7c:30:be:1b:31:40:27:f3:36:2f:
79:e9:65:1e:d8:a1:5e:ae:a4:c0:7d:99:f0:cc:5f:
e3:2e:91:5b:63:f8:5b:e7:6d:cd:f3:11:8a:1a:28:
3c:58:ea:ca:f4:50:09:d5:d1:17:b2:c2:e5:e7:74:
1a:73:0a:23:17:8e:d8:e7:01:e4:03:31:ec:28:f9:
67:00:6c:ff:9a:53:b3:58:08:1b:14:9e:a2:7f:f5:
78:25:50:04:22:90:22:be:8a:4d:7a:8e:5e:c8:59:
83:10:b1:cc:14:a0:08:76:ed:5b:f9:6f:f1:a2:6c:
c5:d3:93:5c:58:46:d8:93:bc:e5:b6:f6:7e:e3:42:
5b:22:f4:67:46:03:9c:80:45:7c:3e:18:bd:27:d3:
ba:e5:d7:b7:27:46:1a:fd:82:e8:15:d3:b0:cf:1c:
de:26:d2:09:92:9e:c5:c0:ab:75:4c:92:fb:ed:8d:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:88:0D:0B:BA:B3:80:73:F2:0C:95:F7:65:04:C6:2F:B7:D4:D4:35
X509v3 Authority Key Identifier:
keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/UIgNC7qzgHPyDJX3ZQTGL7fU1DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.156.0/22
Signature Algorithm: sha256WithRSAEncryption
64:15:59:4f:2a:b1:1c:7c:72:7f:ce:6b:0f:e0:6d:64:f9:4a:
8f:8f:94:6d:f5:e1:5e:8e:d6:24:5f:43:09:1f:af:83:87:5d:
ed:b7:d7:a0:3e:7b:5e:96:3d:55:68:38:16:d2:63:e4:6c:69:
1a:b9:83:30:a8:75:f7:98:27:59:83:20:7b:bb:2b:0f:07:03:
bf:e0:76:4f:ca:d6:3e:6d:da:b8:32:e1:28:ac:c0:00:60:8a:
d1:1f:26:3f:84:9b:4a:d2:2d:23:76:14:6b:1f:4f:2e:d0:45:
e9:35:d8:f1:7a:ba:32:1f:54:82:ee:8a:d0:94:67:16:c1:de:
9d:62:8b:d7:9d:17:ee:40:a3:fd:e4:9a:be:1d:2b:24:bb:62:
51:66:b4:82:fe:ec:b2:a9:70:03:07:95:ac:73:ba:4f:e9:00:
69:8a:88:15:a9:f3:b3:8d:ad:09:8b:3b:e5:37:1c:f3:26:aa:
35:05:c5:92:14:f7:da:9a:8f:57:fb:09:0d:f0:00:c3:d1:74:
74:aa:bf:91:e8:f5:b5:46:04:50:ad:e5:5a:74:3d:1d:7a:ed:
84:01:01:d5:15:fc:2c:48:9e:80:e6:d0:4b:dc:bc:bc:03:db:
ad:01:e4:52:04:b6:ee:a5:f7:1b:4a:37:06:a2:5e:dc:34:61:
03:d0:d1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:44 2026 by rpki-client