Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/UB6Z4RxbSymmwyF2i0zySOU1_ek.roa
File: UB6Z4RxbSymmwyF2i0zySOU1_ek.roa (raw, json)
Hash identifier: ocRn4kpzWMXb4ndCYHS8/37QR5foKf2xzUiC35UIK0M=
Subject key identifier: 50:1E:99:E1:1C:5B:4B:29:A6:C3:21:76:8B:4C:F2:48:E5:35:FD:E9
Certificate issuer: /CN=0bdbbac793e1d688b65bdc00dd52658e20ad64fd
Certificate serial: 019F1735B38570F1C3E066799F7C3E6ED35C
Authority key identifier: 0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/UB6Z4RxbSymmwyF2i0zySOU1_ek.roa
Signing time: Tue 30 Jun 2026 06:27:03 +0000
ROA not before: Tue 30 Jun 2026 06:27:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 134.220.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:35:b3:85:70:f1:c3:e0:66:79:9f:7c:3e:6e:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bdbbac793e1d688b65bdc00dd52658e20ad64fd
Validity
Not Before: Jun 30 06:27:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501e99e11c5b4b29a6c321768b4cf248e535fde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:d8:8b:b0:79:b4:bb:dd:f5:7b:95:d6:bf:
fb:30:3a:8e:10:ee:e9:00:eb:80:ba:2e:28:9f:0e:
d5:dc:c0:28:f1:b4:7e:0c:d2:80:15:3b:71:2e:0e:
b0:1b:18:4c:b7:5e:f3:eb:92:e9:1c:38:6b:24:46:
b1:a1:47:58:ad:4a:75:e6:53:a4:50:a8:37:0d:1e:
bc:87:98:51:d9:2f:eb:a8:27:e0:14:23:ac:2a:74:
72:fb:01:7a:ac:38:a3:20:16:1f:48:4c:4b:02:a8:
14:13:e9:dd:65:66:9d:ed:5c:a4:55:32:78:05:1c:
29:5e:c1:15:8e:49:fa:9f:0f:83:72:a5:25:ca:25:
57:e5:a7:b7:82:76:63:9a:83:22:a4:b3:fe:23:d6:
8b:67:64:fe:6c:93:52:f7:07:9a:98:51:98:b1:de:
59:e4:bd:1a:0c:d0:d6:3f:58:e4:94:62:42:ed:0a:
ec:64:b9:02:8d:95:a2:cf:ba:1f:f9:8d:7e:b7:54:
57:8d:dc:91:3b:1d:e3:39:4c:20:26:52:05:e6:ed:
1f:32:37:f4:6e:fb:85:6f:a2:47:ee:56:e9:7e:cf:
8e:65:e0:02:7c:ce:60:90:92:ef:7c:70:9f:b3:54:
f7:c2:44:82:62:aa:54:86:c2:9b:f3:63:e5:06:ac:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:99:E1:1C:5B:4B:29:A6:C3:21:76:8B:4C:F2:48:E5:35:FD:E9
X509v3 Authority Key Identifier:
keyid:0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/UB6Z4RxbSymmwyF2i0zySOU1_ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:39:83:64:f3:69:33:3d:2c:39:5a:a4:4d:06:2a:f1:e0:b1:
ae:04:d2:5f:5e:45:0d:ed:c0:97:61:ad:aa:50:0b:c7:05:02:
c0:7a:bb:74:9b:34:80:7a:78:95:b8:6f:ee:f8:cc:88:25:28:
f2:1a:2c:a3:e6:69:f1:9b:88:df:97:77:25:fb:78:9c:b9:60:
39:ac:f2:ff:67:4c:44:34:cb:c0:9f:b5:13:f6:51:02:a5:3a:
86:65:58:bd:22:79:19:ca:7d:fc:6e:c0:38:98:2b:41:1a:cc:
ef:5c:d2:ac:fb:06:fe:46:6a:e7:54:77:fe:fb:c4:d4:b4:22:
3a:54:fc:50:87:59:9a:00:fd:2a:13:83:09:43:b3:75:53:b8:
b0:4c:91:40:c6:a9:3d:2b:bf:a1:94:20:fa:1a:18:5a:00:e8:
79:f7:76:5e:dd:78:dc:18:64:cf:58:cb:df:bb:da:d9:26:69:
26:40:1f:60:aa:71:80:14:71:da:2f:9e:a1:4e:13:19:b8:11:
0c:aa:97:aa:65:63:3f:f2:3d:85:f0:ba:1a:46:81:cb:26:b2:
e8:72:61:31:8d:6a:0f:6f:b2:db:95:7d:6c:b1:86:1c:22:2a:
e5:7d:b9:ad:04:60:29:59:50:2f:60:67:70:38:07:67:6b:1c:
78:5b:df:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:28 2026 by rpki-client