Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/UNpzg1fBXvY1R69SVFovHk6gy1w.roa
File: UNpzg1fBXvY1R69SVFovHk6gy1w.roa (raw, json)
Hash identifier: meovwRk5rmV2wC72JrwzouzdrYO+qwuFP7XdlxUNR08=
Subject key identifier: 50:DA:73:83:57:C1:5E:F6:35:47:AF:52:54:5A:2F:1E:4E:A0:CB:5C
Certificate issuer: /CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Certificate serial: 019F23691D9B02BF290F97A5B17986B69DD3
Authority key identifier: AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/UNpzg1fBXvY1R69SVFovHk6gy1w.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58282
IP address blocks: 91.208.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:9b:02:bf:29:0f:97:a5:b1:79:86:b6:9d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50da738357c15ef63547af52545a2f1e4ea0cb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b6:b1:a6:19:a3:dc:6e:54:c4:bf:61:f6:06:
da:08:df:52:cb:c3:e3:b8:3a:a2:66:7c:cc:a8:43:
84:f1:fd:0b:97:58:e8:c0:41:e5:c6:a9:59:4f:e5:
1f:65:c6:f8:5e:5f:f5:aa:b9:29:34:3f:87:1d:eb:
a3:ee:b4:2c:bf:26:2e:d1:bb:fc:44:7a:34:3d:0e:
c4:4f:20:c0:de:68:b0:bc:aa:67:4d:20:77:8f:db:
49:c2:17:95:44:d1:c9:32:e3:1f:f2:e2:e8:fa:72:
39:77:7c:0d:0c:fc:39:15:be:11:ed:04:82:52:66:
80:61:31:3b:c8:dd:41:0d:f7:88:69:0a:ec:ae:f6:
83:c8:3e:38:17:00:0c:21:17:36:e4:5d:86:b9:6b:
59:32:03:67:0e:69:10:43:93:16:c0:64:59:0d:c0:
09:2e:6f:30:cb:7c:43:d5:f2:c5:b8:74:00:27:5f:
d7:0c:34:b3:9e:6c:37:36:ae:a5:32:c8:05:d4:dc:
aa:4f:ef:d5:f7:da:03:cf:49:fb:52:7e:f2:1f:ea:
82:f1:48:00:04:df:7f:d8:7e:54:fb:c0:0f:94:24:
96:ad:bd:a9:92:66:b1:61:95:38:e3:67:a8:25:ea:
dc:87:ed:e7:f2:6e:b3:49:17:d8:a8:06:bc:2b:a1:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DA:73:83:57:C1:5E:F6:35:47:AF:52:54:5A:2F:1E:4E:A0:CB:5C
X509v3 Authority Key Identifier:
keyid:AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/UNpzg1fBXvY1R69SVFovHk6gy1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.157.0/24
Signature Algorithm: sha256WithRSAEncryption
41:84:00:cc:df:cb:f4:09:f0:29:92:9b:7f:be:e7:22:52:50:
5b:76:36:88:b8:1b:8a:43:de:85:9a:62:9f:eb:49:4b:b1:41:
ff:ee:26:cb:3f:bf:ee:34:76:db:c3:47:11:f3:5c:ae:1c:a9:
0a:6d:37:4c:51:98:6f:a3:83:0e:83:19:12:cd:9a:c1:f6:aa:
69:98:30:e5:50:a9:c5:41:ed:b2:1d:cb:2e:ba:d2:37:64:df:
36:75:8f:79:06:40:e5:35:3d:0c:ae:de:bd:83:5b:1f:d0:c6:
f6:1b:5e:87:3d:af:51:2b:7a:09:b2:d0:f7:6c:fd:cb:72:28:
60:a8:6d:77:96:1d:33:85:cb:bd:a0:02:b5:40:28:02:b0:9e:
98:81:91:38:3f:7d:a2:5b:12:2e:d4:46:36:df:19:ef:14:99:
66:1a:1b:ff:72:35:2e:11:72:b4:35:20:c9:93:75:8a:e3:e7:
b1:4d:39:eb:08:34:e3:e5:e0:27:48:be:8e:9f:14:a2:aa:91:
e1:fb:60:0a:49:0f:2f:59:c2:24:22:c0:fe:2e:dd:77:5c:be:
9c:83:c6:02:f3:79:6f:a2:f7:37:8f:48:23:8c:e5:1a:32:ec:
29:40:ad:b8:9a:7f:70:69:60:a1:18:96:ac:bd:40:ec:8d:dd:
58:d7:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:29 2026 by rpki-client