Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/uGMNQj1_043HLphzV5r5vXmuBQg.roa
File: uGMNQj1_043HLphzV5r5vXmuBQg.roa (raw, json)
Hash identifier: Vdfu2OsCNV/eKOG2jiQSt9Ia2SHga8o2PcGKl7wUwC0=
Subject key identifier: B8:63:0D:42:3D:7F:D3:8D:C7:2E:98:73:57:9A:F9:BD:79:AE:05:08
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FA77CFFB6AF75F4180C8F88B3897E8375
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/uGMNQj1_043HLphzV5r5vXmuBQg.roa
Signing time: Tue 28 Jul 2026 06:50:14 +0000
ROA not before: Tue 28 Jul 2026 06:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402655
IP address blocks: 85.92.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:7c:ff:b6:af:75:f4:18:0c:8f:88:b3:89:7e:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 28 06:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8630d423d7fd38dc72e9873579af9bd79ae0508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:7c:94:fe:79:c4:74:07:32:f4:a4:d2:a2:
dc:27:41:0d:6e:bb:93:0f:46:6c:fe:54:fc:e5:70:
66:6b:04:54:f0:89:35:03:cd:69:46:9f:1e:75:1a:
96:5e:e2:7f:54:13:0b:f8:87:10:05:2f:85:f8:e5:
e7:8e:a5:75:44:57:8c:fe:10:99:26:70:14:e5:1f:
47:5c:ca:45:52:b4:74:18:06:cc:e4:94:90:78:ab:
11:bb:bd:cc:18:87:ac:5f:ee:87:6c:e6:2f:41:17:
f1:cf:fe:05:73:b5:03:55:6c:0c:1e:df:3b:4f:f5:
ff:52:c5:62:d9:f9:6a:a4:4b:90:fe:3c:9c:5d:28:
1a:97:c6:af:c0:f8:0e:61:1a:19:98:4f:cf:a9:5e:
3c:46:11:fc:61:d6:11:13:e2:0a:a7:a0:55:99:8a:
ac:74:09:b9:37:61:77:c7:2f:1c:45:8b:a3:3c:cb:
c1:6a:d2:b3:13:df:31:49:39:bc:0a:9c:07:9b:23:
10:bd:8c:48:fd:2b:15:67:92:3f:63:0d:79:aa:0e:
b6:5d:82:11:f2:cc:6e:e7:30:43:10:53:1c:c8:b0:
6b:7e:98:9a:6f:58:9d:cf:35:42:d6:35:8f:75:99:
fe:9f:35:3e:89:dd:0b:4a:9d:09:1f:f5:ca:bf:77:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:63:0D:42:3D:7F:D3:8D:C7:2E:98:73:57:9A:F9:BD:79:AE:05:08
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/uGMNQj1_043HLphzV5r5vXmuBQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.141.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b1:f0:5d:dc:6e:2c:23:0c:a5:f6:54:09:90:d3:33:f2:7e:
73:78:2b:f6:90:5b:b3:1e:dd:07:4e:c5:34:d1:f1:f6:cc:4a:
4e:75:41:4c:92:fc:45:93:ee:c0:06:a3:42:5c:e0:86:3a:be:
51:13:1d:40:16:43:57:01:5d:b9:0b:2d:ad:55:41:88:0c:c9:
75:c0:46:03:ef:55:0c:da:2e:39:99:29:e1:87:d5:c9:ce:87:
c1:4b:06:86:76:4e:87:a4:d5:37:31:7d:35:e2:35:9a:f2:03:
0a:58:43:57:7f:1c:25:b8:ec:b9:a1:88:4d:b1:b9:84:b5:68:
c3:f6:0c:46:8a:e3:4e:38:2b:b2:99:8e:cc:44:54:ea:b2:86:
86:07:73:95:e0:55:de:c5:26:56:c3:1a:f8:9b:3b:2a:a5:0c:
26:62:59:73:d7:75:85:91:c4:2f:52:5b:68:79:4c:71:59:bb:
94:8b:53:12:73:75:c5:46:eb:97:dd:d2:d7:16:46:8f:d7:72:
53:cc:fa:dc:a1:4c:c2:04:40:4a:75:69:a4:52:50:5a:c1:93:
df:aa:6f:f2:af:a3:90:a2:5e:96:e1:ce:c4:86:d2:09:8b:53:
3f:2d:56:58:14:da:0b:de:a6:ce:45:86:67:a8:45:c0:90:0d:
d7:fd:79:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+nfP+2r3X0GAyPiLOJfoN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNzI4MDY1MDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODYzMGQ0MjNkN2ZkMzhkYzcyZTk4NzM1NzlhZjliZDc5YWUwNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJh8lP55xHQHMvSk0qLcJ0ENbruT
D0Zs/lT85XBmawRU8Ik1A81pRp8edRqWXuJ/VBML+IcQBS+F+OXnjqV1RFeM/hCZ
JnAU5R9HXMpFUrR0GAbM5JSQeKsRu73MGIesX+6HbOYvQRfxz/4Fc7UDVWwMHt87
T/X/UsVi2flqpEuQ/jycXSgal8avwPgOYRoZmE/PqV48RhH8YdYRE+IKp6BVmYqs
dAm5N2F3xy8cRYujPMvBatKzE98xSTm8CpwHmyMQvYxI/SsVZ5I/Yw15qg62XYIR
8sxu5zBDEFMcyLBrfpiab1idzzVC1jWPdZn+nzU+id0LSp0JH/XKv3ewGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhjDUI9f9ONxy6Yc1ea+b15rgUIMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvdUdNTlFqMV8wNDNITHBoelY1cjV2WG11QlFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVyNMA0G
CSqGSIb3DQEBCwUAA4IBAQB1sfBd3G4sIwyl9lQJkNMz8n5zeCv2kFuzHt0HTsU0
0fH2zEpOdUFMkvxFk+7ABqNCXOCGOr5REx1AFkNXAV25Cy2tVUGIDMl1wEYD71UM
2i45mSnhh9XJzofBSwaGdk6HpNU3MX014jWa8gMKWENXfxwluOy5oYhNsbmEtWjD
9gxGiuNOOCuymY7MRFTqsoaGB3OV4FXexSZWwxr4mzsqpQwmYllz13WFkcQvUlto
eUxxWbuUi1MSc3XFRuuX3dLXFkaP13JTzPrcoUzCBEBKdWmkUlBawZPfqm/yr6OQ
ol6W4c7EhtIJi1M/LVZYFNoL3qbORYZnqEXAkA3X/Xkp
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:28 2026 by rpki-client