Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/UB3nbJaD_lqgzpXX9TTrFnAnCw4.roa
File: UB3nbJaD_lqgzpXX9TTrFnAnCw4.roa (raw, json)
Hash identifier: 9MwXMFCOP1MO23HAeAAUU+WfivrwIhT4DgWcAU+xQTM=
Subject key identifier: 50:1D:E7:6C:96:83:FE:5A:A0:CE:95:D7:F5:34:EB:16:70:27:0B:0E
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 01A014B42E136C1614CE523A2FECB51DEB0C
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/UB3nbJaD_lqgzpXX9TTrFnAnCw4.roa
Signing time: Tue 18 Aug 2026 11:49:07 +0000
ROA not before: Tue 18 Aug 2026 11:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48492
IP address blocks: 85.155.192.0/20 maxlen: 24
95.142.144.0/22 maxlen: 24
185.75.224.0/22 maxlen: 24
185.181.108.0/22 maxlen: 24
185.187.204.0/22 maxlen: 24
2a0d:4f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:b4:2e:13:6c:16:14:ce:52:3a:2f:ec:b5:1d:eb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Aug 18 11:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501de76c9683fe5aa0ce95d7f534eb1670270b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:97:aa:42:2a:03:22:a8:74:b5:f5:43:58:
f1:43:1d:1d:44:12:d7:b0:2a:20:8c:1b:38:f4:33:
77:02:f9:b3:02:6d:ce:e0:97:26:6a:6b:41:53:70:
cc:0a:f7:3a:b9:b9:2d:f9:4f:25:93:f3:0a:17:2c:
56:d4:df:4b:de:69:ab:09:e0:0d:11:43:72:d2:98:
d5:be:e8:ab:95:92:99:59:e0:9d:7c:21:4a:01:04:
a9:41:84:96:f1:00:c7:1a:45:70:b7:6f:36:4f:5b:
37:a4:e3:f8:a1:24:e2:87:2b:f8:e5:3c:12:c7:63:
ff:ae:8c:53:5c:2e:97:6b:6d:cc:4f:1d:f6:6c:fb:
c0:d4:d3:e6:a9:c1:d7:d4:e1:2d:06:c3:4c:db:6c:
6e:ae:d6:f5:53:06:cd:54:0a:54:6c:9c:8d:a0:09:
f1:32:29:ed:65:fd:87:fd:c5:bd:95:2a:5e:3a:f3:
38:2e:9f:7e:f5:15:f3:cb:86:f3:e0:e2:ff:45:c3:
37:cb:11:85:ec:64:20:20:14:23:c0:85:e1:e8:cd:
d1:e1:3c:87:31:57:da:b3:98:04:03:55:9c:8d:16:
da:ff:c9:59:44:6b:b4:39:27:f6:b0:67:31:80:26:
97:8c:5e:6e:fb:5e:d0:10:2f:dd:e5:b8:e3:3f:0f:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:E7:6C:96:83:FE:5A:A0:CE:95:D7:F5:34:EB:16:70:27:0B:0E
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/UB3nbJaD_lqgzpXX9TTrFnAnCw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.192.0/20
95.142.144.0/22
185.75.224.0/22
185.181.108.0/22
185.187.204.0/22
IPv6:
2a0d:4f00::/29
Signature Algorithm: sha256WithRSAEncryption
21:17:4f:6e:c6:d3:5b:0f:e3:9d:14:89:2b:8b:e5:fa:22:8b:
5b:cd:40:e5:e9:4b:46:15:28:56:ba:72:b1:11:f6:05:9c:2b:
cf:8e:f7:53:20:a1:f9:01:0d:a4:2c:81:0b:b2:69:46:7e:ae:
20:15:5e:b1:f7:95:2a:41:10:a5:9e:54:95:6d:90:22:18:3a:
0a:c7:77:6c:79:fb:cb:cf:67:f8:ab:04:31:6c:86:e1:81:3a:
f2:c4:d0:9e:ce:db:81:ac:e4:0d:e6:a7:b8:cb:12:37:d8:c0:
5a:3f:d7:7d:00:67:7c:94:89:a9:92:3c:31:3a:54:c5:6c:0e:
e7:a6:5f:33:71:08:06:14:d6:7f:4b:94:b9:f5:9c:b6:1c:3a:
29:02:b5:b9:60:57:43:f8:f5:a7:61:69:c2:4d:d7:8a:00:92:
88:f7:37:bf:dd:c4:0c:07:33:e3:91:32:7e:20:ed:89:88:c3:
a0:df:e3:3f:93:51:5c:8e:cc:c7:40:14:b8:b4:f4:b9:f2:f1:
d9:76:ec:f9:43:47:ee:00:47:68:61:65:fe:c4:76:0f:93:f1:
e6:24:81:ee:2a:92:52:34:8f:90:f5:2e:7a:6c:a6:93:c0:30:
f3:38:f8:82:7e:c1:20:78:29:f5:b0:02:7b:21:b2:4d:e9:ed:
b3:70:ee:a4
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAaAUtC4TbBYUzlI6L+y1HesMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh
NTM3ZjkwHhcNMjYwODE4MTE0OTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDFkZTc2Yzk2ODNmZTVhYTBjZTk1ZDdmNTM0ZWIxNjcwMjcwYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx2XqkIqAyKodLX1Q1jxQx0dRBLX
sCogjBs49DN3AvmzAm3O4JcmamtBU3DMCvc6ubkt+U8lk/MKFyxW1N9L3mmrCeAN
EUNy0pjVvuirlZKZWeCdfCFKAQSpQYSW8QDHGkVwt282T1s3pOP4oSTihyv45TwS
x2P/roxTXC6Xa23MTx32bPvA1NPmqcHX1OEtBsNM22xurtb1UwbNVApUbJyNoAnx
MintZf2H/cW9lSpeOvM4Lp9+9RXzy4bz4OL/RcM3yxGF7GQgIBQjwIXh6M3R4TyH
MVfas5gEA1WcjRba/8lZRGu0OSf2sGcxgCaXjF5u+17QEC/d5bjjPw+LywIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFFAd52yWg/5aoM6V1/U06xZwJwsOMB8GA1UdIwQY
MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt
MTYzMjQ3ZWIwZTA3LzEvVUIzbmJKYURfbHFnenBYWDlUVHJGbkFuQ3c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3
LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEVZvAAwQC
X46QAwQCuUvgAwQCubVsAwQCubvMMA0EAgACMAcDBQMqDU8AMA0GCSqGSIb3DQEB
CwUAA4IBAQAhF09uxtNbD+OdFIkri+X6IotbzUDl6UtGFShWunKxEfYFnCvPjvdT
IKH5AQ2kLIELsmlGfq4gFV6x95UqQRClnlSVbZAiGDoKx3dsefvLz2f4qwQxbIbh
gTryxNCeztuBrOQN5qe4yxI32MBaP9d9AGd8lImpkjwxOlTFbA7npl8zcQgGFNZ/
S5S59Zy2HDopArW5YFdD+PWnYWnCTdeKAJKI9ze/3cQMBzPjkTJ+IO2JiMOg3+M/
k1FcjszHQBS4tPS58vHZduz5Q0fuAEdoYWX+xHYPk/HmJIHuKpJSNI+Q9S56bKaT
wDDzOPiCfsEgeCn1sAJ7IbJN6e2zcO6k
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:29:01 2026 by rpki-client