Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/UVF8vq9IBpLq4AW5MbQABbtvxP0.roa
File: UVF8vq9IBpLq4AW5MbQABbtvxP0.roa (raw, json)
Hash identifier: ZGY7BSENFtZP/EhP28QuNLf7X7IYPSViuV3rw4ls5KM=
Subject key identifier: 51:51:7C:BE:AF:48:06:92:EA:E0:05:B9:31:B4:00:05:BB:6F:C4:FD
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0D67DAA21C8800FD06A6242B8BB4B6B18
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/UVF8vq9IBpLq4AW5MbQABbtvxP0.roa
Signing time: Fri 25 Sep 2026 02:55:54 +0000
ROA not before: Fri 25 Sep 2026 02:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64150
IP address blocks: 45.155.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:7d:aa:21:c8:80:0f:d0:6a:62:42:b8:bb:4b:6b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 25 02:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51517cbeaf480692eae005b931b40005bb6fc4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:7c:b1:ae:1f:12:3a:db:bf:48:94:08:17:
f5:3d:3a:a8:ce:28:73:0f:db:19:92:03:fc:8b:f9:
b3:08:f9:02:e0:7f:93:32:ed:7f:01:a3:ae:b6:b9:
82:b7:e6:17:1a:5c:db:93:55:0a:0d:d5:a7:ac:26:
a3:12:07:17:59:3d:7b:cf:d8:7e:b9:c7:f9:78:f6:
be:b6:40:85:fa:30:de:4e:0b:2d:98:85:0b:ee:e7:
ba:67:8f:09:0f:40:e2:4a:71:9f:48:9b:e9:7d:b5:
23:fe:81:cd:f2:3f:45:d9:62:a6:4a:b6:36:9f:68:
99:3e:7e:c4:13:3e:52:26:30:c4:0e:af:1a:7d:cf:
98:82:8d:71:a3:f6:79:62:05:ab:d8:30:6d:3d:7f:
4b:94:29:ec:19:e5:cc:c0:f3:46:ba:91:b2:5d:1d:
51:be:08:62:e2:45:6a:c1:ce:1b:27:e8:a5:b5:2f:
7b:2b:d0:f7:26:c2:44:e1:9b:31:fe:b8:d7:60:04:
7e:cc:65:a2:d6:e6:54:f0:84:6f:0c:ff:59:b0:31:
ec:6c:85:6e:b8:1a:36:d8:d2:21:f7:fa:f7:93:48:
79:94:72:1d:21:3a:44:16:15:e3:2c:3e:cd:78:bd:
10:1d:2a:04:58:92:4c:e8:0e:fa:77:09:e1:8a:71:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:51:7C:BE:AF:48:06:92:EA:E0:05:B9:31:B4:00:05:BB:6F:C4:FD
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/UVF8vq9IBpLq4AW5MbQABbtvxP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.56.0/24
Signature Algorithm: sha256WithRSAEncryption
19:52:7d:4a:b1:34:48:5f:8a:ed:d8:08:9f:20:fc:a3:15:15:
37:ee:e1:ab:86:67:f2:e2:1e:8b:44:01:c6:12:ad:7c:fa:c1:
77:bb:10:54:dd:b1:16:2f:84:d3:d0:19:45:0f:50:73:fb:e6:
cc:7b:51:76:98:40:07:0a:33:33:c5:8a:b3:0a:d7:f3:2b:75:
1f:00:db:9e:ef:5d:a0:ab:13:20:00:da:ac:a3:00:0b:a8:9f:
a7:fd:e2:0e:17:e0:f0:7e:fd:fb:cb:57:a1:5d:5f:bb:eb:7c:
df:b2:cd:0f:a1:5f:ce:e5:ee:52:b2:e7:65:da:3f:6e:b3:c5:
96:8f:5b:29:d4:6e:da:7a:25:4e:d1:8a:e3:10:25:8d:13:14:
5f:53:c2:88:a2:5d:23:ea:de:9b:10:ca:59:79:eb:d1:62:90:
69:8c:b8:70:ab:7d:b9:d6:44:f2:3d:1c:38:10:5e:24:a1:6b:
55:9a:23:2c:e2:37:31:ca:53:d7:71:9c:43:fd:a8:8d:e4:ae:
bd:96:79:fe:38:58:14:e7:50:e6:0d:14:54:49:c1:54:aa:b8:
ed:85:5f:6c:4a:26:fb:06:e2:4c:2d:41:31:56:2c:74:99:9c:
ff:e8:01:91:c9:3a:83:01:72:c8:de:a1:c7:60:3d:33:dd:d8:
0c:70:7e:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDWfaohyIAP0GpiQri7S2sYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwOTI1MDI1NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTUxN2NiZWFmNDgwNjkyZWFlMDA1YjkzMWI0MDAwNWJiNmZjNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCd8sa4fEjrbv0iUCBf1PTqozihz
D9sZkgP8i/mzCPkC4H+TMu1/AaOutrmCt+YXGlzbk1UKDdWnrCajEgcXWT17z9h+
ucf5ePa+tkCF+jDeTgstmIUL7ue6Z48JD0DiSnGfSJvpfbUj/oHN8j9F2WKmSrY2
n2iZPn7EEz5SJjDEDq8afc+Ygo1xo/Z5YgWr2DBtPX9LlCnsGeXMwPNGupGyXR1R
vghi4kVqwc4bJ+iltS97K9D3JsJE4Zsx/rjXYAR+zGWi1uZU8IRvDP9ZsDHsbIVu
uBo22NIh9/r3k0h5lHIdITpEFhXjLD7NeL0QHSoEWJJM6A76dwnhinE2ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFFRfL6vSAaS6uAFuTG0AAW7b8T9MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvVVZGOHZxOUlCcExxNEFXNU1iUUFCYnR2eFAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZs4MA0G
CSqGSIb3DQEBCwUAA4IBAQAZUn1KsTRIX4rt2AifIPyjFRU37uGrhmfy4h6LRAHG
Eq18+sF3uxBU3bEWL4TT0BlFD1Bz++bMe1F2mEAHCjMzxYqzCtfzK3UfANue712g
qxMgANqsowALqJ+n/eIOF+Dwfv37y1ehXV+763zfss0PoV/O5e5Ssudl2j9us8WW
j1sp1G7aeiVO0YrjECWNExRfU8KIol0j6t6bEMpZeevRYpBpjLhwq3251kTyPRw4
EF4koWtVmiMs4jcxylPXcZxD/aiN5K69lnn+OFgU51DmDRRUScFUqrjthV9sSib7
BuJMLUExVix0mZz/6AGRyTqDAXLI3qHHYD0z3dgMcH5q
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:23:27 2026 by rpki-client