Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/UHBKB5DuCWOk2pbJd-90ewsu0MY.roa
File: UHBKB5DuCWOk2pbJd-90ewsu0MY.roa (raw, json)
Hash identifier: sEHGvoM4XfIy3O+HYwpWVDG3FHkWEr0D2jB6POjci38=
Subject key identifier: 50:70:4A:07:90:EE:09:63:A4:DA:96:C9:77:EF:74:7B:0B:2E:D0:C6
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019F9EE5E5004CEF0FF7E519D8DC8E922A47
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/UHBKB5DuCWOk2pbJd-90ewsu0MY.roa
Signing time: Sun 26 Jul 2026 14:48:14 +0000
ROA not before: Sun 26 Jul 2026 14:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.29.210.0/24 maxlen: 24
213.255.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:e5:e5:00:4c:ef:0f:f7:e5:19:d8:dc:8e:92:2a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jul 26 14:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50704a0790ee0963a4da96c977ef747b0b2ed0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:be:06:b4:52:f5:29:fe:d6:d5:35:02:f2:
f7:d6:6f:f0:9b:30:b2:df:18:16:18:95:a3:e4:16:
af:48:a3:13:f0:ee:12:1c:1a:05:04:6a:da:3c:e1:
0b:98:2f:a4:aa:72:ae:5c:50:bf:b8:c8:14:06:6b:
be:1a:c1:3a:0b:5e:01:89:ce:33:88:f4:fa:2e:ae:
99:8f:71:c0:08:f9:14:08:28:0a:d1:a3:60:35:d5:
9c:ba:fc:01:f1:3f:40:6e:4b:dd:44:e5:d6:15:c6:
e5:51:85:c8:e4:83:2a:62:73:a5:54:56:72:da:99:
99:c0:91:ce:4e:9f:64:9b:4f:0c:ca:ae:f8:d1:02:
84:30:2f:4e:5a:11:8f:c0:da:92:af:1e:f1:9a:23:
9c:db:4f:81:14:22:a6:21:60:e6:26:e9:31:2c:ee:
96:91:f2:0c:b7:64:a9:95:e8:7f:26:07:49:a8:80:
27:44:10:6c:b4:a3:a2:1c:e0:bb:34:4a:f9:30:0b:
3e:1e:4a:d0:40:f9:bd:d2:5a:32:97:49:ef:32:40:
9e:6f:cc:c5:d9:56:0f:27:53:26:ca:2d:3b:65:a8:
e6:d7:54:53:eb:95:34:7e:09:77:8d:4e:34:6b:e9:
fb:9d:dd:2b:b2:07:fd:85:35:6f:d6:d1:50:e2:c4:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:70:4A:07:90:EE:09:63:A4:DA:96:C9:77:EF:74:7B:0B:2E:D0:C6
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/UHBKB5DuCWOk2pbJd-90ewsu0MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.210.0/24
213.255.206.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cd:e4:7d:08:be:d5:e6:97:53:a0:40:9f:30:02:88:e7:1d:
61:b1:26:6d:97:f8:b1:8d:9d:84:09:7b:0d:60:d7:4d:fd:39:
4e:39:6a:6d:21:c8:d9:bb:f7:38:48:d8:ca:92:ac:23:3a:d4:
3c:9b:db:d9:ec:22:5b:7f:3d:01:93:25:74:da:a3:4e:66:6e:
1c:22:8f:60:bd:aa:ea:bb:90:bd:fa:02:71:0b:ce:44:7b:63:
61:fb:3b:df:28:e6:d7:41:46:fd:14:6b:5a:41:95:b6:0e:71:
49:4b:f7:ad:33:ce:68:f4:80:6c:f3:b5:2d:6c:44:33:31:46:
92:29:0f:67:23:76:97:04:fb:36:87:8a:1a:ef:be:3a:34:de:
b4:af:27:b2:75:ed:61:32:14:45:46:eb:a3:5a:a1:e0:9d:69:
87:75:f6:99:8d:ce:84:ad:ee:4f:e8:24:ee:5a:e2:fd:21:d2:
d5:f3:6e:a6:ee:ed:d3:da:f1:81:d5:66:a7:31:88:d0:62:7c:
4e:3a:a5:3b:68:41:78:54:9b:77:80:ac:74:97:6e:11:7b:43:
ae:1e:51:a6:91:7c:83:1c:82:8b:0c:c2:38:d5:f3:59:d8:9a:
90:9f:b1:b2:cf:15:b6:0f:54:ff:b0:97:41:3e:c1:f1:65:bd:
ed:02:0b:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+e5eUATO8P9+UZ2NyOkipHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDQ3MDIxNGM2OWU0MzBmOGIzODVlMDkzNmFkOTYwMTY2
YWNkZjAwHhcNMjYwNzI2MTQ0ODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDcwNGEwNzkwZWUwOTYzYTRkYTk2Yzk3N2VmNzQ3YjBiMmVkMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYy+BrRS9Sn+1tU1AvL31m/wmzCy
3xgWGJWj5BavSKMT8O4SHBoFBGraPOELmC+kqnKuXFC/uMgUBmu+GsE6C14Bic4z
iPT6Lq6Zj3HACPkUCCgK0aNgNdWcuvwB8T9AbkvdROXWFcblUYXI5IMqYnOlVFZy
2pmZwJHOTp9km08Myq740QKEMC9OWhGPwNqSrx7xmiOc20+BFCKmIWDmJukxLO6W
kfIMt2Spleh/JgdJqIAnRBBstKOiHOC7NEr5MAs+HkrQQPm90loyl0nvMkCeb8zF
2VYPJ1Mmyi07Zajm11RT65U0fgl3jU40a+n7nd0rsgf9hTVv1tFQ4sQyhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFBwSgeQ7gljpNqWyXfvdHsLLtDGMB8GA1UdIwQY
MBaAFCTUcCFMaeQw+LOF4JNq2WAWas3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2Yt
ZTI4Mjk1ZTU0YzNjLzEvVUhCS0I1RHVDV09rMnBiSmQtOTBld3N1ME1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2YtZTI4Mjk1ZTU0YzNj
LzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuR3SAwQA
1f/OMA0GCSqGSIb3DQEBCwUAA4IBAQBQzeR9CL7V5pdToECfMAKI5x1hsSZtl/ix
jZ2ECXsNYNdN/TlOOWptIcjZu/c4SNjKkqwjOtQ8m9vZ7CJbfz0BkyV02qNOZm4c
Io9gvarqu5C9+gJxC85Ee2Nh+zvfKObXQUb9FGtaQZW2DnFJS/etM85o9IBs87Ut
bEQzMUaSKQ9nI3aXBPs2h4oa7746NN60ryeyde1hMhRFRuujWqHgnWmHdfaZjc6E
re5P6CTuWuL9IdLV826m7u3T2vGB1WanMYjQYnxOOqU7aEF4VJt3gKx0l24Re0Ou
HlGmkXyDHIKLDMI41fNZ2JqQn7GyzxW2D1T/sJdBPsHxZb3tAguu
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:42 2026 by rpki-client