Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uw_8lnqKGnAIogM04WWfVFMqR1E.roa
File: uw_8lnqKGnAIogM04WWfVFMqR1E.roa (raw, json)
Hash identifier: nHxH7RNrQXLjZTctIU8L0ULPAqsTtEpbBCf5QD6Fk8c=
Subject key identifier: BB:0F:FC:96:7A:8A:1A:70:08:A2:03:34:E1:65:9F:54:53:2A:47:51
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C6C7B1C1D0FC9AA0A4A56F31D967EF8FA
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uw_8lnqKGnAIogM04WWfVFMqR1E.roa
Signing time: Tue 17 Feb 2026 16:42:13 +0000
ROA not before: Tue 17 Feb 2026 16:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211043
IP address blocks: 46.244.99.0/24 maxlen: 24
92.240.150.0/24 maxlen: 24
185.51.55.0/24 maxlen: 24
185.102.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:7b:1c:1d:0f:c9:aa:0a:4a:56:f3:1d:96:7e:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 17 16:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb0ffc967a8a1a7008a20334e1659f54532a4751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:d6:4e:2a:52:29:85:85:09:18:fd:11:45:
3a:68:55:2b:b4:fd:77:e7:97:56:a7:e3:b1:60:f6:
35:91:48:d9:00:66:d8:a8:be:6f:fb:88:6e:b5:8b:
2e:88:3b:5d:e3:31:5f:24:4c:2e:72:22:c1:f0:69:
62:84:3e:0c:60:81:64:10:1c:70:66:02:71:ac:58:
b2:e8:55:ff:8b:e4:68:18:b9:dd:95:b5:3c:db:ca:
d4:02:e3:39:d4:13:36:45:7f:70:5d:64:a4:b1:dc:
09:9f:3c:3c:96:3b:1d:54:8e:a8:a3:3a:d7:3e:b4:
37:8e:f0:5d:04:86:bf:d6:fd:4f:ee:68:e4:54:6f:
0c:36:46:df:41:c1:bc:10:14:2e:70:a1:8a:74:73:
37:f3:c9:b5:99:85:ea:d8:fb:ff:1f:e6:52:d5:d7:
a7:44:c2:4c:3d:e5:39:47:0b:56:11:27:75:b4:ac:
3d:5a:16:31:71:22:7a:b0:81:60:6c:f4:c9:a6:06:
41:72:56:4d:a5:8d:47:0f:0c:39:91:48:1f:f4:19:
91:16:54:1b:1b:77:b0:2a:bc:d8:52:65:86:ff:6b:
c8:d1:15:fd:aa:d8:8f:6a:33:d3:24:46:5b:2d:04:
5a:f8:50:f2:4a:4d:cf:f3:19:87:72:9b:8b:4b:1e:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0F:FC:96:7A:8A:1A:70:08:A2:03:34:E1:65:9F:54:53:2A:47:51
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uw_8lnqKGnAIogM04WWfVFMqR1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.99.0/24
92.240.150.0/24
185.51.55.0/24
185.102.171.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d2:54:65:7d:31:8c:07:ac:ff:b8:28:4e:2b:3a:cd:67:0b:
2e:aa:58:38:c0:1a:d2:5d:e0:10:07:90:ac:c1:24:53:e1:ef:
27:84:61:1c:24:6e:06:6d:5f:53:c5:dd:4a:95:15:c2:a4:72:
ce:1d:2f:60:58:b7:66:e2:03:6b:0d:2c:64:ef:e2:70:85:e8:
7b:eb:a3:ed:0c:81:0c:7c:73:f2:be:19:26:6d:c7:5f:94:f4:
2b:83:bd:2d:d7:d1:ab:a1:ba:6c:7b:09:f8:cc:bc:d5:f8:a4:
4a:6e:f3:83:69:16:b2:5d:1d:80:88:06:a6:93:60:eb:8e:81:
aa:e8:22:26:19:03:79:36:5e:64:4a:2a:4f:94:15:17:a1:9d:
5c:eb:1c:5d:5d:c1:89:2b:af:de:62:09:d6:d1:9e:65:0a:0b:
70:39:82:fb:f2:38:cd:7e:21:31:bf:01:5a:4f:2a:f1:33:e8:
a0:85:68:8d:2e:f0:25:c5:53:f7:46:7c:33:5b:40:78:0a:a3:
b7:df:a9:66:14:5a:66:19:bf:60:6a:5f:f4:d9:cb:eb:70:76:
be:c8:50:fb:a9:fb:62:f2:be:62:0d:6d:07:cf:21:00:5e:b7:
e6:ae:86:69:af:50:c8:16:cd:58:89:f3:11:05:1f:4d:8e:2e:
42:d6:df:82
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZxsexwdD8mqCkpW8x2Wfvj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwMjE3MTY0MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjBmZmM5NjdhOGExYTcwMDhhMjAzMzRlMTY1OWY1NDUzMmE0NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F3WTipSKYWFCRj9EUU6aFUrtP13
55dWp+OxYPY1kUjZAGbYqL5v+4hutYsuiDtd4zFfJEwuciLB8GlihD4MYIFkEBxw
ZgJxrFiy6FX/i+RoGLndlbU828rUAuM51BM2RX9wXWSksdwJnzw8ljsdVI6oozrX
PrQ3jvBdBIa/1v1P7mjkVG8MNkbfQcG8EBQucKGKdHM388m1mYXq2Pv/H+ZS1den
RMJMPeU5RwtWESd1tKw9WhYxcSJ6sIFgbPTJpgZBclZNpY1HDww5kUgf9BmRFlQb
G3ewKrzYUmWG/2vI0RX9qtiPajPTJEZbLQRa+FDySk3P8xmHcpuLSx6IxQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLsP/JZ6ihpwCKIDNOFln1RTKkdRMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvdXdfOGxucUtHbkFJb2dNMDRXV2ZWRk1xUjFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALvRjAwQA
XPCWAwQAuTM3AwQAuWarMA0GCSqGSIb3DQEBCwUAA4IBAQAp0lRlfTGMB6z/uChO
KzrNZwsuqlg4wBrSXeAQB5CswSRT4e8nhGEcJG4GbV9Txd1KlRXCpHLOHS9gWLdm
4gNrDSxk7+Jwheh766PtDIEMfHPyvhkmbcdflPQrg70t19Grobpsewn4zLzV+KRK
bvODaRayXR2AiAamk2DrjoGq6CImGQN5Nl5kSipPlBUXoZ1c6xxdXcGJK6/eYgnW
0Z5lCgtwOYL78jjNfiExvwFaTyrxM+ighWiNLvAlxVP3RnwzW0B4CqO336lmFFpm
Gb9gal/02cvrcHa+yFD7qfti8r5iDW0HzyEAXrfmroZpr1DIFs1YifMRBR9Nji5C
1t+C
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:11 2026 by rpki-client