Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/UQPgXC5YLyhemh4haDz4UcFUd48.roa
File: UQPgXC5YLyhemh4haDz4UcFUd48.roa (raw, json)
Hash identifier: z6cVzQ3w/dJBzwtmqXmHZgSYwWH8t0kMdFDkm5gQmgg=
Subject key identifier: 51:03:E0:5C:2E:58:2F:28:5E:9A:1E:21:68:3C:F8:51:C1:54:77:8F
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A17883AC4DABA7A7BAAB1696C18A77AD1F
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/UQPgXC5YLyhemh4haDz4UcFUd48.roa
Signing time: Mon 26 Oct 2026 14:00:57 +0000
ROA not before: Mon 26 Oct 2026 14:00:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 85.232.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:ac:4d:ab:a7:a7:ba:ab:16:96:c1:8a:77:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 26 14:00:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5103e05c2e582f285e9a1e21683cf851c154778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:7f:0d:0a:21:a6:65:63:5d:ff:ec:15:39:
1c:b5:cb:8f:55:b0:27:62:f8:f3:8f:2f:df:16:04:
1d:2d:ef:ec:8f:72:e2:96:99:fc:9b:cc:fc:6e:51:
d3:2f:28:9d:1d:e1:c9:1b:ca:e3:22:a5:24:3e:85:
34:0a:e8:bc:9f:56:2e:c3:9c:a7:61:b5:5e:2b:1b:
32:58:bf:27:77:26:d6:6f:85:91:bb:ea:9a:94:8f:
a2:76:11:5c:28:5f:07:01:86:d8:6e:d0:00:35:a2:
ce:af:71:b7:5c:52:04:c1:fb:0f:fc:4a:f9:16:69:
72:fd:3d:a5:95:7f:92:13:69:09:22:7e:46:48:df:
5d:b9:a1:58:2c:41:57:9d:a6:e9:ca:5f:84:bc:e5:
69:12:be:cd:47:4a:e8:0a:77:5d:af:ef:97:13:25:
0c:3e:ab:c7:23:54:28:bd:bf:82:82:ed:a3:84:9f:
66:26:6a:5b:4e:af:15:8e:7b:9f:c3:59:15:02:6b:
6e:8c:8a:5b:01:f7:67:c4:e8:f7:5d:82:11:9b:06:
f0:3f:90:2c:6d:94:94:71:8e:84:15:6a:d7:7f:3d:
cf:ee:65:be:53:7d:70:e5:78:88:1e:f6:fb:33:58:
f7:1d:51:75:df:64:fc:51:be:87:4b:f2:06:15:3f:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:03:E0:5C:2E:58:2F:28:5E:9A:1E:21:68:3C:F8:51:C1:54:77:8F
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/UQPgXC5YLyhemh4haDz4UcFUd48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:25:12:17:af:a0:6f:f0:cc:1c:e4:66:55:a2:80:40:f8:04:
73:2d:d4:6d:d4:91:be:6a:50:dd:f3:0c:59:71:0a:e8:88:44:
1b:70:ba:f0:29:b7:75:81:70:13:ce:91:b1:8a:2a:14:ea:1b:
b2:3f:7d:e5:3e:9f:e9:30:d3:2e:90:d6:49:14:b9:b8:92:ac:
6b:cf:e8:04:51:4c:9a:ca:87:36:df:42:be:15:83:2d:cf:1b:
a5:33:8c:bf:04:1c:18:6c:f4:07:db:91:61:d3:01:61:0f:77:
22:56:fb:c5:ac:ca:8e:f3:e0:76:24:9d:74:04:7f:e2:eb:e0:
ca:c1:93:4d:0f:20:30:4b:3f:41:24:33:e5:f9:60:e2:9c:76:
2d:a3:9b:54:46:6b:e1:10:db:39:41:2c:39:a6:bc:4e:82:d0:
31:4a:25:12:11:3c:36:63:aa:1c:bd:61:58:eb:58:dc:50:ac:
c5:ae:ec:a3:4c:79:7e:01:a7:ea:35:43:da:7c:4c:73:23:d2:
e9:dc:18:43:f8:b5:1d:98:67:2c:a1:ce:87:f1:c6:52:34:d9:
ef:cb:a3:7d:22:af:c6:0c:e6:be:6f:0e:f7:5b:1f:3d:3c:9a:
ce:e4:60:07:b0:ee:d4:f8:dd:18:49:ab:d9:bc:04:42:43:dc:
c5:bc:57:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF4g6xNq6enuqsWlsGKd60fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYxMDI2MTQwMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTAzZTA1YzJlNTgyZjI4NWU5YTFlMjE2ODNjZjg1MWMxNTQ3NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulJ/DQohpmVjXf/sFTkctcuPVbAn
Yvjzjy/fFgQdLe/sj3Lilpn8m8z8blHTLyidHeHJG8rjIqUkPoU0Cui8n1Yuw5yn
YbVeKxsyWL8ndybWb4WRu+qalI+idhFcKF8HAYbYbtAANaLOr3G3XFIEwfsP/Er5
Fmly/T2llX+SE2kJIn5GSN9duaFYLEFXnabpyl+EvOVpEr7NR0roCnddr++XEyUM
PqvHI1Qovb+Cgu2jhJ9mJmpbTq8Vjnufw1kVAmtujIpbAfdnxOj3XYIRmwbwP5As
bZSUcY6EFWrXfz3P7mW+U31w5XiIHvb7M1j3HVF132T8Ub6HS/IGFT/uxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFED4FwuWC8oXpoeIWg8+FHBVHePMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvVVFQZ1hDNVlMeWhlbWg0aGFEejRVY0ZVZDQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVei3MA0G
CSqGSIb3DQEBCwUAA4IBAQArJRIXr6Bv8Mwc5GZVooBA+ARzLdRt1JG+alDd8wxZ
cQroiEQbcLrwKbd1gXATzpGxiioU6huyP33lPp/pMNMukNZJFLm4kqxrz+gEUUya
yoc230K+FYMtzxulM4y/BBwYbPQH25Fh0wFhD3ciVvvFrMqO8+B2JJ10BH/i6+DK
wZNNDyAwSz9BJDPl+WDinHYto5tURmvhENs5QSw5prxOgtAxSiUSETw2Y6ocvWFY
61jcUKzFruyjTHl+AafqNUPafExzI9Lp3BhD+LUdmGcsoc6H8cZSNNnvy6N9Iq/G
DOa+bw73Wx89PJrO5GAHsO7U+N0YSavZvARCQ9zFvFev
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:01:35 2026 by rpki-client