Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/uytetcYAFGfMqCXdt1lwra4sNOU.roa
File: uytetcYAFGfMqCXdt1lwra4sNOU.roa (raw, json)
Hash identifier: vmw3AsVhs8W8PPJaHqnllGvBD18uaudfgHyNaoergVU=
Subject key identifier: BB:2B:5E:B5:C6:00:14:67:CC:A8:25:DD:B7:59:70:AD:AE:2C:34:E5
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019FA6144645C3F5F7BA8E332DA3B408F85B
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/uytetcYAFGfMqCXdt1lwra4sNOU.roa
Signing time: Tue 28 Jul 2026 00:16:14 +0000
ROA not before: Tue 28 Jul 2026 00:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 45.43.86.0/24 maxlen: 24
107.181.136.0/24 maxlen: 24
162.220.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:14:46:45:c3:f5:f7:ba:8e:33:2d:a3:b4:08:f8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jul 28 00:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb2b5eb5c6001467cca825ddb75970adae2c34e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:a0:e4:2d:3e:b7:fc:d9:d4:a2:72:1b:20:
32:88:8e:5a:d0:42:5e:ef:ef:70:bd:d2:14:31:47:
87:f7:c0:ba:a0:41:d9:4a:34:f2:48:e6:5c:e9:e7:
c5:70:c4:8f:b8:89:1a:0e:8c:f2:54:b7:6f:e5:cb:
0f:79:ff:0c:7c:dd:3b:1c:68:32:c9:eb:df:5c:e6:
f0:c6:21:ee:9d:28:82:c2:ac:99:d8:e4:ea:a8:74:
1e:40:05:a9:e4:11:21:d6:14:8f:7a:66:50:85:7c:
8d:ba:e2:b9:73:a0:50:3d:90:85:0d:7c:b6:52:60:
04:ba:25:67:25:e3:67:10:6c:45:f0:b0:b2:f7:e9:
2c:10:a3:fa:b6:14:d9:04:b6:0e:2f:d8:61:ee:12:
91:e6:bc:5d:f9:69:26:3f:2f:fe:f6:73:a4:42:28:
33:a4:24:e4:34:5d:d5:16:18:ba:51:c6:94:a3:55:
46:63:78:50:6a:c6:fe:b2:b2:49:01:77:9e:82:0a:
6b:06:9e:c9:d8:e5:eb:5e:53:8b:3b:a5:1a:d5:80:
2a:ed:5d:6e:f5:4d:08:86:07:2c:00:c5:91:59:87:
0e:f8:32:dd:b2:79:96:1f:73:ef:33:b1:ad:60:34:
98:0f:d1:7c:7f:0c:a1:1a:e3:a9:64:6b:a0:f1:f6:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2B:5E:B5:C6:00:14:67:CC:A8:25:DD:B7:59:70:AD:AE:2C:34:E5
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/uytetcYAFGfMqCXdt1lwra4sNOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.86.0/24
107.181.136.0/24
162.220.245.0/24
Signature Algorithm: sha256WithRSAEncryption
33:bd:28:4a:04:d5:43:4e:06:c2:e1:d4:07:51:e9:30:08:62:
7a:61:80:f4:af:23:bb:9a:8b:d3:b8:bd:b6:cb:57:95:66:b0:
2d:e9:91:fc:79:5c:42:af:6a:3c:be:e8:3a:ff:df:bc:7d:bb:
76:cc:12:fd:bd:a0:86:9d:5d:4c:96:f0:93:ed:86:fd:f4:56:
8a:bd:54:f7:2f:ac:30:d9:c2:5d:98:5f:82:c6:04:20:1e:a5:
aa:1c:82:ef:ee:98:eb:60:35:ec:14:d2:8d:ec:a0:ea:f0:91:
9c:40:db:06:a8:88:3c:02:58:b8:9a:15:9d:d9:35:dd:56:75:
f7:2d:3e:89:24:e6:39:51:03:6b:62:39:8f:4f:8e:e0:05:49:
7f:3b:ef:af:e3:5a:34:33:f4:ab:75:08:68:6a:9c:60:5c:ae:
3c:2e:93:62:aa:c9:d7:e7:a8:91:f0:99:9e:06:78:97:23:28:
1f:32:ba:fe:07:0f:29:d5:7b:97:4e:fa:27:74:51:64:36:94:
d4:49:6d:bb:0f:f4:1a:e9:15:5c:c3:5c:58:84:e3:1f:4b:d0:
70:41:32:79:77:71:3f:32:96:77:9e:96:d2:e9:82:96:eb:7d:
32:f0:ca:3c:c3:66:4e:e4:3e:90:a0:f7:61:bd:ef:cc:f0:65:
37:5e:7c:6d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+mFEZFw/X3uo4zLaO0CPhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjYwNzI4MDAxNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjJiNWViNWM2MDAxNDY3Y2NhODI1ZGRiNzU5NzBhZGFlMmMzNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCWg5C0+t/zZ1KJyGyAyiI5a0EJe
7+9wvdIUMUeH98C6oEHZSjTySOZc6efFcMSPuIkaDozyVLdv5csPef8MfN07HGgy
yevfXObwxiHunSiCwqyZ2OTqqHQeQAWp5BEh1hSPemZQhXyNuuK5c6BQPZCFDXy2
UmAEuiVnJeNnEGxF8LCy9+ksEKP6thTZBLYOL9hh7hKR5rxd+WkmPy/+9nOkQigz
pCTkNF3VFhi6UcaUo1VGY3hQasb+srJJAXeeggprBp7J2OXrXlOLO6Ua1YAq7V1u
9U0IhgcsAMWRWYcO+DLdsnmWH3PvM7GtYDSYD9F8fwyhGuOpZGug8fZD3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLsrXrXGABRnzKgl3bdZcK2uLDTlMB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvdXl0ZXRjWUFGR2ZNcUNYZHQxbHdyYTRzTk9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALStWAwQA
a7WIAwQAotz1MA0GCSqGSIb3DQEBCwUAA4IBAQAzvShKBNVDTgbC4dQHUekwCGJ6
YYD0ryO7movTuL22y1eVZrAt6ZH8eVxCr2o8vug6/9+8fbt2zBL9vaCGnV1MlvCT
7Yb99FaKvVT3L6ww2cJdmF+CxgQgHqWqHILv7pjrYDXsFNKN7KDq8JGcQNsGqIg8
Ali4mhWd2TXdVnX3LT6JJOY5UQNrYjmPT47gBUl/O++v41o0M/SrdQhoapxgXK48
LpNiqsnX56iR8JmeBniXIygfMrr+Bw8p1XuXTvondFFkNpTUSW27D/Qa6RVcw1xY
hOMfS9BwQTJ5d3E/MpZ3npbS6YKW630y8Mo8w2ZO5D6QoPdhve/M8GU3Xnxt
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:26:18 2026 by rpki-client