Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ujReHuIpLWFCa5-spgVu56mJ8Cc.roa
File: ujReHuIpLWFCa5-spgVu56mJ8Cc.roa (raw, json)
Hash identifier: F4Gk0mrcM22S6OLnTt6ITdYzIoYXoVeFyWB9ee/als4=
Subject key identifier: BA:34:5E:1E:E2:29:2D:61:42:6B:9F:AC:A6:05:6E:E7:A9:89:F0:27
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A178F811287CAB8B4FB84228575CFF0660
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ujReHuIpLWFCa5-spgVu56mJ8Cc.roa
Signing time: Mon 26 Oct 2026 16:08:05 +0000
ROA not before: Mon 26 Oct 2026 16:08:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 5.180.232.0/24 maxlen: 24
193.168.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f8:11:28:7c:ab:8b:4f:b8:42:28:57:5c:ff:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 26 16:08:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba345e1ee2292d61426b9faca6056ee7a989f027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:47:cb:34:14:73:95:50:06:37:a2:cd:9c:
0b:5c:df:d8:a4:8d:fa:3b:d4:49:ab:ea:24:3d:92:
10:7a:b7:4b:f7:a8:b7:63:76:15:e8:62:4b:f0:78:
72:f6:d6:bd:31:f8:0a:40:0e:ec:18:00:63:ac:1b:
8b:30:a5:a5:78:7f:8a:5e:3f:7d:f4:6b:20:57:bd:
9a:de:b1:b7:e3:b1:88:e6:42:30:0a:1b:cd:ca:38:
c5:6b:d6:ca:92:45:8d:bf:59:b3:18:cd:29:18:2f:
0f:bf:63:83:c2:90:ac:3c:c9:56:47:92:13:d1:10:
a7:95:d6:da:f2:fb:92:b4:f5:35:d4:22:31:16:df:
f3:31:dd:92:d6:94:69:9b:56:1c:54:a7:57:1b:64:
0d:c2:15:93:6b:21:be:e8:3e:b9:cf:d4:89:ec:a1:
09:81:a6:d6:07:c8:7e:5b:66:03:ea:b1:80:58:97:
5a:1a:80:61:0d:30:2d:80:74:41:10:09:57:f0:1d:
4e:61:ad:5a:b8:7e:4a:fb:25:0f:44:21:1e:d5:87:
b3:f8:80:d6:49:b0:4e:05:a6:aa:d7:98:c4:46:3e:
a2:b5:18:a3:33:62:c3:18:6a:c7:0e:0e:9f:3e:7b:
e1:8f:e2:e6:9a:e2:e5:4f:7d:05:e7:1a:12:4c:62:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:5E:1E:E2:29:2D:61:42:6B:9F:AC:A6:05:6E:E7:A9:89:F0:27
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ujReHuIpLWFCa5-spgVu56mJ8Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.232.0/24
193.168.208.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2a:ed:5d:e8:88:dd:d5:42:48:8d:77:52:f2:63:12:66:08:
d1:57:ae:07:13:0f:a9:8b:27:a8:b5:91:7a:d4:95:4a:e9:d5:
73:43:d6:21:6d:40:25:c2:ef:43:86:7a:82:83:44:0f:e3:15:
32:e0:fd:07:e8:61:55:52:57:2d:ce:31:65:e6:05:70:d1:59:
33:c0:af:74:06:cf:ec:e9:52:ee:cd:ec:62:49:ce:02:5c:5d:
64:05:aa:97:f5:2b:3d:99:9a:3c:26:93:d7:da:b8:cc:30:4b:
2b:a8:3b:ae:f9:54:cd:03:cd:66:80:28:5c:24:c2:8d:1b:d3:
72:c6:fc:ac:49:5a:23:32:43:2f:a6:92:df:53:02:38:31:22:
2c:7a:d3:3f:31:90:80:d9:13:ae:25:e0:8a:b7:98:28:d3:16:
f8:c6:cd:1d:4d:3c:f7:1d:66:07:47:bb:00:33:38:04:a7:62:
eb:04:c8:c9:cb:87:7a:ff:71:49:b6:50:ad:cb:5c:37:19:e5:
32:5d:85:94:14:f4:a8:1f:ed:89:ee:c2:62:1e:bf:20:25:ae:
ae:9c:5d:27:25:b0:ae:0a:ee:b0:ca:b2:d8:4e:c7:8a:9d:84:
a1:92:56:18:54:81:a6:ca:bf:3f:a7:ff:bb:7d:72:19:3a:11:
79:fe:6a:b5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaF4+BEofKuLT7hCKFdc/wZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYxMDI2MTYwODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTM0NWUxZWUyMjkyZDYxNDI2YjlmYWNhNjA1NmVlN2E5ODlmMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz81HyzQUc5VQBjeizZwLXN/YpI36
O9RJq+okPZIQerdL96i3Y3YV6GJL8Hhy9ta9MfgKQA7sGABjrBuLMKWleH+KXj99
9GsgV72a3rG347GI5kIwChvNyjjFa9bKkkWNv1mzGM0pGC8Pv2ODwpCsPMlWR5IT
0RCnldba8vuStPU11CIxFt/zMd2S1pRpm1YcVKdXG2QNwhWTayG+6D65z9SJ7KEJ
gabWB8h+W2YD6rGAWJdaGoBhDTAtgHRBEAlX8B1OYa1auH5K+yUPRCEe1Yez+IDW
SbBOBaaq15jERj6itRijM2LDGGrHDg6fPnvhj+LmmuLlT30F5xoSTGIVJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLo0Xh7iKS1hQmufrKYFbuepifAnMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvdWpSZUh1SXBMV0ZDYTUtc3BnVnU1Nm1KOENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbToAwQA
wajQMA0GCSqGSIb3DQEBCwUAA4IBAQAwKu1d6Ijd1UJIjXdS8mMSZgjRV64HEw+p
iyeotZF61JVK6dVzQ9YhbUAlwu9DhnqCg0QP4xUy4P0H6GFVUlctzjFl5gVw0Vkz
wK90Bs/s6VLuzexiSc4CXF1kBaqX9Ss9mZo8JpPX2rjMMEsrqDuu+VTNA81mgChc
JMKNG9NyxvysSVojMkMvppLfUwI4MSIsetM/MZCA2ROuJeCKt5go0xb4xs0dTTz3
HWYHR7sAMzgEp2LrBMjJy4d6/3FJtlCty1w3GeUyXYWUFPSoH+2J7sJiHr8gJa6u
nF0nJbCuCu6wyrLYTseKnYShklYYVIGmyr8/p/+7fXIZOhF5/mq1
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:36:31 2026 by rpki-client