Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/Uw0jrwx0IdXQoiKTJrYEbeeMMWM.roa
File: Uw0jrwx0IdXQoiKTJrYEbeeMMWM.roa (raw, json)
Hash identifier: 5B/exxRvB/e4faBVuRg/6C6JUY3dZXdeStf6YjAxx6c=
Subject key identifier: 53:0D:23:AF:0C:74:21:D5:D0:A2:22:93:26:B6:04:6D:E7:8C:31:63
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 019B7EA758BDAD47C9709B135076A927C6B8
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/Uw0jrwx0IdXQoiKTJrYEbeeMMWM.roa
Signing time: Fri 02 Jan 2026 12:20:54 +0000
ROA not before: Fri 02 Jan 2026 12:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206768
IP address blocks: 185.79.212.0/24 maxlen: 24
2a01:7640:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:58:bd:ad:47:c9:70:9b:13:50:76:a9:27:c6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Jan 2 12:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=530d23af0c7421d5d0a2229326b6046de78c3163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:ff:f7:80:79:53:c8:ef:b6:dd:00:34:1d:
ea:32:a1:f8:a0:03:70:1c:6f:c9:81:86:42:2d:52:
2e:94:2c:f5:4d:3b:57:ee:ab:f8:73:58:17:e9:d9:
fb:01:fb:44:45:27:d2:1a:39:6e:06:fb:88:da:d5:
6f:10:05:e7:c9:50:e7:49:91:67:fe:f9:d5:6f:9b:
a9:24:e9:b4:c3:b4:ee:0b:2a:0d:b2:8f:f2:a4:fa:
ff:09:bc:90:d1:25:56:62:1c:1b:2e:6c:f1:bc:02:
6e:28:f5:3c:1f:a9:47:ed:2f:8f:95:01:13:78:d3:
f2:3e:c8:2a:28:15:d2:58:0c:d1:2d:3e:46:65:5c:
5b:2c:e8:83:e6:ba:7e:60:e8:a3:1b:18:a4:f9:9e:
96:e0:c6:65:d9:66:40:41:5d:af:dd:62:e9:e0:66:
34:95:05:2c:6e:33:ef:d7:c3:f4:9b:f3:74:12:cc:
ed:4c:8f:2e:04:60:c4:0c:a4:91:16:7b:4b:98:9e:
20:f2:46:8a:45:3b:00:fc:8e:81:89:b3:c5:43:25:
bf:d8:dd:2e:82:32:fa:4a:5c:62:fb:ab:89:73:48:
88:e9:24:96:d4:1b:bb:51:8a:2a:be:ea:80:3e:b6:
a8:d0:e8:61:79:05:36:d4:c8:21:41:71:06:21:42:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0D:23:AF:0C:74:21:D5:D0:A2:22:93:26:B6:04:6D:E7:8C:31:63
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/Uw0jrwx0IdXQoiKTJrYEbeeMMWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.212.0/24
IPv6:
2a01:7640:9000::/48
Signature Algorithm: sha256WithRSAEncryption
52:84:42:4e:a0:25:b6:68:3f:ee:bf:9c:95:e9:32:56:d9:76:
79:6f:5b:65:0f:9c:92:b6:41:8e:32:36:34:89:45:33:1b:8d:
0d:83:79:cb:aa:b1:e4:da:2a:57:43:b9:ab:f4:6c:58:3c:62:
e1:9e:63:20:83:0e:d2:20:40:b2:e2:5f:98:e2:e9:4d:ad:6f:
60:e4:e7:b6:3e:a7:60:6c:47:99:a5:de:12:85:61:8d:6d:3e:
cc:81:cb:18:88:e8:63:d0:4c:a3:16:29:37:05:41:19:bc:3c:
53:d2:57:00:83:25:31:c6:5a:08:ba:1a:68:ff:1c:06:8b:20:
82:72:0b:af:37:99:aa:6f:45:78:fd:08:ac:1f:cf:3b:fd:c7:
a0:c2:93:83:72:4f:7d:e0:86:4e:94:9b:6d:9d:74:54:c5:a1:
a1:4b:1f:83:a8:31:dd:41:6e:6c:9b:58:12:bd:69:8a:12:1e:
b8:6e:18:d4:0c:ce:24:60:0b:be:16:23:02:34:33:8d:fd:75:
ab:c1:53:22:0e:82:82:4c:7f:a8:2e:ac:c5:4f:2d:8d:ec:7b:
bd:a6:e0:8e:0d:2a:c6:0e:ce:94:35:be:df:59:54:97:a0:a1:
0e:c5:af:6e:5b:ec:59:37:00:07:43:1f:5d:2b:6b:cf:6a:ba:
65:af:79:67
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt+p1i9rUfJcJsTUHapJ8a4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZGVjNjQxMDUxYjAyNmI5NWM4NDU5MTUwY2E0N2RkYWVj
ODk2NjgwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzBkMjNhZjBjNzQyMWQ1ZDBhMjIyOTMyNmI2MDQ2ZGU3OGMzMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3X/94B5U8jvtt0ANB3qMqH4oANw
HG/JgYZCLVIulCz1TTtX7qv4c1gX6dn7AftERSfSGjluBvuI2tVvEAXnyVDnSZFn
/vnVb5upJOm0w7TuCyoNso/ypPr/CbyQ0SVWYhwbLmzxvAJuKPU8H6lH7S+PlQET
eNPyPsgqKBXSWAzRLT5GZVxbLOiD5rp+YOijGxik+Z6W4MZl2WZAQV2v3WLp4GY0
lQUsbjPv18P0m/N0EsztTI8uBGDEDKSRFntLmJ4g8kaKRTsA/I6BibPFQyW/2N0u
gjL6Slxi+6uJc0iI6SSW1Bu7UYoqvuqAPrao0OhheQU21MghQXEGIUIerwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFMNI68MdCHV0KIikya2BG3njDFjMB8GA1UdIwQY
MBaAFJTexkEFGwJrlchFkVDKR92uyJZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE43R1FRVWJBbXVWeUVXUlVNcEgzYTdJbG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTExMTMtZWQ4NS00MmIyLWI2NGYt
OWVhNjQ4NjJhOWFiLzEvVXcwanJ3eDBJZFhRb2lLVEpyWUViZWVNTVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTExMTMtZWQ4NS00MmIyLWI2NGYtOWVhNjQ4NjJhOWFi
LzEvbE43R1FRVWJBbXVWeUVXUlVNcEgzYTdJbG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuU/UMA8E
AgACMAkDBwAqAXZAkAAwDQYJKoZIhvcNAQELBQADggEBAFKEQk6gJbZoP+6/nJXp
MlbZdnlvW2UPnJK2QY4yNjSJRTMbjQ2DecuqseTaKldDuav0bFg8YuGeYyCDDtIg
QLLiX5ji6U2tb2Dk57Y+p2BsR5ml3hKFYY1tPsyByxiI6GPQTKMWKTcFQRm8PFPS
VwCDJTHGWgi6Gmj/HAaLIIJyC683mapvRXj9CKwfzzv9x6DCk4NyT33ghk6Um22d
dFTFoaFLH4OoMd1BbmybWBK9aYoSHrhuGNQMziRgC74WIwI0M439davBUyIOgoJM
f6gurMVPLY3se72m4I4NKsYOzpQ1vt9ZVJegoQ7Fr25b7Fk3AAdDH10ra89qumWv
eWc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:18 2026 by rpki-client