Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/UF4pzZ4nyW6OV0vWDdSDtWl2FC4.roa
File: UF4pzZ4nyW6OV0vWDdSDtWl2FC4.roa (raw, json)
Hash identifier: i7rT7fXaiMm+2WOfWQg8Ficq8leAUCxuWRS6LiqQgSo=
Subject key identifier: 50:5E:29:CD:9E:27:C9:6E:8E:57:4B:D6:0D:D4:83:B5:69:76:14:2E
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 019B7BA4E55883F9944645389E5A928ECAA2
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/UF4pzZ4nyW6OV0vWDdSDtWl2FC4.roa
Signing time: Thu 01 Jan 2026 22:19:22 +0000
ROA not before: Thu 01 Jan 2026 22:19:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60266
IP address blocks: 185.33.157.0/24 maxlen: 24
185.33.159.0/24 maxlen: 24
2a00:cb20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:e5:58:83:f9:94:46:45:38:9e:5a:92:8e:ca:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Jan 1 22:19:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=505e29cd9e27c96e8e574bd60dd483b56976142e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:31:10:81:1d:26:96:24:1d:a5:ec:d5:eb:
f7:e8:ee:68:35:36:7d:85:51:70:6c:8a:b8:2b:7d:
e8:1e:f4:87:fb:bc:27:a1:f3:43:fd:09:f3:cd:5f:
79:0f:f7:91:69:e2:11:80:d5:f8:c0:9b:d5:bf:b1:
41:32:67:98:a2:f4:cc:49:52:1d:5d:d3:3a:4b:70:
34:69:7b:f0:5c:d5:48:3a:79:e5:0a:fb:97:74:bc:
96:c2:e7:a9:2a:cd:52:96:ab:1a:66:02:7d:ad:90:
b4:d7:dc:c6:6c:a9:f4:2e:2f:2c:d4:f1:9f:f5:08:
dc:9e:f8:f9:51:6b:31:73:4a:00:3b:71:84:91:79:
32:c9:52:35:09:1a:9c:d2:52:77:af:a8:b7:e7:42:
ef:43:07:e4:e3:e3:ca:6b:a8:86:1d:4d:f2:6c:7f:
ac:6a:88:97:4d:16:9e:08:fb:9d:d3:85:96:57:02:
4c:5f:1d:bc:e2:75:9c:b5:cf:db:03:bf:21:65:19:
ef:21:26:9e:15:d1:35:1c:51:99:67:d3:28:2d:3d:
26:d8:7f:ca:f1:d6:89:e4:03:0b:b7:0b:fd:19:a8:
c8:d6:a7:d8:68:a6:71:91:77:8d:54:5f:af:1f:63:
1d:47:23:a2:b9:8f:b9:a9:27:0c:57:21:3e:10:91:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5E:29:CD:9E:27:C9:6E:8E:57:4B:D6:0D:D4:83:B5:69:76:14:2E
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/UF4pzZ4nyW6OV0vWDdSDtWl2FC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.157.0/24
185.33.159.0/24
IPv6:
2a00:cb20::/32
Signature Algorithm: sha256WithRSAEncryption
84:08:98:55:b6:df:09:2e:6e:ee:b5:42:f1:c3:9e:0a:ce:fa:
f7:d6:45:7a:b2:44:08:d1:d5:6e:d4:52:33:fd:57:d1:06:82:
4f:09:cb:32:e5:7e:1b:6c:27:67:5c:57:dc:e6:5d:c3:14:a9:
39:7a:91:01:19:36:3e:12:a9:15:e1:79:82:fe:55:d5:09:d9:
99:8f:d3:5f:cb:bf:a3:ff:99:d4:95:34:1c:48:63:3e:7d:d1:
f1:a5:57:7d:1b:d3:e5:de:f3:f7:da:71:c6:5d:2b:fc:db:45:
93:43:84:f2:87:85:e5:ac:be:c9:93:e2:f2:c4:8c:23:07:70:
86:f7:20:0e:34:19:f0:e0:07:b7:1f:a2:3d:06:a9:61:c5:36:
53:e1:fa:4a:89:bb:8e:b7:04:a4:7e:0d:b9:7f:b8:dd:74:9f:
4a:dc:22:53:72:ea:91:66:93:09:ed:50:12:30:80:fc:57:46:
c4:b6:1c:3f:6d:3e:d2:ef:ba:55:e4:ab:4a:02:44:79:a5:70:
ce:c5:39:45:2e:7e:8b:e5:c9:b4:43:1d:42:53:58:b9:50:3b:
7c:58:93:1d:97:9a:f6:b0:31:d3:af:5c:e9:d7:c3:2e:4d:17:
dd:15:55:e1:9c:3a:82:1c:6f:e3:4c:6a:b6:11:97:be:93:c9:
7d:2e:ca:e2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt7pOVYg/mURkU4nlqSjsqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGVlYTEzMDcyMWU5Y2QxOTc2ZmQ3ZTBmMzRjOTZkZjZl
YWM2YjAwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDVlMjljZDllMjdjOTZlOGU1NzRiZDYwZGQ0ODNiNTY5NzYxNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17oxEIEdJpYkHaXs1ev36O5oNTZ9
hVFwbIq4K33oHvSH+7wnofND/QnzzV95D/eRaeIRgNX4wJvVv7FBMmeYovTMSVId
XdM6S3A0aXvwXNVIOnnlCvuXdLyWwuepKs1SlqsaZgJ9rZC019zGbKn0Li8s1PGf
9Qjcnvj5UWsxc0oAO3GEkXkyyVI1CRqc0lJ3r6i350LvQwfk4+PKa6iGHU3ybH+s
aoiXTRaeCPud04WWVwJMXx284nWctc/bA78hZRnvISaeFdE1HFGZZ9MoLT0m2H/K
8daJ5AMLtwv9GajI1qfYaKZxkXeNVF+vH2MdRyOiuY+5qScMVyE+EJGdYQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFBeKc2eJ8lujldL1g3Ug7VpdhQuMB8GA1UdIwQY
MBaAFMUO6hMHIenNGXb9fg80yW326sawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQt
NjNmNWZlMTEwZTc2LzEvVUY0cHpaNG55VzZPVjB2V0RkU0R0V2wyRkM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQtNjNmNWZlMTEwZTc2
LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuSGdAwQA
uSGfMA0EAgACMAcDBQAqAMsgMA0GCSqGSIb3DQEBCwUAA4IBAQCECJhVtt8JLm7u
tULxw54Kzvr31kV6skQI0dVu1FIz/VfRBoJPCcsy5X4bbCdnXFfc5l3DFKk5epEB
GTY+EqkV4XmC/lXVCdmZj9Nfy7+j/5nUlTQcSGM+fdHxpVd9G9Pl3vP32nHGXSv8
20WTQ4Tyh4XlrL7Jk+LyxIwjB3CG9yAONBnw4Ae3H6I9BqlhxTZT4fpKibuOtwSk
fg25f7jddJ9K3CJTcuqRZpMJ7VASMID8V0bEthw/bT7S77pV5KtKAkR5pXDOxTlF
Ln6L5cm0Qx1CU1i5UDt8WJMdl5r2sDHTr1zp18MuTRfdFVXhnDqCHG/jTGq2EZe+
k8l9Lsri
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:03 2026 by rpki-client