Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/UGEJJcZYX8ZqmsD8dq4DTSZFnYc.roa
File: UGEJJcZYX8ZqmsD8dq4DTSZFnYc.roa (raw, json)
Hash identifier: 6bDdvrBRvK8z6fMbmEov7BImiOdq7uQJNPOcRdfO/mo=
Subject key identifier: 50:61:09:25:C6:58:5F:C6:6A:9A:C0:FC:76:AE:03:4D:26:45:9D:87
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01A0B680761610B72F4100EEC7E762485DFA
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/UGEJJcZYX8ZqmsD8dq4DTSZFnYc.roa
Signing time: Fri 18 Sep 2026 21:51:07 +0000
ROA not before: Fri 18 Sep 2026 21:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8069
IP address blocks: 145.190.0.0/23 maxlen: 23
145.190.2.0/24 maxlen: 24
145.190.3.0/24 maxlen: 24
145.190.4.0/23 maxlen: 23
145.190.6.0/24 maxlen: 24
145.190.7.0/24 maxlen: 24
145.190.8.0/21 maxlen: 21
145.190.16.0/21 maxlen: 21
145.190.24.0/21 maxlen: 21
145.190.32.0/22 maxlen: 22
145.190.36.0/24 maxlen: 24
145.190.37.0/24 maxlen: 24
145.190.38.0/23 maxlen: 23
145.190.40.0/23 maxlen: 23
145.190.42.0/24 maxlen: 24
145.190.43.0/24 maxlen: 24
145.190.44.0/22 maxlen: 22
145.190.48.0/22 maxlen: 22
145.190.52.0/23 maxlen: 23
145.190.54.0/24 maxlen: 24
145.190.55.0/24 maxlen: 24
145.190.56.0/23 maxlen: 23
145.190.58.0/24 maxlen: 24
145.190.59.0/24 maxlen: 24
145.190.60.0/24 maxlen: 24
145.190.61.0/24 maxlen: 24
145.190.62.0/24 maxlen: 24
145.190.63.0/24 maxlen: 24
145.190.64.0/24 maxlen: 24
145.190.65.0/24 maxlen: 24
145.190.66.0/24 maxlen: 24
145.190.67.0/24 maxlen: 24
145.190.68.0/24 maxlen: 24
145.190.69.0/24 maxlen: 24
145.190.76.0/24 maxlen: 24
145.190.77.0/24 maxlen: 24
145.190.78.0/24 maxlen: 24
145.190.81.0/24 maxlen: 24
145.190.128.0/24 maxlen: 24
145.190.129.0/24 maxlen: 24
145.190.130.0/24 maxlen: 24
145.190.131.0/24 maxlen: 24
145.190.132.0/24 maxlen: 24
145.190.133.0/24 maxlen: 24
145.190.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:80:76:16:10:b7:2f:41:00:ee:c7:e7:62:48:5d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Sep 18 21:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50610925c6585fc66a9ac0fc76ae034d26459d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:b7:da:2e:f2:18:86:25:ba:5c:e8:72:45:
f2:90:4d:1d:5a:09:41:51:4c:ce:52:95:07:27:17:
d9:90:a7:ae:96:11:4a:fa:e9:ac:88:cc:98:cb:1d:
9c:50:56:5b:49:e5:67:dd:4e:ff:57:b0:aa:c4:49:
d5:bc:d4:36:55:f6:48:b4:6d:e7:d5:3d:3f:28:07:
0a:45:7e:b9:95:d4:6a:1f:a8:97:a6:56:46:b6:64:
96:cb:2e:c4:b7:0a:86:ff:35:92:3b:26:24:0b:91:
6b:92:d9:7f:a4:6d:0b:5c:3c:bd:9f:3d:00:d7:9b:
86:46:33:fc:49:98:b7:53:fc:51:dc:41:0d:b2:00:
f7:e1:42:0f:ee:8c:be:86:22:bb:23:78:59:0a:b1:
79:cb:a9:bf:2f:19:63:58:fe:12:ea:c0:e9:3e:96:
a1:77:eb:03:72:ac:19:6d:0c:65:88:4b:0d:54:4c:
f1:ad:60:83:1f:d1:48:04:92:02:82:34:4b:f8:46:
b7:4d:33:24:55:d2:d7:2a:40:8a:15:63:21:80:0d:
cb:59:2e:53:0a:6b:2b:92:52:b7:7e:fa:c3:b4:8a:
70:81:57:88:36:d3:ee:dd:c1:5e:b6:bc:82:d8:b5:
92:b2:75:19:f8:ca:60:45:8c:3c:36:d4:47:4f:6f:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:61:09:25:C6:58:5F:C6:6A:9A:C0:FC:76:AE:03:4D:26:45:9D:87
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/UGEJJcZYX8ZqmsD8dq4DTSZFnYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.190.0.0-145.190.69.255
145.190.76.0-145.190.78.255
145.190.81.0/24
145.190.128.0-145.190.134.255
Signature Algorithm: sha256WithRSAEncryption
48:18:86:a9:05:1d:09:e9:24:17:4f:5c:9e:f1:20:66:0e:bd:
93:c6:5f:0b:78:24:b7:f7:19:26:e0:ef:54:58:2f:28:2f:d9:
f3:52:a4:d3:02:0a:d4:ee:b4:3c:1a:9c:b1:51:8d:49:d3:0c:
6e:63:48:81:4b:fc:04:cb:f1:f8:b2:15:4b:6c:15:35:9c:56:
af:ee:ac:d0:0f:de:ef:96:7c:e9:1f:da:5f:88:89:24:59:fa:
f6:56:00:0e:c2:2a:51:4c:b8:2b:ac:cc:50:fd:06:40:97:06:
8f:5c:b4:cf:4c:f0:d3:d5:d1:2e:f5:75:5d:82:10:0e:36:fe:
9a:d1:82:cd:ff:5a:2d:02:a1:3a:4b:59:28:ca:61:ec:e9:0d:
43:01:82:ce:68:7e:23:df:a4:e2:be:65:7f:5b:bf:49:f6:f2:
0c:fc:8b:88:c7:e6:37:81:30:dc:a8:bb:c3:9d:92:68:ed:e3:
f5:47:92:81:45:63:59:bc:05:a5:ce:10:ae:b2:f8:42:9f:76:
3f:40:d2:63:fa:b7:3b:7d:e1:6d:a9:46:d9:3c:4b:2a:f6:64:
47:e3:a6:b8:ec:59:6d:55:1d:2f:73:e8:8f:4f:3d:3e:40:42:
71:fa:cc:f8:1f:8c:b5:d8:04:33:bf:da:49:ee:90:e2:c3:01:
4c:cd:f7:9d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAaC2gHYWELcvQQDux+diSF36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1
YjhmY2IwHhcNMjYwOTE4MjE1MTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDYxMDkyNWM2NTg1ZmM2NmE5YWMwZmM3NmFlMDM0ZDI2NDU5ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCm32i7yGIYlulzockXykE0dWglB
UUzOUpUHJxfZkKeulhFK+umsiMyYyx2cUFZbSeVn3U7/V7CqxEnVvNQ2VfZItG3n
1T0/KAcKRX65ldRqH6iXplZGtmSWyy7EtwqG/zWSOyYkC5Frktl/pG0LXDy9nz0A
15uGRjP8SZi3U/xR3EENsgD34UIP7oy+hiK7I3hZCrF5y6m/LxljWP4S6sDpPpah
d+sDcqwZbQxliEsNVEzxrWCDH9FIBJICgjRL+Ea3TTMkVdLXKkCKFWMhgA3LWS5T
CmsrklK3fvrDtIpwgVeINtPu3cFetryC2LWSsnUZ+MpgRYw8NtRHT28IDQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFFBhCSXGWF/GaprA/HauA00mRZ2HMB8GA1UdIwQY
MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt
MTNhMDZhMjY5YWE4LzEvVUdFSkpjWllYOFpxbXNEOGRxNERUU1pGblljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4
LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAATAvMAsDAwGRvgME
AZG+RDAMAwQCkb5MAwQAkb5OAwQAkb5RMAwDBAeRvoADBACRvoYwDQYJKoZIhvcN
AQELBQADggEBAEgYhqkFHQnpJBdPXJ7xIGYOvZPGXwt4JLf3GSbg71RYLygv2fNS
pNMCCtTutDwanLFRjUnTDG5jSIFL/ATL8fiyFUtsFTWcVq/urNAP3u+WfOkf2l+I
iSRZ+vZWAA7CKlFMuCuszFD9BkCXBo9ctM9M8NPV0S71dV2CEA42/prRgs3/Wi0C
oTpLWSjKYezpDUMBgs5ofiPfpOK+ZX9bv0n28gz8i4jH5jeBMNyou8Odkmjt4/VH
koFFY1m8BaXOEK6y+EKfdj9A0mP6tzt94W2pRtk8Syr2ZEfjprjsWW1VHS9z6I9P
PT5AQnH6zPgfjLXYBDO/2knukOLDAUzN950=
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:28:11 2026 by rpki-client