Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/uqf0NqEmEtW9g1zp6LsgLBDNkA0.roa
File: uqf0NqEmEtW9g1zp6LsgLBDNkA0.roa (raw, json)
Hash identifier: nfv/SExuImIwGY8sYIZ92OGt7LWODVCJxszD6Vhf6s8=
Subject key identifier: BA:A7:F4:36:A1:26:12:D5:BD:83:5C:E9:E8:BB:20:2C:10:CD:90:0D
Certificate issuer: /CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Certificate serial: 019FC736C9342C12904194627EA5C60080A3
Authority key identifier: 05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/uqf0NqEmEtW9g1zp6LsgLBDNkA0.roa
Signing time: Mon 03 Aug 2026 10:41:24 +0000
ROA not before: Mon 03 Aug 2026 10:41:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 185.70.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:36:c9:34:2c:12:90:41:94:62:7e:a5:c6:00:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Validity
Not Before: Aug 3 10:41:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baa7f436a12612d5bd835ce9e8bb202c10cd900d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bc:51:12:a6:b2:b1:6b:da:51:ef:f6:ab:60:
58:b1:04:13:2a:01:48:f4:dd:9a:97:b2:53:d4:7b:
17:a1:d1:27:10:a7:ac:2a:f7:41:76:99:16:c2:c9:
51:3e:38:77:4f:9f:06:b0:53:ce:26:d6:38:99:d6:
32:9f:08:76:3b:6f:cc:14:25:26:85:dc:c6:46:b6:
79:22:26:f7:fc:3c:cb:e4:93:4c:22:24:ff:d5:6c:
e1:c2:12:80:a5:01:d5:48:97:dd:2e:85:ac:54:6c:
1c:27:d5:b9:85:53:33:33:05:08:28:f0:ee:d4:91:
3a:ce:5e:25:8f:66:4f:3b:7e:fc:00:83:ad:c5:26:
33:83:33:0d:e7:2c:e9:b2:f3:56:6b:72:90:6f:6a:
30:98:26:6f:93:cd:53:13:30:fa:cd:39:1c:44:65:
4d:7b:28:fc:92:a8:a4:3f:9e:b9:77:98:d6:68:8e:
61:15:de:17:6e:bc:64:f2:83:d8:e8:0e:67:5a:ae:
f3:fa:93:9f:95:80:64:27:39:82:43:b6:77:3c:14:
36:f0:47:79:1f:18:ff:fc:64:76:87:99:5a:4b:15:
9b:d4:e2:8b:9b:ed:68:df:93:47:eb:06:d2:1e:4e:
22:a1:92:7a:79:c7:06:54:92:ab:54:df:4e:f6:24:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:F4:36:A1:26:12:D5:BD:83:5C:E9:E8:BB:20:2C:10:CD:90:0D
X509v3 Authority Key Identifier:
keyid:05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/uqf0NqEmEtW9g1zp6LsgLBDNkA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.240.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:44:2f:36:cc:41:da:ff:0d:d1:7c:5e:4a:c8:fb:3c:d5:7b:
3b:49:15:07:9a:2d:32:a3:75:f1:e9:35:6a:1c:b3:48:94:59:
5a:d7:f1:3b:40:83:25:d6:67:55:b0:86:80:af:a9:b8:9b:0a:
47:4f:44:81:45:a9:ad:53:00:dc:90:f9:ef:08:c8:42:06:2d:
b7:46:cc:79:7b:0d:ef:af:8f:f9:d5:17:14:04:2e:fd:a7:78:
54:d5:5b:18:0d:41:d1:9e:2b:48:c1:7c:e6:f2:6f:e6:01:cb:
f9:90:25:2b:61:04:67:c4:34:4d:35:1d:3a:9b:23:f9:b8:e5:
84:05:40:2e:79:01:3b:f4:97:cd:fc:30:3e:bc:e1:e6:df:6f:
cd:ec:b3:37:33:51:6c:fa:02:d7:e4:cf:58:14:21:70:60:ce:
0f:f2:d1:f5:89:7a:c2:ed:f7:4d:0a:08:59:77:23:7f:fb:95:
c6:8f:e8:34:0c:f4:6e:9e:2c:63:ad:ab:37:ae:e1:3a:a5:9c:
a7:da:1a:e4:fb:fa:fc:0e:c8:a6:55:01:23:5c:a1:82:53:36:
ec:96:3b:5d:e3:03:a9:7d:b7:01:e7:71:b3:84:fb:5b:c3:d8:
4a:d1:70:8e:05:40:38:ea:04:d8:60:21:9a:6d:49:b8:fb:52:
87:e6:9c:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/HNsk0LBKQQZRifqXGAICjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjJmNzBlYjlhYWVmYWIyYjRlYzRlMWUwMjJlYzA2YjU0
NDdhYTgwHhcNMjYwODAzMTA0MTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWE3ZjQzNmExMjYxMmQ1YmQ4MzVjZTllOGJiMjAyYzEwY2Q5MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LxREqaysWvaUe/2q2BYsQQTKgFI
9N2al7JT1HsXodEnEKesKvdBdpkWwslRPjh3T58GsFPOJtY4mdYynwh2O2/MFCUm
hdzGRrZ5Iib3/DzL5JNMIiT/1WzhwhKApQHVSJfdLoWsVGwcJ9W5hVMzMwUIKPDu
1JE6zl4lj2ZPO378AIOtxSYzgzMN5yzpsvNWa3KQb2owmCZvk81TEzD6zTkcRGVN
eyj8kqikP565d5jWaI5hFd4Xbrxk8oPY6A5nWq7z+pOflYBkJzmCQ7Z3PBQ28Ed5
Hxj//GR2h5laSxWb1OKLm+1o35NH6wbSHk4ioZJ6eccGVJKrVN9O9iQ2nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLqn9DahJhLVvYNc6ei7ICwQzZANMB8GA1UdIwQY
MBaAFAUi9w65qu+rK07E4eAi7Aa1RHqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNMM0RybXE3NnNyVHNUaDRDTHNCclZFZXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zY2RiNjctMTFlOS00MDZhLThkMzIt
ZWJlYmVmYzk2Y2NiLzEvdXFmME5xRW1FdFc5ZzF6cDZMc2dMQkROa0EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zY2RiNjctMTFlOS00MDZhLThkMzItZWJlYmVmYzk2Y2Ni
LzEvQlNMM0RybXE3NnNyVHNUaDRDTHNCclZFZXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUbwMA0G
CSqGSIb3DQEBCwUAA4IBAQCqRC82zEHa/w3RfF5KyPs81Xs7SRUHmi0yo3Xx6TVq
HLNIlFla1/E7QIMl1mdVsIaAr6m4mwpHT0SBRamtUwDckPnvCMhCBi23Rsx5ew3v
r4/51RcUBC79p3hU1VsYDUHRnitIwXzm8m/mAcv5kCUrYQRnxDRNNR06myP5uOWE
BUAueQE79JfN/DA+vOHm32/N7LM3M1Fs+gLX5M9YFCFwYM4P8tH1iXrC7fdNCghZ
dyN/+5XGj+g0DPRunixjras3ruE6pZyn2hrk+/r8DsimVQEjXKGCUzbsljtd4wOp
fbcB53GzhPtbw9hK0XCOBUA46gTYYCGabUm4+1KH5pz0
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:05:41 2026 by rpki-client