Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M-Upc5552GispvzqhtVjP-6-_wE.roa
File: M-Upc5552GispvzqhtVjP-6-_wE.roa (raw, json)
Hash identifier: peKQu9ti9+ibJHQ5a7/pFlbF19gNkW0Hx20/FUj5DLk=
Subject key identifier: 33:E5:29:73:9E:79:D8:68:AC:A6:FC:EA:86:D5:63:3F:EE:BE:FF:01
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F7EE884BD698696EB00305721E5AEB707
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M-Upc5552GispvzqhtVjP-6-_wE.roa
Signing time: Mon 20 Jul 2026 09:43:15 +0000
ROA not before: Mon 20 Jul 2026 09:43:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196609
IP address blocks: 195.110.14.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:e8:84:bd:69:86:96:eb:00:30:57:21:e5:ae:b7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 20 09:43:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33e529739e79d868aca6fcea86d5633feebeff01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:b1:18:d5:36:59:a8:a1:07:6a:75:fc:66:
d8:23:a2:be:ad:13:96:f5:c2:bf:c1:01:6f:67:2b:
ff:18:e9:ca:92:37:e2:6a:f8:e5:21:ae:e3:ef:0f:
f0:28:6f:0c:c5:3d:71:8f:7a:10:d1:84:2f:73:c9:
0c:f6:aa:b3:ee:0e:bf:55:e0:09:b3:8e:23:0a:65:
d2:f4:da:ba:3a:96:fe:45:87:c1:fb:ea:a7:4e:13:
ba:1a:33:4a:0e:fb:3f:3c:5e:8b:1f:f3:ff:a1:41:
8f:19:38:37:0f:9e:93:5f:b5:93:20:8e:fe:b1:d4:
e8:94:5a:25:ad:68:1a:cc:1a:55:e9:d2:1c:a0:13:
b3:72:59:cb:c2:a8:b7:9a:bf:6f:ab:d7:9b:ac:70:
c1:93:64:e0:95:59:52:48:13:2a:e1:90:a1:9b:eb:
0b:f7:d7:53:68:71:2b:c0:df:c1:97:85:e8:9b:93:
9a:3f:77:9a:6c:80:41:fa:71:a1:ee:07:b9:7b:3d:
ed:83:62:a1:e2:ba:50:5f:f4:3d:37:a2:db:19:61:
ea:13:8f:d6:eb:43:d4:a2:93:7a:d3:62:46:17:fb:
74:51:f9:d8:5a:8c:04:97:50:5d:59:c8:ef:34:75:
59:62:d6:43:cb:b8:e9:fb:cc:b0:e3:d1:56:f4:9a:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:29:73:9E:79:D8:68:AC:A6:FC:EA:86:D5:63:3F:EE:BE:FF:01
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M-Upc5552GispvzqhtVjP-6-_wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.14.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:16:47:4b:99:e5:5d:e3:d1:67:ed:d4:86:d7:94:6c:fa:43:
53:25:f8:19:46:7b:3e:c1:c0:af:7f:e2:f1:30:65:6c:ed:c2:
12:c8:7b:6c:37:a7:c4:29:33:b7:2c:80:bf:6e:57:a8:e2:be:
2d:38:4e:4f:e9:c0:6a:a0:c0:28:72:0e:e1:99:24:01:75:13:
b2:56:f1:81:4d:ce:52:71:1a:26:39:64:63:7a:5e:2f:26:48:
1e:c3:ef:29:e6:3c:d2:f8:89:cf:2f:07:65:3d:44:e9:46:96:
7d:ed:51:42:79:45:0d:13:fb:68:2c:49:4d:dc:3b:3c:e1:a5:
91:5d:85:d9:ba:27:24:b8:fc:a3:40:55:64:3f:35:19:f3:f5:
89:15:24:1d:66:e1:5e:a0:26:1c:93:63:a1:c7:24:67:5c:ce:
2f:20:10:e5:d4:6b:4f:12:73:15:7d:21:18:ff:25:0a:48:fe:
f3:10:6c:39:47:35:18:89:e3:08:23:3c:95:04:8a:5e:bf:fb:
31:0b:e8:e9:9a:61:99:d6:f1:16:81:3c:10:93:4a:1f:2c:05:
9d:52:30:15:30:1b:ac:43:46:3f:07:c5:cb:ce:42:66:bd:d5:
bb:89:44:69:e4:44:94:8d:fd:53:b6:c1:e1:8a:db:6d:31:fe:
27:5d:5f:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9+6IS9aYaW6wAwVyHlrrcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzIwMDk0MzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2U1Mjk3MzllNzlkODY4YWNhNmZjZWE4NmQ1NjMzZmVlYmVmZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2ixGNU2WaihB2p1/GbYI6K+rROW
9cK/wQFvZyv/GOnKkjfiavjlIa7j7w/wKG8MxT1xj3oQ0YQvc8kM9qqz7g6/VeAJ
s44jCmXS9Nq6Opb+RYfB++qnThO6GjNKDvs/PF6LH/P/oUGPGTg3D56TX7WTII7+
sdTolFolrWgazBpV6dIcoBOzclnLwqi3mr9vq9ebrHDBk2TglVlSSBMq4ZChm+sL
99dTaHErwN/Bl4Xom5OaP3eabIBB+nGh7ge5ez3tg2Kh4rpQX/Q9N6LbGWHqE4/W
60PUopN602JGF/t0UfnYWowEl1BdWcjvNHVZYtZDy7jp+8yw49FW9JoVYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPlKXOeedhorKb86obVYz/uvv8BMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvTS1VcGM1NTUyR2lzcHZ6cWh0VmpQLTYtX3dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw24OMA0G
CSqGSIb3DQEBCwUAA4IBAQAeFkdLmeVd49Fn7dSG15Rs+kNTJfgZRns+wcCvf+Lx
MGVs7cISyHtsN6fEKTO3LIC/bleo4r4tOE5P6cBqoMAocg7hmSQBdROyVvGBTc5S
cRomOWRjel4vJkgew+8p5jzS+InPLwdlPUTpRpZ97VFCeUUNE/toLElN3Ds84aWR
XYXZuickuPyjQFVkPzUZ8/WJFSQdZuFeoCYck2OhxyRnXM4vIBDl1GtPEnMVfSEY
/yUKSP7zEGw5RzUYieMIIzyVBIpev/sxC+jpmmGZ1vEWgTwQk0ofLAWdUjAVMBus
Q0Y/B8XLzkJmvdW7iURp5ESUjf1TtsHhitttMf4nXV8e
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:42 2026 by rpki-client