Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/UVBo34auPzVW9kaIzoMXjEdBc7k.roa
File: UVBo34auPzVW9kaIzoMXjEdBc7k.roa (raw, json)
Hash identifier: MhaqwV6wpmf1zB1AsY85UebPrt+jaLTkBQmoAF3FxmE=
Subject key identifier: 51:50:68:DF:86:AE:3F:35:56:F6:46:88:CE:83:17:8C:47:41:73:B9
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019F423A495767AFDED524C953E3F823FC4F
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/UVBo34auPzVW9kaIzoMXjEdBc7k.roa
Signing time: Wed 08 Jul 2026 14:55:43 +0000
ROA not before: Wed 08 Jul 2026 14:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 800
IP address blocks: 92.181.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:3a:49:57:67:af:de:d5:24:c9:53:e3:f8:23:fc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jul 8 14:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=515068df86ae3f3556f64688ce83178c474173b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:68:75:a5:bf:f1:fe:a7:c3:29:fc:de:2c:
2f:cf:79:9f:32:52:12:87:90:0f:8c:8f:e9:33:79:
98:2c:19:13:78:65:76:c1:a5:31:67:c1:3c:36:1e:
3a:3a:88:4a:7a:a9:14:9e:a1:cb:40:4c:e0:ed:a1:
b2:0d:91:89:ae:bc:92:4c:b7:5d:85:ac:00:c1:cd:
d7:41:ec:6e:7b:90:60:3f:c7:7d:69:92:97:cd:44:
cd:f0:05:be:7b:67:70:5c:11:05:c0:31:53:5f:ca:
93:f5:93:34:cc:6e:1a:20:c3:9b:e4:f0:a1:24:e0:
88:6d:50:b2:1d:af:07:c4:cf:82:33:a0:ce:b4:07:
f6:15:96:3c:42:92:26:cf:53:a4:c5:51:70:e8:67:
7e:17:65:d8:b8:da:fd:59:5f:cf:90:2d:84:b9:ba:
cc:b3:28:56:5f:0b:3a:47:5e:4c:2c:aa:e6:3d:64:
7f:bd:6a:d4:45:93:aa:42:36:85:c8:71:0a:fa:0b:
6f:8b:70:b0:f1:b9:7b:d1:0f:2e:57:e6:5e:ec:61:
c6:f4:d9:9b:f9:8c:27:31:42:76:ac:e9:6e:fb:28:
da:2c:22:b8:ec:6e:2d:da:f5:16:00:76:2b:0b:fb:
fb:e2:bb:39:2a:61:94:84:06:83:9d:af:9f:53:72:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:50:68:DF:86:AE:3F:35:56:F6:46:88:CE:83:17:8C:47:41:73:B9
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/UVBo34auPzVW9kaIzoMXjEdBc7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.181.171.0/24
Signature Algorithm: sha256WithRSAEncryption
05:66:39:c1:06:e9:d8:36:8d:90:f7:b6:77:26:cf:98:5a:02:
f7:92:2c:30:25:fd:7e:8c:8d:62:db:95:db:c6:9c:21:87:0e:
fa:c4:c8:aa:1c:bb:d2:48:c1:c3:d3:b8:63:bc:7a:77:c8:90:
bb:64:c5:18:1e:64:e4:0f:d3:6a:9e:c1:55:74:cf:a2:3e:f7:
14:9c:55:90:e1:e0:8d:4a:da:47:19:35:6a:bf:2a:51:a0:36:
a8:60:a4:91:5a:c5:76:76:e6:9a:e4:e7:f7:5c:27:ce:95:4a:
2c:64:ea:07:6a:7e:01:7d:70:7f:36:05:19:f1:97:10:28:53:
25:d7:1a:19:f1:31:a5:80:ef:75:cf:04:30:83:8c:99:56:9d:
f4:11:a3:25:17:da:a2:3f:ac:d7:cd:1c:fc:8b:0e:11:b4:24:
43:fb:a9:11:91:b3:5c:0c:c8:92:64:b3:ec:84:92:01:45:1a:
4b:a8:b0:a1:81:5d:fa:23:12:55:d1:31:2d:17:af:e1:42:b9:
53:d9:ad:1c:76:e0:33:fe:29:f8:72:52:89:08:2b:bc:88:38:
95:9f:47:55:e3:43:6d:67:e3:72:c1:29:dd:2b:9c:cc:35:3f:
fd:30:66:4d:ec:7f:05:41:2d:7b:46:98:f2:dd:08:5d:c2:20:
70:f0:fe:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9COklXZ6/e1STJU+P4I/xPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjYwNzA4MTQ1NTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTUwNjhkZjg2YWUzZjM1NTZmNjQ2ODhjZTgzMTc4YzQ3NDE3M2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYhodaW/8f6nwyn83iwvz3mfMlIS
h5APjI/pM3mYLBkTeGV2waUxZ8E8Nh46OohKeqkUnqHLQEzg7aGyDZGJrrySTLdd
hawAwc3XQexue5BgP8d9aZKXzUTN8AW+e2dwXBEFwDFTX8qT9ZM0zG4aIMOb5PCh
JOCIbVCyHa8HxM+CM6DOtAf2FZY8QpImz1OkxVFw6Gd+F2XYuNr9WV/PkC2EubrM
syhWXws6R15MLKrmPWR/vWrURZOqQjaFyHEK+gtvi3Cw8bl70Q8uV+Ze7GHG9Nmb
+YwnMUJ2rOlu+yjaLCK47G4t2vUWAHYrC/v74rs5KmGUhAaDna+fU3LOqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFFQaN+Grj81VvZGiM6DF4xHQXO5MB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvVVZCbzM0YXVQelZXOWthSXpvTVhqRWRCYzdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXLWrMA0G
CSqGSIb3DQEBCwUAA4IBAQAFZjnBBunYNo2Q97Z3Js+YWgL3kiwwJf1+jI1i25Xb
xpwhhw76xMiqHLvSSMHD07hjvHp3yJC7ZMUYHmTkD9NqnsFVdM+iPvcUnFWQ4eCN
StpHGTVqvypRoDaoYKSRWsV2duaa5Of3XCfOlUosZOoHan4BfXB/NgUZ8ZcQKFMl
1xoZ8TGlgO91zwQwg4yZVp30EaMlF9qiP6zXzRz8iw4RtCRD+6kRkbNcDMiSZLPs
hJIBRRpLqLChgV36IxJV0TEtF6/hQrlT2a0cduAz/in4clKJCCu8iDiVn0dV40Nt
Z+NywSndK5zMNT/9MGZN7H8FQS17Rpjy3QhdwiBw8P77
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:02 2026 by rpki-client