Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UQscwiJDaFHwRnftmhyg-sWHm4c.roa
File: UQscwiJDaFHwRnftmhyg-sWHm4c.roa (raw, json)
Hash identifier: I7QsXVNqz0INy9RanZwG2ZUTFyHdUI36qjLRLpRu+lg=
Subject key identifier: 51:0B:1C:C2:22:43:68:51:F0:46:77:ED:9A:1C:A0:FA:C5:87:9B:87
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A1104D08B2BA4EF074ED74BCC92690946C
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UQscwiJDaFHwRnftmhyg-sWHm4c.roa
Signing time: Tue 06 Oct 2026 08:20:46 +0000
ROA not before: Tue 06 Oct 2026 08:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1104
IP address blocks: 145.102.132.0/22 maxlen: 22
145.107.4.0/22 maxlen: 22
145.107.12.0/22 maxlen: 22
145.110.0.0/16 maxlen: 16
145.116.48.0/20 maxlen: 20
145.116.208.0/21 maxlen: 21
145.116.216.0/24 maxlen: 24
194.171.96.0/21 maxlen: 21
2001:610:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:4d:08:b2:ba:4e:f0:74:ed:74:bc:c9:26:90:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 6 08:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=510b1cc222436851f04677ed9a1ca0fac5879b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:cc:d4:eb:28:cf:a3:25:3f:9d:3b:84:f9:
48:c3:90:ad:3a:bb:87:ad:8d:40:1c:56:5a:79:5f:
38:38:05:24:02:35:0e:16:f8:c6:31:9a:94:4a:49:
50:eb:95:38:6e:f5:c6:13:8c:97:ab:b5:1e:8a:56:
ec:aa:a1:c0:2b:31:a2:7d:fc:a4:69:a9:63:54:04:
f8:f0:97:68:a4:6e:69:15:16:56:dd:a4:bd:84:66:
42:5b:1e:00:c3:b5:26:b3:08:eb:38:5c:4e:de:c3:
a1:21:66:b4:04:b7:4f:f0:fc:6c:de:c1:8c:1b:88:
a6:4c:f9:91:6b:ce:f8:45:cb:f6:bf:7c:27:75:fc:
ae:6b:0b:af:43:27:ec:55:ea:6f:fa:35:01:80:db:
d4:6a:55:49:e7:ec:ea:3f:38:61:73:3b:27:5f:37:
14:bc:79:52:e4:4a:e3:ae:da:63:ed:a0:16:43:b7:
25:20:ef:af:80:e6:ab:a0:08:3c:0d:cd:59:b8:96:
99:0d:69:6e:1f:90:75:97:da:e8:cc:5a:ce:a6:91:
9d:7a:f6:3f:1c:7e:25:c2:a9:0e:9b:54:b3:89:a7:
c9:68:9f:8e:b1:fc:c9:6b:cc:31:5f:6e:ff:dc:67:
c6:8a:3e:03:b8:4c:00:a0:12:b7:d8:5a:fc:ee:39:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0B:1C:C2:22:43:68:51:F0:46:77:ED:9A:1C:A0:FA:C5:87:9B:87
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UQscwiJDaFHwRnftmhyg-sWHm4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.102.132.0/22
145.107.4.0/22
145.107.12.0/22
145.110.0.0/16
145.116.48.0/20
145.116.208.0-145.116.216.255
194.171.96.0/21
IPv6:
2001:610:120::/48
Signature Algorithm: sha256WithRSAEncryption
87:d9:70:83:df:25:1f:36:0f:a0:30:1e:e2:e8:dc:91:e8:43:
84:3f:fb:42:37:20:36:22:37:89:90:47:c8:58:c4:dc:c2:13:
15:44:22:83:92:c1:89:e2:e7:a7:92:13:f8:7b:83:7a:25:46:
6b:7f:4a:32:b0:f7:ca:4f:29:da:bf:0c:56:db:f3:56:ce:52:
d9:70:c1:97:bb:ec:93:4d:3d:1b:d6:8e:51:99:65:f0:40:8b:
4a:bb:f1:d1:a4:79:07:b4:84:e4:4b:00:0a:ad:4f:3f:d1:83:
36:67:3b:4f:03:65:a6:9a:4c:58:d9:d0:7b:29:2b:5e:19:64:
4e:f4:ef:46:bb:68:16:bf:b3:77:e9:cc:18:6d:ee:3f:16:45:
09:3a:10:c4:80:1a:67:df:e2:29:4c:8a:c6:5c:f7:87:c4:1a:
6d:67:23:90:94:6a:13:4b:f1:aa:eb:c0:85:ff:cb:7c:2f:c2:
34:04:7e:97:68:9c:24:85:80:7a:9f:79:ea:42:0b:ff:53:bf:
33:52:ee:d7:74:fc:79:b7:b8:cf:eb:f7:b1:c3:35:4c:86:20:
fe:59:5d:13:9e:2c:63:06:b5:8b:3f:bf:0d:00:30:b6:89:61:
64:ae:f3:6a:68:94:2a:72:70:b5:24:0f:c6:b5:d9:a2:e2:dc:
b1:48:df:b3
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAaEQTQiyuk7wdO10vMkmkJRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjYxMDA2MDgyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTBiMWNjMjIyNDM2ODUxZjA0Njc3ZWQ5YTFjYTBmYWM1ODc5Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw/M1Osoz6MlP507hPlIw5CtOruH
rY1AHFZaeV84OAUkAjUOFvjGMZqUSklQ65U4bvXGE4yXq7UeilbsqqHAKzGiffyk
aaljVAT48JdopG5pFRZW3aS9hGZCWx4Aw7UmswjrOFxO3sOhIWa0BLdP8Pxs3sGM
G4imTPmRa874Rcv2v3wndfyuawuvQyfsVepv+jUBgNvUalVJ5+zqPzhhczsnXzcU
vHlS5Erjrtpj7aAWQ7clIO+vgOaroAg8Dc1ZuJaZDWluH5B1l9rozFrOppGdevY/
HH4lwqkOm1SziafJaJ+OsfzJa8wxX27/3GfGij4DuEwAoBK32Fr87jlZRwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFFELHMIiQ2hR8EZ37ZocoPrFh5uHMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvVVFzY3dpSkRhRkh3Um5mdG1oeWctc1dIbTRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjA3BAIAATAxAwQCkWaEAwQC
kWsEAwQCkWsMAwMAkW4DBASRdDAwDAMEBJF00AMEAJF02AMEA8KrYDAPBAIAAjAJ
AwcAIAEGEAEgMA0GCSqGSIb3DQEBCwUAA4IBAQCH2XCD3yUfNg+gMB7i6NyR6EOE
P/tCNyA2IjeJkEfIWMTcwhMVRCKDksGJ4uenkhP4e4N6JUZrf0oysPfKTynavwxW
2/NWzlLZcMGXu+yTTT0b1o5RmWXwQItKu/HRpHkHtITkSwAKrU8/0YM2ZztPA2Wm
mkxY2dB7KSteGWRO9O9Gu2gWv7N36cwYbe4/FkUJOhDEgBpn3+IpTIrGXPeHxBpt
ZyOQlGoTS/Gq68CF/8t8L8I0BH6XaJwkhYB6n3nqQgv/U78zUu7XdPx5t7jP6/ex
wzVMhiD+WV0TnixjBrWLP78NADC2iWFkrvNqaJQqcnC1JA/Gtdmi4tyxSN+z
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:08:53 2026 by rpki-client