Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/UUvzoSv4sOtoM_qTnWEfyZPh36w.roa
File: UUvzoSv4sOtoM_qTnWEfyZPh36w.roa (raw, json)
Hash identifier: OZ3Q2RMBzi2SuPU5m7aab1TJWLxduPklJN4eaFdd9Us=
Subject key identifier: 51:4B:F3:A1:2B:F8:B0:EB:68:33:FA:93:9D:61:1F:C9:93:E1:DF:AC
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01A13BC0328DF78F5CDA997692F665DC52C3
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/UUvzoSv4sOtoM_qTnWEfyZPh36w.roa
Signing time: Wed 14 Oct 2026 18:50:13 +0000
ROA not before: Wed 14 Oct 2026 18:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a14:16c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c0:32:8d:f7:8f:5c:da:99:76:92:f6:65:dc:52:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Oct 14 18:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=514bf3a12bf8b0eb6833fa939d611fc993e1dfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:74:f4:fe:b7:e4:54:40:8d:31:f9:ad:df:
da:a2:18:06:d3:0f:db:a1:07:f8:56:ba:2b:18:09:
ae:0e:67:61:5b:b4:68:cf:0b:40:a0:1b:56:34:77:
d8:2f:6f:40:d4:f3:d1:cc:bb:ba:ad:e2:e7:26:1b:
42:6f:01:80:fb:f6:a7:a1:8a:de:be:35:a0:97:97:
1c:84:6c:a7:66:07:e1:94:71:88:c7:e1:4d:fe:cb:
d3:de:55:64:9b:90:54:6d:eb:c7:56:fc:11:03:f0:
f0:8d:6d:72:9b:47:b5:e2:9e:c2:b4:f9:db:08:f5:
d2:2b:ce:98:57:36:fe:51:a3:bd:33:14:52:87:fa:
c1:86:1d:ef:0c:22:26:6c:a1:80:2e:24:e8:89:03:
82:0a:6c:e3:d2:f4:6c:b2:20:66:75:aa:1e:bd:50:
8c:18:7f:bb:1d:58:96:26:9e:db:a4:0d:0f:63:a9:
7d:e2:be:85:64:73:da:3e:56:d8:78:f2:8c:5b:87:
76:1d:90:47:dd:c7:8e:85:0a:2d:a7:83:a4:2c:35:
f4:14:ed:a9:35:bb:89:ed:16:ce:db:27:4b:87:b4:
c1:54:98:47:48:47:0a:96:71:52:0f:4e:e8:9b:c1:
ec:26:ac:c6:28:de:61:22:37:0e:bb:6c:b3:28:a1:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4B:F3:A1:2B:F8:B0:EB:68:33:FA:93:9D:61:1F:C9:93:E1:DF:AC
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/UUvzoSv4sOtoM_qTnWEfyZPh36w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
22:67:ab:63:bb:b3:a7:89:40:52:65:23:8a:9b:96:ff:46:33:
0f:ec:18:83:89:04:57:1d:b4:96:a9:c9:92:2a:3c:03:4f:ef:
95:10:41:ad:23:5b:75:da:15:3f:55:51:f9:01:25:8d:de:86:
e2:b3:2f:12:8a:cc:3e:a1:97:7f:fe:ba:9c:14:6c:a6:9c:1c:
26:67:d8:08:a8:c9:b9:a2:b5:a8:aa:95:a7:1f:f2:a3:92:f9:
70:e1:ee:30:5f:ab:8f:b0:af:3a:bc:0e:18:00:ef:b9:6f:85:
4c:ef:12:b6:32:d1:09:d8:ae:7a:41:fd:6e:31:33:45:9e:08:
e0:dc:d0:26:3d:8d:3d:26:89:f6:6b:f5:42:f3:68:95:c8:a0:
50:49:5d:57:16:03:d7:d6:bd:dc:d4:34:9d:24:80:62:84:56:
b2:33:e6:86:60:41:54:00:21:88:43:52:a7:e3:0f:a3:1a:5c:
8c:0c:01:24:22:22:df:8a:d0:d2:d5:b2:26:ee:60:39:42:f8:
53:c1:48:ce:cc:ca:18:30:a8:65:51:d6:40:fb:cf:ce:de:0b:
9f:17:03:6a:b1:8f:dc:8c:f2:a5:fa:1e:1c:d5:0f:b4:5f:4a:
b8:e9:06:c5:80:69:7b:d4:b7:99:3b:94:46:65:5a:9f:e5:2b:
ed:6c:57:4f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE7wDKN949c2pl2kvZl3FLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx
ZDFlM2EwHhcNMjYxMDE0MTg1MDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTRiZjNhMTJiZjhiMGViNjgzM2ZhOTM5ZDYxMWZjOTkzZTFkZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTB09P635FRAjTH5rd/aohgG0w/b
oQf4VrorGAmuDmdhW7RozwtAoBtWNHfYL29A1PPRzLu6reLnJhtCbwGA+/anoYre
vjWgl5cchGynZgfhlHGIx+FN/svT3lVkm5BUbevHVvwRA/DwjW1ym0e14p7CtPnb
CPXSK86YVzb+UaO9MxRSh/rBhh3vDCImbKGALiToiQOCCmzj0vRssiBmdaoevVCM
GH+7HViWJp7bpA0PY6l94r6FZHPaPlbYePKMW4d2HZBH3ceOhQotp4OkLDX0FO2p
NbuJ7RbO2ydLh7TBVJhHSEcKlnFSD07om8HsJqzGKN5hIjcOu2yzKKGxxQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFFL86Er+LDraDP6k51hH8mT4d+sMB8GA1UdIwQY
MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt
YWJmMGI1OTQ2NDZmLzEvVVV2em9TdjRzT3RvTV9xVG5XRWZ5WlBoMzZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm
LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQWwDAN
BgkqhkiG9w0BAQsFAAOCAQEAImerY7uzp4lAUmUjipuW/0YzD+wYg4kEVx20lqnJ
kio8A0/vlRBBrSNbddoVP1VR+QEljd6G4rMvEorMPqGXf/66nBRsppwcJmfYCKjJ
uaK1qKqVpx/yo5L5cOHuMF+rj7CvOrwOGADvuW+FTO8StjLRCdiuekH9bjEzRZ4I
4NzQJj2NPSaJ9mv1QvNolcigUEldVxYD19a93NQ0nSSAYoRWsjPmhmBBVAAhiENS
p+MPoxpcjAwBJCIi34rQ0tWyJu5gOUL4U8FIzszKGDCoZVHWQPvPzt4LnxcDarGP
3IzypfoeHNUPtF9KuOkGxYBpe9S3mTuURmVan+Ur7WxXTw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:10 2026 by rpki-client