Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UQCFNWM8PFlEO20zVA4VC0KJiGc.roa
File: UQCFNWM8PFlEO20zVA4VC0KJiGc.roa (raw, json)
Hash identifier: l050UM3ouGBq3kU/x+yPj0/fEBMjn1Sm0Iemy3jmQRg=
Subject key identifier: 51:00:85:35:63:3C:3C:59:44:3B:6D:33:54:0E:15:0B:42:89:88:67
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FFA3B34BC449D6FB02C057D983AAE16F5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UQCFNWM8PFlEO20zVA4VC0KJiGc.roa
Signing time: Thu 13 Aug 2026 08:26:51 +0000
ROA not before: Thu 13 Aug 2026 08:26:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219036
IP address blocks: 82.108.122.0/23 maxlen: 24
87.82.62.0/23 maxlen: 24
87.86.20.0/23 maxlen: 24
87.86.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:3b:34:bc:44:9d:6f:b0:2c:05:7d:98:3a:ae:16:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 13 08:26:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51008535633c3c59443b6d33540e150b42898867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:03:7e:e6:68:b3:0e:ad:32:e6:86:79:79:
ba:2a:ad:32:5f:f1:b7:37:d2:38:f9:0e:f6:35:95:
76:61:9b:e4:4f:b4:0f:cf:d5:02:03:73:2e:c1:02:
a4:89:28:07:85:a7:16:39:5a:53:4a:51:05:ed:37:
f0:86:8c:45:76:0a:76:0b:f7:4b:f0:aa:9d:c6:9a:
7d:2f:81:c6:e7:a9:48:36:8e:44:72:8a:47:a8:b3:
cb:ff:19:4f:43:9d:ad:c9:13:b8:17:78:fc:94:ae:
9c:8d:30:a8:5e:43:10:d6:4c:56:5c:98:5b:9a:75:
f3:d2:c2:3e:63:fe:a7:27:ff:57:62:40:20:5d:11:
01:6a:80:75:55:a5:f3:9f:ff:46:21:9a:8c:1e:05:
31:ef:e2:66:7d:64:c6:3c:6b:67:cb:f3:24:95:13:
77:ea:90:99:f0:24:02:6c:1a:c1:26:b0:a9:ca:ef:
9d:6e:d8:9a:4f:36:89:3e:41:2c:15:b8:53:2a:b0:
d4:69:1f:c7:75:ef:51:44:0e:75:fe:d3:67:84:f3:
0a:a1:5b:4d:4f:ff:e7:45:c3:6e:21:26:f9:86:b4:
d3:6a:ec:46:56:c7:bf:1e:fd:0d:63:9c:2a:26:a9:
06:d9:4b:cb:8a:52:55:0c:14:40:69:b6:6b:f4:1a:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:00:85:35:63:3C:3C:59:44:3B:6D:33:54:0E:15:0B:42:89:88:67
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UQCFNWM8PFlEO20zVA4VC0KJiGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.122.0/23
87.82.62.0/23
87.86.20.0/23
87.86.210.0/23
Signature Algorithm: sha256WithRSAEncryption
23:65:73:11:72:97:7a:d8:4e:c8:71:c5:5a:26:f8:a2:17:68:
65:23:fe:f1:34:a0:df:d3:a8:13:5d:d1:53:61:62:e8:02:fb:
ca:a2:92:b4:99:c1:ba:63:24:c4:6e:f6:92:3c:7d:ec:15:37:
7f:94:e8:d8:11:db:2f:33:ae:2d:08:19:4e:05:06:9a:2c:2a:
76:f0:0e:60:1c:26:fd:0a:05:1d:66:34:41:83:f4:fc:48:6a:
12:4d:ba:f3:46:bc:57:01:58:0b:b8:2c:dd:f6:f3:2d:90:b6:
c1:69:e2:4a:6a:23:04:c7:59:1a:e4:12:6d:04:49:9f:da:1a:
d8:1e:3f:b9:87:bd:13:7b:18:10:f6:5e:b1:cb:ba:ac:9f:b5:
ff:da:94:e2:71:a4:04:58:0e:cc:d6:ad:11:d6:64:dd:83:c1:
cb:0d:15:a8:b0:09:d5:6a:f5:00:fc:07:a5:55:89:32:a7:24:
b9:c3:50:7f:b5:4e:1c:b7:64:11:ee:d7:7c:f3:ae:f7:c7:ac:
e7:70:c2:88:2c:3d:76:08:f7:13:08:ea:da:43:28:a5:ab:fd:
60:80:93:ce:b8:66:0d:5c:63:15:71:02:87:5a:82:ff:b1:37:
77:a1:78:f7:c9:54:5e:03:4f:bf:4f:b5:ba:bb:a3:7f:d3:d9:
fb:e6:b8:b1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ/6OzS8RJ1vsCwFfZg6rhb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODEzMDgyNjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTAwODUzNTYzM2MzYzU5NDQzYjZkMzM1NDBlMTUwYjQyODk4ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshwDfuZosw6tMuaGeXm6Kq0yX/G3
N9I4+Q72NZV2YZvkT7QPz9UCA3MuwQKkiSgHhacWOVpTSlEF7TfwhoxFdgp2C/dL
8Kqdxpp9L4HG56lINo5EcopHqLPL/xlPQ52tyRO4F3j8lK6cjTCoXkMQ1kxWXJhb
mnXz0sI+Y/6nJ/9XYkAgXREBaoB1VaXzn/9GIZqMHgUx7+JmfWTGPGtny/MklRN3
6pCZ8CQCbBrBJrCpyu+dbtiaTzaJPkEsFbhTKrDUaR/Hde9RRA51/tNnhPMKoVtN
T//nRcNuISb5hrTTauxGVse/Hv0NY5wqJqkG2UvLilJVDBRAabZr9BoiswIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFEAhTVjPDxZRDttM1QOFQtCiYhnMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvVVFDRk5XTThQRmxFTzIwelZBNFZDMEtKaUdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBUmx6AwQB
V1I+AwQBV1YUAwQBV1bSMA0GCSqGSIb3DQEBCwUAA4IBAQAjZXMRcpd62E7IccVa
JviiF2hlI/7xNKDf06gTXdFTYWLoAvvKopK0mcG6YyTEbvaSPH3sFTd/lOjYEdsv
M64tCBlOBQaaLCp28A5gHCb9CgUdZjRBg/T8SGoSTbrzRrxXAVgLuCzd9vMtkLbB
aeJKaiMEx1ka5BJtBEmf2hrYHj+5h70TexgQ9l6xy7qsn7X/2pTicaQEWA7M1q0R
1mTdg8HLDRWosAnVavUA/AelVYkypyS5w1B/tU4ct2QR7td88673x6zncMKILD12
CPcTCOraQyilq/1ggJPOuGYNXGMVcQKHWoL/sTd3oXj3yVReA0+/T7W6u6N/09n7
5rix
-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:17 2026 by rpki-client