Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uIDlCUy67XPFEWBz6x4n0ImZhLc.roa
File: uIDlCUy67XPFEWBz6x4n0ImZhLc.roa (raw, json)
Hash identifier: 67vpVlPRHWetGtkHOwPm2BfFsYGANCbJw6T8ShkyfBY=
Subject key identifier: B8:80:E5:09:4C:BA:ED:73:C5:11:60:73:EB:1E:27:D0:89:99:84:B7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019ED4E76E253623FE7E9DDA302F0F230643
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uIDlCUy67XPFEWBz6x4n0ImZhLc.roa
Signing time: Wed 17 Jun 2026 09:26:37 +0000
ROA not before: Wed 17 Jun 2026 09:26:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 46.34.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:e7:6e:25:36:23:fe:7e:9d:da:30:2f:0f:23:06:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 17 09:26:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b880e5094cbaed73c5116073eb1e27d0899984b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:f5:e3:a2:73:88:dd:bf:83:0f:5d:ca:a8:
74:c3:dd:63:20:1a:f6:92:42:e1:c0:b5:56:2d:d9:
c6:a9:1d:03:d8:6e:c8:23:fd:76:10:92:68:71:8c:
9c:1a:06:8b:99:f4:b6:65:fe:15:33:d9:24:63:b3:
45:04:45:02:c8:45:fe:0e:73:5b:f5:a1:23:63:cd:
b1:e4:3d:d0:cd:0c:7b:69:64:30:7f:34:a5:4d:c8:
59:31:5c:b3:0a:ed:02:ba:b5:e6:a0:cd:46:33:d1:
c4:df:7a:de:b4:56:2a:f7:8d:12:53:3b:29:4d:5c:
f7:f1:51:d4:1c:7e:e2:d6:d6:cc:e3:3e:fb:84:91:
31:73:5c:69:06:dc:84:4c:1c:0e:fa:a7:7c:59:d1:
35:e2:c8:af:e0:14:11:ad:0c:64:ec:fd:bf:bf:d1:
1a:10:60:af:7d:de:26:9a:13:31:c2:32:bf:2d:e7:
d9:78:ba:c2:57:03:a4:55:de:98:7d:d4:7d:a0:0d:
29:a2:c2:a0:95:eb:fa:a0:1e:49:d9:32:e4:b9:10:
48:ea:20:e4:03:1c:e2:87:72:c3:d2:da:b8:6a:78:
b4:6a:cc:f7:3c:a9:bc:e6:51:95:b1:61:f2:6a:59:
e5:a0:c2:60:67:8b:33:68:bf:83:f6:8f:4a:be:56:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:80:E5:09:4C:BA:ED:73:C5:11:60:73:EB:1E:27:D0:89:99:84:B7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uIDlCUy67XPFEWBz6x4n0ImZhLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.18.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:5b:12:e1:b5:fb:da:84:26:39:60:4a:b6:06:47:1b:08:31:
4e:99:89:75:ed:43:7f:b7:34:c8:39:44:26:f7:f6:93:58:fe:
86:2a:20:11:1f:29:14:bc:13:e2:31:2f:10:43:9f:a0:df:4e:
3f:19:2a:ce:ad:07:52:0f:f8:58:c2:8a:85:3b:1e:bd:db:3b:
13:df:f7:80:f0:cf:bc:4b:b7:d8:e8:7d:62:26:64:70:98:e8:
d2:b3:08:0e:e1:d7:00:f1:cd:a2:05:c8:ce:93:bd:26:63:24:
b2:9f:5f:bf:7b:80:a3:90:bb:ea:17:cf:f9:f8:b8:45:c1:59:
0a:4a:49:a4:10:2a:ed:7a:7a:0e:0d:5b:a5:00:e4:d4:c3:75:
38:52:af:f5:fa:f7:33:d6:ac:4f:79:4d:99:9c:0e:f1:6d:96:
3f:e8:6b:e6:d0:56:fb:18:0d:f9:dc:16:63:23:17:40:74:c4:
ae:65:72:92:ef:d0:66:79:f7:bc:c1:0d:5b:a9:d8:82:83:70:
91:aa:3c:0d:88:39:23:f1:d0:ee:94:7e:89:ea:67:d8:6f:6b:
d8:8e:d5:5f:97:9e:d7:c0:cd:19:c8:91:0c:6a:8a:bb:d1:a9:
84:39:7e:79:4c:53:e9:ff:0e:22:17:66:02:75:96:06:61:2f:
5a:07:eb:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7U524lNiP+fp3aMC8PIwZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjE3MDkyNjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODgwZTUwOTRjYmFlZDczYzUxMTYwNzNlYjFlMjdkMDg5OTk4NGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt/146JziN2/gw9dyqh0w91jIBr2
kkLhwLVWLdnGqR0D2G7II/12EJJocYycGgaLmfS2Zf4VM9kkY7NFBEUCyEX+DnNb
9aEjY82x5D3QzQx7aWQwfzSlTchZMVyzCu0CurXmoM1GM9HE33retFYq940SUzsp
TVz38VHUHH7i1tbM4z77hJExc1xpBtyETBwO+qd8WdE14siv4BQRrQxk7P2/v9Ea
EGCvfd4mmhMxwjK/LefZeLrCVwOkVd6YfdR9oA0posKglev6oB5J2TLkuRBI6iDk
Axzih3LD0tq4ani0asz3PKm85lGVsWHyalnloMJgZ4szaL+D9o9KvlYGvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLiA5QlMuu1zxRFgc+seJ9CJmYS3MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvdUlEbENVeTY3WFBGRVdCejZ4NG4wSW1aaExjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLiISMA0G
CSqGSIb3DQEBCwUAA4IBAQCPWxLhtfvahCY5YEq2BkcbCDFOmYl17UN/tzTIOUQm
9/aTWP6GKiARHykUvBPiMS8QQ5+g304/GSrOrQdSD/hYwoqFOx692zsT3/eA8M+8
S7fY6H1iJmRwmOjSswgO4dcA8c2iBcjOk70mYySyn1+/e4CjkLvqF8/5+LhFwVkK
SkmkECrtenoODVulAOTUw3U4Uq/1+vcz1qxPeU2ZnA7xbZY/6Gvm0Fb7GA353BZj
IxdAdMSuZXKS79Bmefe8wQ1bqdiCg3CRqjwNiDkj8dDulH6J6mfYb2vYjtVfl57X
wM0ZyJEMaoq70amEOX55TFPp/w4iF2YCdZYGYS9aB+t/
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:44 2026 by rpki-client