Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/UNcrdBCA_IAi--0l3IsFosaU7lY.roa
File: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (raw, json)
Hash identifier: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=
Subject key identifier: 50:D7:2B:74:10:80:FC:80:22:FB:ED:25:DC:8B:05:A2:C6:94:EE:56
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691A5589A8575431A30537EC226B14
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/UNcrdBCA_IAi--0l3IsFosaU7lY.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 45.67.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:55:89:a8:57:54:31:a3:05:37:ec:22:6b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50d72b741080fc8022fbed25dc8b05a2c694ee56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:5e:41:ca:b3:c7:d3:5f:25:f8:bb:24:6a:
ba:46:f3:06:af:80:05:d6:b5:5c:11:3f:59:ec:b1:
d2:ba:f3:a6:33:60:2a:f0:a9:d0:a3:dd:ef:bb:9c:
e3:a5:a8:43:e9:6c:9f:22:74:4b:09:4f:92:6f:c5:
17:25:9f:de:05:37:bd:f9:43:56:8b:0d:2c:ce:a2:
a3:96:57:11:61:d3:ea:75:c0:ba:64:b1:41:fe:5c:
14:de:2c:35:9b:17:43:24:77:60:5b:5f:d3:e2:c4:
7a:87:11:58:34:f8:e3:92:a3:e7:e7:37:88:a2:09:
d7:35:92:6f:f2:fa:0e:2b:4c:87:e6:6e:cc:f9:10:
4f:0f:a0:93:41:9e:1f:fe:cb:32:b5:e3:1e:5d:e7:
8a:fa:07:f7:be:77:3c:70:ef:ef:8c:39:4b:81:c9:
f4:63:d2:c9:a1:10:1c:9e:af:fd:e7:64:fa:f5:fb:
ea:59:2e:76:1d:2f:4a:0a:dd:3f:98:98:cc:5c:a7:
3e:cf:11:38:48:94:f9:70:56:df:5c:69:60:fd:f9:
6f:97:f2:71:5d:0e:cd:42:05:1b:bf:d8:72:dd:09:
02:4a:1f:a4:4c:9e:0a:96:47:38:8b:0e:41:d5:04:
d3:4e:c1:5a:d5:f5:bb:e6:af:e4:af:db:7a:91:b6:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:2B:74:10:80:FC:80:22:FB:ED:25:DC:8B:05:A2:C6:94:EE:56
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/UNcrdBCA_IAi--0l3IsFosaU7lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.37.0/24
Signature Algorithm: sha256WithRSAEncryption
50:47:da:e1:1b:7e:bb:a0:8b:10:22:26:9b:b2:23:33:61:cc:
48:d8:e8:fc:b0:da:a1:f8:a8:f0:48:f9:fc:d1:a0:77:f4:2b:
d7:f5:d6:a2:f9:39:f2:27:6a:db:c3:93:2b:42:4c:22:63:66:
f5:8b:1e:3b:b2:8d:5e:67:94:c6:a2:17:b1:60:f2:e0:74:6f:
2d:7a:ba:66:7c:d8:45:36:08:26:a5:9b:41:9d:b6:d5:39:4a:
9e:16:a6:22:d3:cf:d4:36:a1:1d:c4:8d:9e:66:30:ab:06:4f:
ca:48:c2:3b:b5:92:a4:a6:7c:e6:e0:6a:9d:80:0c:fd:91:3c:
af:83:3f:83:d7:4c:63:c1:34:f0:e4:44:d3:f1:b3:06:8c:32:
e3:4d:4f:df:c7:77:40:4f:ec:4f:c0:10:5c:55:3e:bc:01:14:
3c:92:1c:92:46:09:61:0b:44:55:43:e2:9c:f2:b6:02:36:1c:
53:87:13:b5:93:b6:a8:11:7f:dc:b8:b0:2c:30:3d:49:a3:35:
9d:5e:7f:7a:7e:9d:04:b4:84:6b:cb:63:46:1a:62:d3:c6:eb:
fb:ca:6b:08:d0:a0:aa:1d:5e:19:b2:af:a3:32:a2:03:cc:2d:
50:2e:56:24:ae:4c:f9:f6:af:08:38:4d:a0:6e:b4:a1:aa:78:
20:8b:c7:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRpViahXVDGjBTfsImsUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3
ZDE3ZTIwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGQ3MmI3NDEwODBmYzgwMjJmYmVkMjVkYzhiMDVhMmM2OTRlZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA1eQcqzx9NfJfi7JGq6RvMGr4AF
1rVcET9Z7LHSuvOmM2Aq8KnQo93vu5zjpahD6WyfInRLCU+Sb8UXJZ/eBTe9+UNW
iw0szqKjllcRYdPqdcC6ZLFB/lwU3iw1mxdDJHdgW1/T4sR6hxFYNPjjkqPn5zeI
ognXNZJv8voOK0yH5m7M+RBPD6CTQZ4f/ssyteMeXeeK+gf3vnc8cO/vjDlLgcn0
Y9LJoRAcnq/952T69fvqWS52HS9KCt0/mJjMXKc+zxE4SJT5cFbfXGlg/flvl/Jx
XQ7NQgUbv9hy3QkCSh+kTJ4Klkc4iw5B1QTTTsFa1fW75q/kr9t6kba7FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFDXK3QQgPyAIvvtJdyLBaLGlO5WMB8GA1UdIwQY
MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvVU5jcmRCQ0FfSUFpLS0wbDNJc0Zvc2FVN2xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUMlMA0G
CSqGSIb3DQEBCwUAA4IBAQBQR9rhG367oIsQIiabsiMzYcxI2Oj8sNqh+KjwSPn8
0aB39CvX9dai+TnyJ2rbw5MrQkwiY2b1ix47so1eZ5TGohexYPLgdG8terpmfNhF
NggmpZtBnbbVOUqeFqYi08/UNqEdxI2eZjCrBk/KSMI7tZKkpnzm4GqdgAz9kTyv
gz+D10xjwTTw5ETT8bMGjDLjTU/fx3dAT+xPwBBcVT68ARQ8khySRglhC0RVQ+Kc
8rYCNhxThxO1k7aoEX/cuLAsMD1JozWdXn96fp0EtIRry2NGGmLTxuv7ymsI0KCq
HV4Zsq+jMqIDzC1QLlYkrkz59q8IOE2gbrShqnggi8fy
-----END CERTIFICATE-----
Generated at Tue Jul 7 00:16:49 2026 by rpki-client