Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/UHqUnAcyEF9QZqpJVYQfUtpTpZ8.roa
File: UHqUnAcyEF9QZqpJVYQfUtpTpZ8.roa (raw, json)
Hash identifier: I6thDBD8qU4oJQRw1BPJgB9Jam4BD3IBwkMx+YwjW2Q=
Subject key identifier: 50:7A:94:9C:07:32:10:5F:50:66:AA:49:55:84:1F:52:DA:53:A5:9F
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A0F90611F85887ADD6A461C9ACFAB18C26
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/UHqUnAcyEF9QZqpJVYQfUtpTpZ8.roa
Signing time: Thu 01 Oct 2026 19:51:59 +0000
ROA not before: Thu 01 Oct 2026 19:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f040::/29 maxlen: 29
2a0b:b480::/29 maxlen: 29
2a0e:d300::/29 maxlen: 29
2a0f:63c0::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a0f:e3c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:be40::/29 maxlen: 29
2a13:d0c0::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:06:11:f8:58:87:ad:d6:a4:61:c9:ac:fa:b1:8c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Oct 1 19:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=507a949c0732105f5066aa4955841f52da53a59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:a3:b1:bb:65:d9:95:45:4b:dd:d4:f2:cc:
ad:da:41:d7:95:0e:92:52:7a:de:78:af:0f:69:dd:
cf:76:20:3f:11:98:fa:f0:50:2a:5c:75:c3:08:17:
3a:74:de:41:6f:be:32:bf:5b:55:9a:05:8d:96:48:
ee:6a:d4:62:ec:02:b7:07:dc:c2:8b:2f:79:f5:0a:
8f:a4:c6:80:19:7d:02:09:36:1f:05:e3:cd:73:57:
43:c7:83:9f:3a:66:4d:02:6b:22:2c:d4:ed:92:12:
5e:0c:13:ab:9c:e9:c1:60:af:18:23:7b:bd:f5:27:
52:ea:ff:4c:eb:c1:94:ce:38:29:63:cd:b2:a0:bc:
fe:76:93:b8:18:7e:aa:13:2b:ea:1c:e3:ff:3c:d7:
ff:95:7c:f8:78:e8:d3:c9:07:81:a0:a2:2b:17:41:
a9:82:a7:a1:73:72:4d:0d:58:f5:51:be:8c:83:e8:
5a:cd:3c:1e:ae:af:65:bf:fb:55:8d:2e:af:d2:73:
4c:75:c0:23:9c:f1:57:6d:d7:cb:98:bc:fe:5b:de:
96:d6:28:b7:ee:d4:02:e1:25:47:1e:8c:7b:ff:68:
a8:b8:3c:e9:c3:49:eb:87:41:13:f2:c2:11:f3:e6:
88:b3:c8:52:4c:a2:4e:85:1c:89:50:8b:e4:38:05:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:94:9C:07:32:10:5F:50:66:AA:49:55:84:1F:52:DA:53:A5:9F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/UHqUnAcyEF9QZqpJVYQfUtpTpZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f040::/29
2a0b:b480::/29
2a0e:d300::/29
2a0f:63c0::/29
2a0f:89c0::/29
2a0f:e3c0::/29
2a10:7ac0::/29
2a13:b740::/29
2a13:be40::/29
2a13:d0c0::/29
2a13:d1c0::/29
2a13:dd40::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
38:03:c9:09:a9:e3:e7:28:a0:9e:10:00:b2:43:9a:66:5a:98:
94:8b:a5:2d:f3:40:50:db:eb:a4:68:6a:dd:4a:e2:78:03:c9:
4a:56:9a:3b:c3:ee:d2:62:32:91:cb:1e:15:68:9c:2d:aa:e3:
d5:70:61:b5:e3:78:19:1f:56:82:e8:d8:60:79:ba:37:0d:a9:
0b:bc:a8:cf:de:b2:42:62:5d:e8:48:2b:19:16:08:41:c5:09:
fe:18:35:3c:73:42:fc:56:48:a6:fd:b3:4b:c5:26:74:c5:4b:
e8:ba:d0:5c:41:3b:95:3c:6d:c7:0d:f1:40:21:a8:46:df:63:
eb:52:91:89:4d:dc:ac:a4:a7:f7:1e:1e:61:9e:ab:b3:43:3a:
ce:48:1b:e3:04:89:49:9b:1b:da:84:a4:c1:31:3a:4a:a0:1d:
6e:54:f7:d3:ea:05:d4:bd:df:89:47:20:b9:c7:16:be:20:9e:
b1:9c:52:11:47:45:0d:d0:7e:f6:86:56:41:fc:98:0f:6e:00:
1f:8d:14:c5:38:59:70:9e:f6:bd:0d:cd:05:0e:9c:f6:1c:d7:
70:57:1c:14:21:58:70:36:87:32:6b:3c:8a:0c:86:94:a5:e8:
fc:c5:5b:e8:ea:34:3d:ae:c2:f4:cb:cd:f7:95:18:51:85:26:
0b:51:de:bd
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAaD5BhH4WIet1qRhyaz6sYwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYxMDAxMTk1MTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDdhOTQ5YzA3MzIxMDVmNTA2NmFhNDk1NTg0MWY1MmRhNTNhNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06qjsbtl2ZVFS93U8syt2kHXlQ6S
UnreeK8Pad3PdiA/EZj68FAqXHXDCBc6dN5Bb74yv1tVmgWNlkjuatRi7AK3B9zC
iy959QqPpMaAGX0CCTYfBePNc1dDx4OfOmZNAmsiLNTtkhJeDBOrnOnBYK8YI3u9
9SdS6v9M68GUzjgpY82yoLz+dpO4GH6qEyvqHOP/PNf/lXz4eOjTyQeBoKIrF0Gp
gqehc3JNDVj1Ub6Mg+hazTwerq9lv/tVjS6v0nNMdcAjnPFXbdfLmLz+W96W1ii3
7tQC4SVHHox7/2iouDzpw0nrh0ET8sIR8+aIs8hSTKJOhRyJUIvkOAW9GwIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFFB6lJwHMhBfUGaqSVWEH1LaU6WfMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvVUhxVW5BY3lFRjlRWnFwSlZZUWZVdHBUcFo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBhBAIAAjBbAwUDKgHwQAMF
AyoLtIADBQMqDtMAAwUDKg9jwAMFAyoPicADBQMqD+PAAwUDKhB6wAMFAyoTt0AD
BQMqE75AAwUDKhPQwAMFAyoT0cADBQMqE91AAwUDKhPfwDANBgkqhkiG9w0BAQsF
AAOCAQEAOAPJCanj5yignhAAskOaZlqYlIulLfNAUNvrpGhq3UrieAPJSlaaO8Pu
0mIykcseFWicLarj1XBhteN4GR9WgujYYHm6Nw2pC7yoz96yQmJd6EgrGRYIQcUJ
/hg1PHNC/FZIpv2zS8UmdMVL6LrQXEE7lTxtxw3xQCGoRt9j61KRiU3crKSn9x4e
YZ6rs0M6zkgb4wSJSZsb2oSkwTE6SqAdblT30+oF1L3fiUcguccWviCesZxSEUdF
DdB+9oZWQfyYD24AH40UxThZcJ72vQ3NBQ6c9hzXcFccFCFYcDaHMms8igyGlKXo
/MVb6Oo0Pa7C9MvN95UYUYUmC1HevQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:05 2026 by rpki-client