Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/uTRz9R7UnWpYTEZZ0EurWz9FGaE.roa
File: uTRz9R7UnWpYTEZZ0EurWz9FGaE.roa (raw, json)
Hash identifier: RCnycBNTC0AKgh9QE+ed5b58elagi9rLufbae6B+st8=
Subject key identifier: B9:34:73:F5:1E:D4:9D:6A:58:4C:46:59:D0:4B:AB:5B:3F:45:19:A1
Certificate issuer: /CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Certificate serial: 019FC9C233EFAFCFD1FB29928466F71A70A1
Authority key identifier: B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/uTRz9R7UnWpYTEZZ0EurWz9FGaE.roa
Signing time: Mon 03 Aug 2026 22:32:55 +0000
ROA not before: Mon 03 Aug 2026 22:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.222.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 22:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:c2:33:ef:af:cf:d1:fb:29:92:84:66:f7:1a:70:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Validity
Not Before: Aug 3 22:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b93473f51ed49d6a584c4659d04bab5b3f4519a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:51:e3:e9:0f:f0:fd:60:89:8f:a0:8d:dc:
e8:cd:8e:98:64:9f:63:06:05:ce:18:21:fe:4d:a8:
81:2b:c2:94:00:0b:ce:0b:c5:4a:a3:28:27:b3:fa:
b6:02:95:08:bd:e8:46:b6:b0:68:de:9d:f3:a0:87:
88:81:12:13:54:17:6e:d7:dc:02:a8:be:2c:54:6e:
67:19:da:1b:fa:13:84:63:a4:57:34:e8:9d:2e:3b:
1c:ca:f1:b0:88:61:65:af:9c:4b:84:3f:9e:31:b2:
0b:5b:e8:83:71:ce:bc:92:1f:95:7e:f1:dc:f6:99:
98:98:56:d5:a0:7e:50:1e:ba:87:a8:d6:cd:d1:77:
7f:4c:ae:bd:f7:31:01:40:e1:13:b4:d5:ab:84:89:
76:8c:2b:74:37:3e:e0:bf:f4:07:11:e4:59:24:d6:
a1:79:0d:bc:6c:3a:fa:f1:e5:5c:fe:b2:e7:0f:59:
8b:f4:20:2d:7a:59:10:76:79:ba:48:6a:95:16:ea:
6e:ae:0c:eb:20:09:36:79:65:0c:77:23:90:16:51:
f2:83:9c:b2:f4:74:5a:cf:72:5b:b7:30:49:09:21:
fd:8a:25:b9:ed:86:97:a5:0b:41:52:36:0a:0a:45:
e1:4f:22:34:e1:c8:97:b6:dc:bf:70:ac:f5:a5:d9:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:34:73:F5:1E:D4:9D:6A:58:4C:46:59:D0:4B:AB:5B:3F:45:19:A1
X509v3 Authority Key Identifier:
keyid:B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/uTRz9R7UnWpYTEZZ0EurWz9FGaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.203.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:15:45:2f:65:40:92:ca:ac:78:6f:b1:bc:98:ff:e5:d0:5a:
2b:01:c5:56:93:77:ff:c6:cf:f7:41:fd:0e:1d:a3:eb:b0:e5:
0c:a8:b4:90:28:88:a4:d9:29:5a:d0:4e:2a:66:af:84:88:6b:
d2:7d:5a:35:9f:b0:d8:b2:d2:8a:32:08:b4:b6:43:97:b9:2a:
d2:13:67:b0:f5:26:cf:84:ba:05:f8:8f:2b:8c:b0:b7:31:eb:
5a:cd:9e:9e:2d:76:1a:7c:3c:64:c2:a8:76:45:8a:88:07:70:
04:c1:33:a3:d3:fe:63:0e:3e:c1:6d:ec:2c:a6:58:6b:7d:8a:
15:ba:18:cd:a0:c3:90:38:5c:a4:1b:4d:77:fd:ff:f1:c9:b7:
61:73:06:d3:ba:96:8d:6d:cf:ed:7b:4f:ac:4d:f2:da:c1:9d:
dc:d1:c6:ac:5a:61:1b:d3:49:a9:15:91:3b:5f:2e:e5:94:cf:
34:d2:06:c3:24:55:9b:65:dc:2d:5f:e7:4c:e0:21:ab:89:24:
cd:17:82:2e:75:d3:62:7a:63:a3:09:25:9a:54:05:a5:55:36:
6b:c7:8f:26:b6:51:ae:24:e7:85:6a:01:9c:c2:a1:89:b7:28:
70:ac:fe:b3:bc:71:67:70:de:cd:be:23:0c:c5:7f:45:8d:8f:
6e:29:8f:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/JwjPvr8/R+ymShGb3GnChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmYyZmNlOWU2MmE2MTY4ZTJiMmU5NDgyMDQ1YmYyY2Iw
YWI2ZTgwHhcNMjYwODAzMjIzMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTM0NzNmNTFlZDQ5ZDZhNTg0YzQ2NTlkMDRiYWI1YjNmNDUxOWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWpR4+kP8P1giY+gjdzozY6YZJ9j
BgXOGCH+TaiBK8KUAAvOC8VKoygns/q2ApUIvehGtrBo3p3zoIeIgRITVBdu19wC
qL4sVG5nGdob+hOEY6RXNOidLjscyvGwiGFlr5xLhD+eMbILW+iDcc68kh+VfvHc
9pmYmFbVoH5QHrqHqNbN0Xd/TK699zEBQOETtNWrhIl2jCt0Nz7gv/QHEeRZJNah
eQ28bDr68eVc/rLnD1mL9CAtelkQdnm6SGqVFupurgzrIAk2eWUMdyOQFlHyg5yy
9HRaz3JbtzBJCSH9iiW57YaXpQtBUjYKCkXhTyI04ciXtty/cKz1pdka0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLk0c/Ue1J1qWExGWdBLq1s/RRmhMB8GA1UdIwQY
MBaAFLVvL86eYqYWjisulIIEW/LLCrboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFc4dnpwNWlwaGFPS3k2VWdnUmI4c3NLdHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hMjRiNGUtNmM1Yy00MmMzLTliOGMt
Njg3MjdjNmZjMWQzLzEvdVRSejlSN1VuV3BZVEVaWjBFdXJXejlGR2FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hMjRiNGUtNmM1Yy00MmMzLTliOGMtNjg3MjdjNmZjMWQz
LzEvdFc4dnpwNWlwaGFPS3k2VWdnUmI4c3NLdHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud7LMA0G
CSqGSIb3DQEBCwUAA4IBAQAdFUUvZUCSyqx4b7G8mP/l0ForAcVWk3f/xs/3Qf0O
HaPrsOUMqLSQKIik2Sla0E4qZq+EiGvSfVo1n7DYstKKMgi0tkOXuSrSE2ew9SbP
hLoF+I8rjLC3MetazZ6eLXYafDxkwqh2RYqIB3AEwTOj0/5jDj7BbewsplhrfYoV
uhjNoMOQOFykG013/f/xybdhcwbTupaNbc/te0+sTfLawZ3c0casWmEb00mpFZE7
Xy7llM800gbDJFWbZdwtX+dM4CGriSTNF4IuddNiemOjCSWaVAWlVTZrx48mtlGu
JOeFagGcwqGJtyhwrP6zvHFncN7NviMMxX9FjY9uKY9b
-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:13 2026 by rpki-client