Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ULTCpbkBJMOWz4DjupJieqw7LZ4.roa
File: ULTCpbkBJMOWz4DjupJieqw7LZ4.roa (raw, json)
Hash identifier: oEOSP1S8ZLkSW/eVX5gULtrZy9BurFM9bOWDdrWyvKw=
Subject key identifier: 50:B4:C2:A5:B9:01:24:C3:96:CF:80:E3:BA:92:62:7A:AC:3B:2D:9E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A00EB2B556E6ACB260C3E1629ED9B0BBF2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ULTCpbkBJMOWz4DjupJieqw7LZ4.roa
Signing time: Mon 17 Aug 2026 07:49:47 +0000
ROA not before: Mon 17 Aug 2026 07:49:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197354
IP address blocks: 45.95.96.0/24 maxlen: 24
194.62.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:b2:b5:56:e6:ac:b2:60:c3:e1:62:9e:d9:b0:bb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 17 07:49:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50b4c2a5b90124c396cf80e3ba92627aac3b2d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:ca:24:13:b5:f6:0d:57:46:90:91:0b:e0:
53:26:4b:65:a4:77:d5:1a:05:4a:5a:68:04:90:e4:
8f:d9:c0:ab:2b:50:74:81:d8:35:c2:30:26:10:a7:
73:bc:3c:e6:9b:74:97:6b:f5:b5:ce:0a:45:54:ea:
d5:84:04:e5:79:63:23:57:75:ac:7e:ee:44:c1:50:
3c:aa:77:13:e6:9a:61:d2:c8:24:69:a1:55:78:81:
1c:5f:a0:d5:3c:b8:b8:0f:cd:76:3d:8d:ef:71:8a:
d2:69:1a:e1:7d:73:8c:07:34:fa:9b:2c:a9:0e:9f:
0a:73:d6:ae:64:90:9e:7c:64:89:0e:1a:76:21:94:
fe:4a:75:0a:ce:69:c7:5a:15:e4:28:8a:98:54:9c:
9c:61:fa:4c:e4:d1:1c:58:02:4a:37:05:b5:42:27:
1d:84:c5:fb:ee:f2:81:be:9f:f0:2a:b2:63:ed:cf:
6e:96:db:4c:52:da:2b:93:f2:81:e6:7c:f1:ed:10:
8c:0a:69:2a:b8:7f:cd:66:4e:f7:f1:ae:78:57:c4:
be:94:07:6d:88:d9:aa:2b:36:3c:bd:20:55:aa:02:
bc:d7:31:d5:92:d8:13:85:5b:b2:bb:26:5f:cc:98:
c4:51:9f:96:79:c0:5d:7f:ce:89:16:81:a1:99:d7:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B4:C2:A5:B9:01:24:C3:96:CF:80:E3:BA:92:62:7A:AC:3B:2D:9E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ULTCpbkBJMOWz4DjupJieqw7LZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.96.0/24
194.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9b:52:8a:71:a0:56:b5:3e:53:b3:60:92:48:a3:87:a8:91:
b2:9f:6c:98:43:8e:c9:78:aa:57:02:f0:5b:cd:c3:9e:65:bb:
e7:bf:63:cb:7b:f2:33:92:d1:e8:8f:d7:01:4b:5b:53:2e:47:
6c:67:de:58:9c:e9:e4:15:f7:1d:44:73:4f:0a:7c:a5:4b:9d:
70:83:e8:a4:04:9d:4d:2e:ab:5e:a3:b5:b4:99:49:82:71:16:
a3:fd:cd:74:93:4e:2c:54:d8:0a:f3:fc:30:ae:49:dd:35:a3:
3f:57:fb:be:7a:ae:35:15:37:53:72:a8:b3:32:cc:94:39:dd:
44:07:9b:a9:b7:4a:fe:c3:ea:69:ee:1d:d7:a3:45:c0:dd:32:
5f:5e:0a:dd:58:0e:6a:4d:00:3f:2c:b2:50:e6:5b:c8:8a:ba:
b3:ae:82:53:c5:f5:aa:46:bb:ea:cf:ef:ab:65:e4:df:d0:54:
eb:23:99:dc:e2:87:24:33:a8:31:ea:dd:dd:ce:f3:04:a4:35:
b9:96:c6:2d:17:f2:2d:0f:f6:01:57:ca:2d:bb:d2:e1:34:e9:
80:08:6d:21:bc:a1:06:51:14:c3:06:d5:48:e9:49:90:51:15:
d7:fc:ce:05:fd:81:4f:b2:9f:1f:37:6d:78:9a:40:6b:bb:f5:
a5:6a:75:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAOsrVW5qyyYMPhYp7ZsLvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODE3MDc0OTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGI0YzJhNWI5MDEyNGMzOTZjZjgwZTNiYTkyNjI3YWFjM2IyZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+7KJBO19g1XRpCRC+BTJktlpHfV
GgVKWmgEkOSP2cCrK1B0gdg1wjAmEKdzvDzmm3SXa/W1zgpFVOrVhATleWMjV3Ws
fu5EwVA8qncT5pph0sgkaaFVeIEcX6DVPLi4D812PY3vcYrSaRrhfXOMBzT6myyp
Dp8Kc9auZJCefGSJDhp2IZT+SnUKzmnHWhXkKIqYVJycYfpM5NEcWAJKNwW1Qicd
hMX77vKBvp/wKrJj7c9ulttMUtork/KB5nzx7RCMCmkquH/NZk738a54V8S+lAdt
iNmqKzY8vSBVqgK81zHVktgThVuyuyZfzJjEUZ+WecBdf86JFoGhmdeDGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFC0wqW5ASTDls+A47qSYnqsOy2eMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvVUxUQ3Bia0JKTU9XejREanVwSmllcXc3TFo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV9gAwQA
wj4eMA0GCSqGSIb3DQEBCwUAA4IBAQCXm1KKcaBWtT5Ts2CSSKOHqJGyn2yYQ47J
eKpXAvBbzcOeZbvnv2PLe/IzktHoj9cBS1tTLkdsZ95YnOnkFfcdRHNPCnylS51w
g+ikBJ1NLqteo7W0mUmCcRaj/c10k04sVNgK8/wwrkndNaM/V/u+eq41FTdTcqiz
MsyUOd1EB5upt0r+w+pp7h3Xo0XA3TJfXgrdWA5qTQA/LLJQ5lvIirqzroJTxfWq
Rrvqz++rZeTf0FTrI5nc4ockM6gx6t3dzvMEpDW5lsYtF/ItD/YBV8otu9LhNOmA
CG0hvKEGURTDBtVI6UmQURXX/M4F/YFPsp8fN214mkBru/WlanUk
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:38 2026 by rpki-client