Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UwoT9NHY1VkMbKk7PU_-eVjmtTY.roa
File: UwoT9NHY1VkMbKk7PU_-eVjmtTY.roa (raw, json)
Hash identifier: wbZ3jwzlpFC5pDTFkC90FBxb17+zZ+KsasTofD/pz5o=
Subject key identifier: 53:0A:13:F4:D1:D8:D5:59:0C:6C:A9:3B:3D:4F:FE:79:58:E6:B5:36
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F3C3575FB28CEFE4BF774F3CFACDF3DFA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UwoT9NHY1VkMbKk7PU_-eVjmtTY.roa
Signing time: Tue 07 Jul 2026 10:52:44 +0000
ROA not before: Tue 07 Jul 2026 10:52:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393886
IP address blocks: 45.85.161.0/24 maxlen: 24
45.85.162.0/24 maxlen: 24
45.85.163.0/24 maxlen: 24
45.87.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:35:75:fb:28:ce:fe:4b:f7:74:f3:cf:ac:df:3d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 7 10:52:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=530a13f4d1d8d5590c6ca93b3d4ffe7958e6b536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:ea:28:86:c1:b8:90:65:5c:0f:cb:6c:63:
5b:ea:75:fc:46:cf:6f:01:52:c8:9a:d2:a3:84:bc:
6a:5d:ac:63:75:b2:65:53:ed:b8:f6:df:ce:dd:2b:
08:57:eb:5b:d2:2d:28:b7:96:89:db:72:47:1e:e6:
be:e9:df:2d:8f:d6:3a:5b:8b:ca:8d:d5:cb:d5:e9:
c3:b0:23:1a:c2:74:15:53:be:c8:c1:21:78:7f:e8:
15:5d:73:88:30:c9:5e:b6:1f:99:e6:be:2a:de:60:
c2:77:2b:89:3e:23:f4:c4:fb:eb:2b:21:6b:05:a0:
b8:6c:97:88:b1:e0:1b:3e:57:98:ba:29:0b:67:d7:
4a:4e:53:ab:f1:43:d1:3d:18:45:17:a8:35:24:38:
26:73:ce:ea:b6:43:ae:41:e7:53:fa:aa:d4:f7:ec:
e5:64:9b:ed:ee:dc:49:61:d4:1a:15:1e:07:7a:6e:
e9:6f:c5:3f:be:2d:ec:dc:f0:fb:21:3e:bb:c2:a0:
57:f0:ee:a1:6f:92:a0:d8:91:6b:1b:f2:be:31:36:
f4:db:1a:4c:48:9f:dc:bd:01:c3:e1:20:1e:45:73:
21:00:5c:c4:fb:05:37:36:39:83:60:19:f7:14:74:
da:fd:16:fc:2d:d7:4c:7a:07:34:ec:74:30:2b:40:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0A:13:F4:D1:D8:D5:59:0C:6C:A9:3B:3D:4F:FE:79:58:E6:B5:36
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UwoT9NHY1VkMbKk7PU_-eVjmtTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.161.0-45.85.163.255
45.87.241.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e2:6c:6f:61:21:59:2c:5e:21:ad:20:61:ba:00:2c:62:3e:
c0:fb:83:24:29:7d:c5:3a:3d:c7:1b:97:f4:e0:1f:ea:f5:46:
38:e5:c9:29:1b:92:ef:6c:75:07:0d:05:cf:a5:ad:a5:2f:30:
f7:e4:20:02:f0:dc:c1:e9:42:90:fa:c2:06:cf:37:6c:de:d1:
a8:94:20:43:3a:8f:d8:07:f7:b0:07:c1:3c:2b:28:d1:40:28:
de:c8:75:50:89:eb:c1:71:5f:c7:7c:a6:56:d2:10:e3:d3:a5:
68:87:92:21:82:69:7a:05:fc:5b:1d:ee:02:1d:e8:5d:84:e6:
3a:c7:ba:3d:69:8d:ce:4b:8e:75:23:5b:cc:a4:96:03:b4:81:
c7:ef:37:3f:f5:ca:e8:b2:9d:7f:e9:96:91:5c:90:11:47:ae:
7d:8e:e7:24:e0:31:2d:0d:a5:64:38:3d:41:53:2a:c1:fb:29:
83:91:63:24:b8:7f:66:bc:46:34:3c:e9:9f:eb:52:ed:88:14:
ae:32:9b:b7:d2:72:4f:3a:6f:71:af:14:6a:ad:2d:e3:9a:1a:
71:3e:95:1f:39:6a:d3:87:de:79:83:47:d9:4e:63:46:b2:cb:
c9:d3:c8:1a:45:bc:ac:53:be:9a:e0:d6:16:80:86:a2:8a:d5:
cb:c2:fc:c8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ88NXX7KM7+S/d088+s3z36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNzA3MTA1MjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzBhMTNmNGQxZDhkNTU5MGM2Y2E5M2IzZDRmZmU3OTU4ZTZiNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdDqKIbBuJBlXA/LbGNb6nX8Rs9v
AVLImtKjhLxqXaxjdbJlU+249t/O3SsIV+tb0i0ot5aJ23JHHua+6d8tj9Y6W4vK
jdXL1enDsCMawnQVU77IwSF4f+gVXXOIMMleth+Z5r4q3mDCdyuJPiP0xPvrKyFr
BaC4bJeIseAbPleYuikLZ9dKTlOr8UPRPRhFF6g1JDgmc87qtkOuQedT+qrU9+zl
ZJvt7txJYdQaFR4Hem7pb8U/vi3s3PD7IT67wqBX8O6hb5Kg2JFrG/K+MTb02xpM
SJ/cvQHD4SAeRXMhAFzE+wU3NjmDYBn3FHTa/Rb8LddMegc07HQwK0D4gQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFMKE/TR2NVZDGypOz1P/nlY5rU2MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvVXdvVDlOSFkxVmtNYktrN1BVXy1lVmptdFRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtVaED
BAItVaADBAAtV/EwDQYJKoZIhvcNAQELBQADggEBAILibG9hIVksXiGtIGG6ACxi
PsD7gyQpfcU6Pccbl/TgH+r1RjjlySkbku9sdQcNBc+lraUvMPfkIALw3MHpQpD6
wgbPN2ze0aiUIEM6j9gH97AHwTwrKNFAKN7IdVCJ68FxX8d8plbSEOPTpWiHkiGC
aXoF/Fsd7gId6F2E5jrHuj1pjc5LjnUjW8yklgO0gcfvNz/1yuiynX/plpFckBFH
rn2O5yTgMS0NpWQ4PUFTKsH7KYORYyS4f2a8RjQ86Z/rUu2IFK4ym7fSck86b3Gv
FGqtLeOaGnE+lR85atOH3nmDR9lOY0ayy8nTyBpFvKxTvprg1haAhqKK1cvC/Mg=
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:22 2026 by rpki-client