Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/uhrvAuxzS5aftx3VHfde8tRACMk.roa
File: uhrvAuxzS5aftx3VHfde8tRACMk.roa (raw, json)
Hash identifier: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=
Subject key identifier: BA:1A:EF:02:EC:73:4B:96:9F:B7:1D:D5:1D:F7:5E:F2:D4:40:08:C9
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019CB3680F2351D7056D95EB8916A3CA1888
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/uhrvAuxzS5aftx3VHfde8tRACMk.roa
Signing time: Tue 03 Mar 2026 11:14:27 +0000
ROA not before: Tue 03 Mar 2026 11:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40513
IP address blocks: 84.45.50.0/24 maxlen: 24
84.45.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:68:0f:23:51:d7:05:6d:95:eb:89:16:a3:ca:18:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Mar 3 11:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba1aef02ec734b969fb71dd51df75ef2d44008c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:5c:29:bf:cd:25:49:7a:cb:a0:d0:a2:5b:
fa:68:52:2f:62:d2:4b:7b:c0:81:68:4b:db:3d:29:
d5:49:ab:53:40:59:23:1c:00:f6:b5:32:92:8e:c4:
15:64:22:d2:31:09:ad:cc:0e:54:96:14:91:f6:de:
c0:f9:3b:ca:2f:14:83:de:d3:5e:68:44:28:a8:99:
94:59:88:9a:e8:0b:55:83:5b:bd:13:ee:a7:4e:c4:
6d:c7:ae:04:78:2a:ad:24:7b:92:82:62:57:b1:96:
8c:67:5f:6a:ef:ab:f6:ab:7e:6d:2d:47:45:e3:bb:
17:8d:b6:65:74:33:1b:2e:85:04:d1:10:bc:80:26:
cc:fe:80:13:cb:7c:c6:18:95:87:72:ba:fe:71:f4:
a1:59:60:e3:ee:ad:10:80:89:30:f6:ac:4d:be:f7:
86:86:8f:3e:cd:7d:39:9d:58:11:99:58:d7:63:3a:
ca:60:04:64:bb:ad:46:0f:41:bc:58:cb:e6:37:d7:
90:6a:ce:25:3a:4e:a7:ca:72:4a:c9:ea:c0:16:81:
f1:be:2e:7f:9b:80:b9:91:16:15:29:87:53:6a:0d:
9b:6a:9d:77:4a:26:34:a9:08:c2:c9:69:78:2d:86:
68:4c:73:72:10:e4:08:41:54:c1:f7:71:86:c8:9d:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1A:EF:02:EC:73:4B:96:9F:B7:1D:D5:1D:F7:5E:F2:D4:40:08:C9
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/uhrvAuxzS5aftx3VHfde8tRACMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.50.0/24
84.45.70.0/24
Signature Algorithm: sha256WithRSAEncryption
12:27:17:b2:88:95:31:c7:f2:9b:38:75:5d:3e:71:47:94:5f:
1e:7c:e2:e2:a6:4c:fa:0e:52:64:3b:c9:65:10:84:b4:80:fc:
d8:ea:1c:d9:62:9f:ab:c3:f0:9b:37:b6:f1:fe:15:82:bf:8e:
cb:d5:15:f9:44:fd:73:fe:cc:20:4e:e8:3c:21:d9:27:00:34:
f7:1c:02:ee:9d:4e:2c:72:d2:20:4e:09:4b:6b:00:0e:87:64:
5c:7d:43:82:de:a5:99:2d:fe:4e:7e:16:0b:7d:ae:5a:1d:de:
f7:74:1c:23:e3:b5:a1:14:56:e8:d4:a3:6c:c7:64:41:45:ad:
40:fd:83:6e:2f:a4:56:6a:7d:be:07:2a:6a:a7:29:91:f4:dc:
00:94:07:66:1d:f5:85:42:ad:2a:2f:7b:0d:43:2f:af:67:95:
c1:02:95:39:01:68:ea:f5:4c:23:62:27:25:1b:5a:8c:93:60:
df:90:65:1c:80:55:06:de:26:c9:5f:42:3c:cb:ce:b0:84:1d:
f4:7c:40:94:24:ea:4e:0a:68:db:f1:44:ab:d9:f1:98:6d:b7:
7f:23:8f:e1:a9:dd:d3:49:2b:8b:d2:be:13:7d:2e:2a:02:c5:
43:4a:8a:10:e3:23:ae:47:42:33:52:bb:e5:1e:f9:04:8c:06:
49:6a:25:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyzaA8jUdcFbZXriRajyhiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2M1NzE1YzE2NzYxMTJlZWQ2MzE0NTk0YTU5MzMzYzNk
N2UxZTAwHhcNMjYwMzAzMTExNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTFhZWYwMmVjNzM0Yjk2OWZiNzFkZDUxZGY3NWVmMmQ0NDAwOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB9cKb/NJUl6y6DQolv6aFIvYtJL
e8CBaEvbPSnVSatTQFkjHAD2tTKSjsQVZCLSMQmtzA5UlhSR9t7A+TvKLxSD3tNe
aEQoqJmUWYia6AtVg1u9E+6nTsRtx64EeCqtJHuSgmJXsZaMZ19q76v2q35tLUdF
47sXjbZldDMbLoUE0RC8gCbM/oATy3zGGJWHcrr+cfShWWDj7q0QgIkw9qxNvveG
ho8+zX05nVgRmVjXYzrKYARku61GD0G8WMvmN9eQas4lOk6nynJKyerAFoHxvi5/
m4C5kRYVKYdTag2bap13SiY0qQjCyWl4LYZoTHNyEOQIQVTB93GGyJ27LQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLoa7wLsc0uWn7cd1R33XvLUQAjJMB8GA1UdIwQY
MBaAFC7MVxXBZ2ES7tYxRZSlkzPD1+HgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGIt
MzZmZDYwNmQ4ZDA5LzEvdWhydkF1eHpTNWFmdHgzVkhmZGU4dFJBQ01rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGItMzZmZDYwNmQ4ZDA5
LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVC0yAwQA
VC1GMA0GCSqGSIb3DQEBCwUAA4IBAQASJxeyiJUxx/KbOHVdPnFHlF8efOLipkz6
DlJkO8llEIS0gPzY6hzZYp+rw/CbN7bx/hWCv47L1RX5RP1z/swgTug8IdknADT3
HALunU4sctIgTglLawAOh2RcfUOC3qWZLf5OfhYLfa5aHd73dBwj47WhFFbo1KNs
x2RBRa1A/YNuL6RWan2+BypqpymR9NwAlAdmHfWFQq0qL3sNQy+vZ5XBApU5AWjq
9UwjYiclG1qMk2DfkGUcgFUG3ibJX0I8y86whB30fECUJOpOCmjb8USr2fGYbbd/
I4/hqd3TSSuL0r4TfS4qAsVDSooQ4yOuR0IzUrvlHvkEjAZJaiWW
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:29:34 2026 by rpki-client