Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ufCOauUkw4AZs57yB-1fpsSLmWI.roa
File: ufCOauUkw4AZs57yB-1fpsSLmWI.roa (raw, json)
Hash identifier: onx7B+vR79WNf0xoi1idIXM0pWsNfHbNk0qW4PLh7NI=
Subject key identifier: B9:F0:8E:6A:E5:24:C3:80:19:B3:9E:F2:07:ED:5F:A6:C4:8B:99:62
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C87640E45BE5951D683754B2A35F21CB
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ufCOauUkw4AZs57yB-1fpsSLmWI.roa
Signing time: Tue 22 Sep 2026 09:33:08 +0000
ROA not before: Tue 22 Sep 2026 09:33:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.34.0.0/24 maxlen: 24
82.108.123.0/24 maxlen: 24
82.108.210.0/24 maxlen: 24
82.110.54.0/23 maxlen: 24
82.110.124.0/22 maxlen: 22
87.82.217.0/24 maxlen: 24
87.84.233.0/24 maxlen: 24
87.85.64.0/24 maxlen: 24
87.85.227.0/24 maxlen: 24
87.86.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:76:40:e4:5b:e5:95:1d:68:37:54:b2:a3:5f:21:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 09:33:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9f08e6ae524c38019b39ef207ed5fa6c48b9962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:ef:e0:d1:32:70:46:94:ac:85:fe:6b:8f:
d8:c1:0d:db:ab:89:31:6f:d9:04:57:87:fd:ca:9b:
01:7b:6a:92:0c:47:7e:7c:d4:6a:49:ae:db:e7:c7:
17:8b:11:e3:b9:77:4c:f9:46:23:c5:a4:39:fa:fc:
c7:b7:0f:03:7b:bf:38:f9:67:1f:a9:0e:f7:32:cd:
e0:ab:f0:d9:14:93:bf:e0:6f:12:32:07:aa:c4:7f:
44:9f:2e:a9:6f:7b:b9:b8:96:3e:c2:44:29:70:45:
63:79:1f:db:d3:05:e1:44:e6:71:be:9d:6e:80:4a:
41:60:d9:4b:7b:04:10:8f:ca:8e:e2:70:b3:bb:a8:
ec:ca:07:fe:c0:f8:bf:5a:a5:4d:b1:a2:29:05:b4:
6a:0a:be:b8:ad:04:0d:92:41:d0:84:07:e3:58:43:
ac:fc:19:4f:f4:09:72:0b:8d:9e:71:83:f3:ab:ca:
08:f9:ff:90:ab:bb:37:ca:f0:af:bb:e3:9b:4f:c5:
26:e5:43:d1:ef:0e:29:50:c7:0c:0b:a7:5a:f7:e4:
a4:2a:9b:46:13:32:f8:f3:c6:d5:0c:c7:61:ff:7a:
05:a4:8f:44:96:c3:69:c5:5e:2c:41:98:f2:a0:6b:
be:80:38:e6:7a:27:f0:b5:09:fb:19:78:c2:c8:ad:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:8E:6A:E5:24:C3:80:19:B3:9E:F2:07:ED:5F:A6:C4:8B:99:62
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ufCOauUkw4AZs57yB-1fpsSLmWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.108.123.0/24
82.108.210.0/24
82.110.54.0/23
82.110.124.0/22
87.82.217.0/24
87.84.233.0/24
87.85.64.0/24
87.85.227.0/24
87.86.212.0/23
Signature Algorithm: sha256WithRSAEncryption
60:66:d1:4b:2b:76:39:be:98:98:1f:c1:b7:70:8f:56:7e:33:
d5:ac:37:f7:e9:44:99:26:72:db:d2:b2:64:9e:63:58:33:8c:
25:b5:7c:ce:22:6a:a9:2e:62:ea:6e:2e:f9:b3:fc:5e:ea:50:
20:6d:2e:35:d0:71:f1:ba:45:0f:60:d0:f5:bc:8f:6e:50:a0:
f6:c1:0f:39:90:20:d5:f2:e4:5a:8a:bb:44:9b:e1:41:ea:23:
a6:16:47:f1:cd:d8:14:b7:ba:ea:c2:a6:82:9c:c2:95:b4:9f:
d3:16:3f:5b:ff:ed:2f:6b:b1:2b:c7:32:7a:cb:4c:b5:5b:ae:
e6:96:41:e0:04:95:4f:a4:1f:dc:af:b4:76:50:44:d9:60:85:
55:5f:27:c2:2e:b5:bf:9f:a9:df:28:c0:67:c0:6b:af:1b:91:
65:56:6b:ee:00:2b:23:a1:ee:46:48:d5:60:7c:a8:30:64:ab:
80:b0:01:7f:db:7c:39:a2:65:4c:90:be:d8:84:f2:62:8f:44:
ad:7a:f1:54:3c:1c:1b:8e:51:84:b2:91:29:ab:83:91:e6:8c:
49:d2:e4:15:b6:60:db:a2:fb:b3:88:fd:b4:c4:2a:d6:c6:ac:
0e:83:3b:5a:2c:b1:18:e9:6d:e9:a1:3a:7f:7b:53:a7:25:e6:
a6:16:9b:2b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaDIdkDkW+WVHWg3VLKjXyHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTIyMDkzMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWYwOGU2YWU1MjRjMzgwMTliMzllZjIwN2VkNWZhNmM0OGI5OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/3v4NEycEaUrIX+a4/YwQ3bq4kx
b9kEV4f9ypsBe2qSDEd+fNRqSa7b58cXixHjuXdM+UYjxaQ5+vzHtw8De784+Wcf
qQ73Ms3gq/DZFJO/4G8SMgeqxH9Eny6pb3u5uJY+wkQpcEVjeR/b0wXhROZxvp1u
gEpBYNlLewQQj8qO4nCzu6jsygf+wPi/WqVNsaIpBbRqCr64rQQNkkHQhAfjWEOs
/BlP9AlyC42ecYPzq8oI+f+Qq7s3yvCvu+ObT8Um5UPR7w4pUMcMC6da9+SkKptG
EzL488bVDMdh/3oFpI9ElsNpxV4sQZjyoGu+gDjmeifwtQn7GXjCyK2PmwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFLnwjmrlJMOAGbOe8gftX6bEi5liMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvdWZDT2F1VWt3NEFaczU3eUItMWZwc1NMbVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALiIAAwQA
Umx7AwQAUmzSAwQBUm42AwQCUm58AwQAV1LZAwQAV1TpAwQAV1VAAwQAV1XjAwQB
V1bUMA0GCSqGSIb3DQEBCwUAA4IBAQBgZtFLK3Y5vpiYH8G3cI9WfjPVrDf36USZ
JnLb0rJknmNYM4wltXzOImqpLmLqbi75s/xe6lAgbS410HHxukUPYND1vI9uUKD2
wQ85kCDV8uRairtEm+FB6iOmFkfxzdgUt7rqwqaCnMKVtJ/TFj9b/+0va7ErxzJ6
y0y1W67mlkHgBJVPpB/cr7R2UETZYIVVXyfCLrW/n6nfKMBnwGuvG5FlVmvuACsj
oe5GSNVgfKgwZKuAsAF/23w5omVMkL7YhPJij0StevFUPBwbjlGEspEpq4OR5oxJ
0uQVtmDbovuziP20xCrWxqwOgztaLLEY6W3poTp/e1OnJeamFpsr
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:47:44 2026 by rpki-client