Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/1UX7Yh4Lhak7VLAZKOUUXyM4QyE.roa
File: 1UX7Yh4Lhak7VLAZKOUUXyM4QyE.roa (raw, json)
Hash identifier: UGFZSFixLiArhVPYb2IkaHAo0wUuD/8foO54nA/Fub4=
Subject key identifier: D5:45:FB:62:1E:0B:85:A9:3B:54:B0:19:28:E5:14:5F:23:38:43:21
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 01A1C4BF0A0EA262D0421299D5244F13E60B
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/1UX7Yh4Lhak7VLAZKOUUXyM4QyE.roa
Signing time: Tue 10 Nov 2026 09:16:56 +0000
ROA not before: Tue 10 Nov 2026 09:16:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 92.42.207.0/24 maxlen: 24
2a10:ed40::/48 maxlen: 48
2a10:ed40:1::/48 maxlen: 48
2a10:ed40:2::/48 maxlen: 48
2a10:ed40:4::/48 maxlen: 48
2a10:ed40:5::/48 maxlen: 48
2a10:ed40:9::/48 maxlen: 48
2a10:ed40:a::/48 maxlen: 48
2a10:ed40:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:bf:0a:0e:a2:62:d0:42:12:99:d5:24:4f:13:e6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Nov 10 09:16:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d545fb621e0b85a93b54b01928e5145f23384321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:75:0c:00:1c:14:9e:2d:63:4f:17:3c:e7:
83:ad:ba:0c:b6:ef:79:d0:71:87:bf:6b:f7:34:8e:
6d:29:11:02:64:df:b0:a2:c4:63:3c:97:fe:86:e8:
bb:43:32:6e:7f:a5:27:3a:f3:c4:90:05:9e:d8:d7:
6c:5e:3e:a8:e7:88:aa:aa:fd:f0:23:f2:24:07:11:
d5:37:27:c4:14:0c:01:88:4c:8f:ef:30:65:bb:3c:
18:1a:4f:78:f1:c7:24:f0:d3:d7:d6:92:e7:e4:06:
52:1d:57:91:30:ad:15:6f:12:1b:5f:ec:9e:a7:0c:
d0:ae:28:b4:9c:4a:2a:af:1f:bf:f2:60:8b:5d:5c:
68:50:7f:a6:b8:f8:37:47:4b:18:f5:0a:42:34:76:
c3:de:75:99:bb:5c:3b:5c:59:36:aa:41:2f:4b:fa:
d9:9f:a9:a7:5c:67:9a:af:8a:c0:f0:28:fe:c4:ff:
bf:34:4e:3e:10:08:89:6a:af:76:11:0b:0b:a2:f8:
cd:69:0c:ae:23:e4:5f:9f:c1:a1:2f:eb:ed:73:b9:
d8:06:82:47:6b:ef:23:15:25:e1:0f:00:c5:ea:7c:
95:c1:2c:79:58:b8:ce:e5:8e:38:6d:34:e3:7b:fc:
ad:e7:38:a4:cf:9c:c8:b6:c0:ff:57:17:cd:af:dd:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:FB:62:1E:0B:85:A9:3B:54:B0:19:28:E5:14:5F:23:38:43:21
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/1UX7Yh4Lhak7VLAZKOUUXyM4QyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.207.0/24
IPv6:
2a10:ed40::-2a10:ed40:2:ffff:ffff:ffff:ffff:ffff
2a10:ed40:4::/47
2a10:ed40:9::-2a10:ed40:b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b2:3c:c9:f7:a0:7c:ea:69:30:21:5c:2c:0f:32:6a:ef:ae:c0:
a4:d0:37:36:80:c8:ac:13:77:f2:77:ff:2b:42:10:3c:ce:ac:
f5:fc:d6:bd:76:6a:7d:3b:d8:58:b3:01:92:e6:ea:2a:88:cf:
1c:8b:ee:c4:ee:7c:27:55:7f:0d:08:ca:64:82:58:1f:3c:ca:
22:12:51:e9:19:ca:6f:a3:1e:29:c1:d4:95:e3:2f:d1:c5:ed:
73:50:c7:40:3c:56:8f:68:7a:37:38:ad:19:75:fb:32:f5:dd:
a5:c9:32:62:f8:95:0c:53:a6:21:76:9d:94:a8:47:80:b6:6b:
33:3f:c7:e2:ba:fa:1e:e0:b4:18:20:83:d1:38:74:fc:11:b7:
2e:f7:59:a0:ec:d6:9c:9c:43:ef:a3:9c:41:70:33:c9:a1:82:
4b:ac:ef:ab:48:37:bf:f4:a4:ac:b5:cb:44:d8:ae:a4:81:96:
b4:c8:78:a4:dc:05:52:84:9d:a1:bc:e9:88:14:f6:68:31:ec:
35:47:8e:fd:fb:e7:44:6f:18:70:bb:cd:92:ad:7b:3c:e5:63:
f6:16:2c:f5:05:56:f5:1d:fd:ed:6d:47:65:e9:0c:1b:25:c3:
13:d1:cc:a0:7d:fb:c1:25:de:47:67:43:31:4b:1d:57:0d:87:
91:d9:3f:98
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAaHEvwoOomLQQhKZ1SRPE+YLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MGVjMzE2MzVmNGQ5MWJiMTEzMTJiYTBhMzQ2NWMxOGYy
MzNmNjgwHhcNMjYxMTEwMDkxNjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTQ1ZmI2MjFlMGI4NWE5M2I1NGIwMTkyOGU1MTQ1ZjIzMzg0MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMt1DAAcFJ4tY08XPOeDrboMtu95
0HGHv2v3NI5tKRECZN+wosRjPJf+hui7QzJuf6UnOvPEkAWe2NdsXj6o54iqqv3w
I/IkBxHVNyfEFAwBiEyP7zBluzwYGk948cck8NPX1pLn5AZSHVeRMK0VbxIbX+ye
pwzQrii0nEoqrx+/8mCLXVxoUH+muPg3R0sY9QpCNHbD3nWZu1w7XFk2qkEvS/rZ
n6mnXGear4rA8Cj+xP+/NE4+EAiJaq92EQsLovjNaQyuI+Rfn8GhL+vtc7nYBoJH
a+8jFSXhDwDF6nyVwSx5WLjO5Y44bTTje/yt5zikz5zItsD/VxfNr93BowIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFNVF+2IeC4WpO1SwGSjlFF8jOEMhMB8GA1UdIwQY
MBaAFOgOwxY19NkbsRMSugo0ZcGPIz9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkE3REZqWDAyUnV4RXhLNkNqUmx3WThqUDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzA3MmYtMTc4ZC00ZjBjLTlmZmIt
NGRiZTEwYzNhNzFmLzEvMVVYN1loNExoYWs3VkxBWktPVVVYeU00UXlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xMzA3MmYtMTc4ZC00ZjBjLTlmZmItNGRiZTEwYzNhNzFm
LzEvNkE3REZqWDAyUnV4RXhLNkNqUmx3WThqUDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAMBAIAATAGAwQAXCrPMDUE
AgACMC8wEAMFBioQ7UADBwAqEO1AAAIDBwEqEO1AAAQwEgMHACoQ7UAACQMHAioQ
7UAACDANBgkqhkiG9w0BAQsFAAOCAQEAsjzJ96B86mkwIVwsDzJq767ApNA3NoDI
rBN38nf/K0IQPM6s9fzWvXZqfTvYWLMBkubqKojPHIvuxO58J1V/DQjKZIJYHzzK
IhJR6RnKb6MeKcHUleMv0cXtc1DHQDxWj2h6NzitGXX7MvXdpckyYviVDFOmIXad
lKhHgLZrMz/H4rr6HuC0GCCD0Th0/BG3LvdZoOzWnJxD76OcQXAzyaGCS6zvq0g3
v/SkrLXLRNiupIGWtMh4pNwFUoSdobzpiBT2aDHsNUeO/fvnRG8YcLvNkq17POVj
9hYs9QVW9R397W1HZekMGyXDE9HMoH37wSXeR2dDMUsdVw2Hkdk/mA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:20:25 2026 by rpki-client