Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/Ua8GMD2VEpT4ohY_TI15XJiRa-E.roa
File: Ua8GMD2VEpT4ohY_TI15XJiRa-E.roa (raw, json)
Hash identifier: 9TQri1TmjgdNjvHuT83dlUNDZR2EzU0Qxroi2uhAe7I=
Subject key identifier: 51:AF:06:30:3D:95:12:94:F8:A2:16:3F:4C:8D:79:5C:98:91:6B:E1
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 01A183B4162ABBD4E949BE8C4C7423EBFDAC
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/Ua8GMD2VEpT4ohY_TI15XJiRa-E.roa
Signing time: Wed 28 Oct 2026 18:09:39 +0000
ROA not before: Wed 28 Oct 2026 18:09:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 172.111.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:b4:16:2a:bb:d4:e9:49:be:8c:4c:74:23:eb:fd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: Oct 28 18:09:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51af06303d951294f8a2163f4c8d795c98916be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:f0:d1:14:0f:19:81:94:a1:d6:20:8b:98:
a7:1e:ad:a4:bd:b2:77:ee:3a:4d:7e:b2:6d:ec:60:
c0:86:2d:07:90:a7:9e:cc:cb:8a:93:cc:13:10:12:
cd:9c:41:e2:3a:ee:5a:6f:f2:ad:13:3a:8d:2b:61:
2b:6f:67:37:42:42:54:f0:9f:db:74:7b:0f:ce:28:
da:a8:bf:af:da:62:19:d5:57:6a:78:26:92:fe:34:
21:d9:a9:33:1f:70:6b:1e:39:fc:c2:87:8c:78:e9:
c4:53:d2:fc:f3:68:8e:61:52:18:04:f4:ed:61:1a:
e7:88:c8:e8:17:d3:f5:54:e7:90:c1:4b:9c:af:e0:
f4:83:7b:1a:38:84:ef:01:0b:de:58:24:ed:02:75:
07:4f:05:1e:67:6f:ae:bf:da:dc:a1:34:c4:f8:ad:
d4:5d:61:17:6e:1a:5b:6c:59:46:14:54:87:31:6c:
c5:1d:a6:21:f8:3d:15:01:1b:2a:7e:42:e0:9c:3a:
6c:c8:d6:db:07:29:80:6c:53:aa:65:c1:50:45:7a:
9f:7a:3a:d0:3f:02:d4:3e:4f:be:1c:f7:8d:cf:4e:
b7:6f:f8:62:19:e5:34:7d:fc:1c:23:b2:23:94:a3:
d9:f7:76:13:4e:a0:c7:12:5f:4a:f1:b2:56:7e:05:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AF:06:30:3D:95:12:94:F8:A2:16:3F:4C:8D:79:5C:98:91:6B:E1
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/Ua8GMD2VEpT4ohY_TI15XJiRa-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.111.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f9:97:46:d6:52:01:97:84:b2:8a:ae:84:be:58:1f:87:8a:
63:41:ab:e2:af:80:e6:4f:c4:57:cf:fa:e9:5f:86:c0:34:f0:
5e:66:61:4c:36:d8:a9:de:51:6b:1d:8d:19:69:34:07:ef:45:
fc:f9:49:b0:bd:24:1f:29:a0:55:3e:0e:3f:7c:54:30:de:db:
41:75:77:c4:7b:e4:f3:bc:83:be:1e:17:fb:1a:be:b3:45:fb:
84:97:a6:43:91:29:b4:d6:99:13:c5:ad:1a:2d:79:4e:70:3c:
f4:d5:cb:69:10:d7:b0:2b:59:50:86:17:ce:68:90:94:e0:f7:
90:cb:bc:40:b6:ef:4e:17:13:07:53:6c:69:5e:dd:a1:73:b3:
a5:ee:0c:74:51:f8:61:96:7f:a1:c4:a7:49:21:f1:10:73:9c:
6d:e4:d6:60:72:bd:42:67:7d:eb:54:e1:b8:f2:17:f8:6a:a7:
c7:eb:41:a3:90:d9:a0:07:26:71:36:75:e1:e6:81:92:ee:47:
5d:ad:9f:27:4f:1f:cb:6f:3a:24:9e:3b:e0:e8:5f:89:75:42:
90:97:53:22:a8:55:33:ca:9d:b0:63:dd:c4:0e:e1:ae:45:c9:
a2:3b:ab:2d:8f:16:f8:4c:24:d9:d2:d9:1c:ea:94:7e:8a:7f:
49:70:dc:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGDtBYqu9TpSb6MTHQj6/2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDNmMWY2M2MxMDA5YzQyYTY4OTE5ODYzYTliOGJhODU3
ODY3MzAwHhcNMjYxMDI4MTgwOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWFmMDYzMDNkOTUxMjk0ZjhhMjE2M2Y0YzhkNzk1Yzk4OTE2YmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+/w0RQPGYGUodYgi5inHq2kvbJ3
7jpNfrJt7GDAhi0HkKeezMuKk8wTEBLNnEHiOu5ab/KtEzqNK2Erb2c3QkJU8J/b
dHsPzijaqL+v2mIZ1VdqeCaS/jQh2akzH3BrHjn8woeMeOnEU9L882iOYVIYBPTt
YRrniMjoF9P1VOeQwUucr+D0g3saOITvAQveWCTtAnUHTwUeZ2+uv9rcoTTE+K3U
XWEXbhpbbFlGFFSHMWzFHaYh+D0VARsqfkLgnDpsyNbbBymAbFOqZcFQRXqfejrQ
PwLUPk++HPeNz063b/hiGeU0ffwcI7IjlKPZ93YTTqDHEl9K8bJWfgVVCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGvBjA9lRKU+KIWP0yNeVyYkWvhMB8GA1UdIwQY
MBaAFGbT8fY8EAnEKmiRmGOpuLqFeGcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZDE1N2UtMjY3Zi00M2E0LWFlMGEt
NWEyZTlkNjY5NWZjLzEvVWE4R01EMlZFcFQ0b2hZX1RJMTVYSmlSYS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZDE1N2UtMjY3Zi00M2E0LWFlMGEtNWEyZTlkNjY5NWZj
LzEvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8hMA0G
CSqGSIb3DQEBCwUAA4IBAQB7+ZdG1lIBl4Syiq6Evlgfh4pjQavir4DmT8RXz/rp
X4bANPBeZmFMNtip3lFrHY0ZaTQH70X8+UmwvSQfKaBVPg4/fFQw3ttBdXfEe+Tz
vIO+Hhf7Gr6zRfuEl6ZDkSm01pkTxa0aLXlOcDz01ctpENewK1lQhhfOaJCU4PeQ
y7xAtu9OFxMHU2xpXt2hc7Ol7gx0Ufhhln+hxKdJIfEQc5xt5NZgcr1CZ33rVOG4
8hf4aqfH60GjkNmgByZxNnXh5oGS7kddrZ8nTx/Lbzoknjvg6F+JdUKQl1MiqFUz
yp2wY93EDuGuRcmiO6stjxb4TCTZ0tkc6pR+in9JcNw2
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:42:14 2026 by rpki-client