Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/UGRDJ80jQdDhvrQMVXblgF8DR0c.roa
File: UGRDJ80jQdDhvrQMVXblgF8DR0c.roa (raw, json)
Hash identifier: lQTsQALDFG1Kvn4K2WeR3QBtiKIu7DiQf5ulvRqOFJw=
Subject key identifier: 50:64:43:27:CD:23:41:D0:E1:BE:B4:0C:55:76:E5:80:5F:03:47:47
Certificate issuer: /CN=88605bb5a213f06afb8244fb2f953badcdfe177d
Certificate serial: 01A1CED4F6DC50DC5B0A8B444E13B532749E
Authority key identifier: 88:60:5B:B5:A2:13:F0:6A:FB:82:44:FB:2F:95:3B:AD:CD:FE:17:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGBbtaIT8Gr7gkT7L5U7rc3-F30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/UGRDJ80jQdDhvrQMVXblgF8DR0c.roa
Signing time: Thu 12 Nov 2026 08:17:05 +0000
ROA not before: Thu 12 Nov 2026 08:17:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200223
IP address blocks: 185.229.32.0/24 maxlen: 24
2a03:3a61::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/iGBbtaIT8Gr7gkT7L5U7rc3-F30.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/iGBbtaIT8Gr7gkT7L5U7rc3-F30.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGBbtaIT8Gr7gkT7L5U7rc3-F30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:d4:f6:dc:50:dc:5b:0a:8b:44:4e:13:b5:32:74:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88605bb5a213f06afb8244fb2f953badcdfe177d
Validity
Not Before: Nov 12 08:17:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50644327cd2341d0e1beb40c5576e5805f034747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:a1:2d:85:1c:e7:65:c3:99:31:d7:cd:ee:
d7:27:2f:63:76:bf:b9:e7:bf:d6:8e:38:e9:6c:b3:
d4:b0:98:3d:e2:b1:97:21:0f:33:66:82:df:2d:20:
4b:92:a7:75:75:b7:60:65:45:7d:b2:cd:44:d8:98:
99:61:65:a6:15:e0:5a:81:65:c4:85:5b:b1:05:c0:
fe:ac:00:d4:aa:97:62:a9:8a:0d:4f:42:4c:db:56:
f1:1b:51:e4:a4:f3:0c:81:27:dc:c2:88:41:7c:b2:
43:12:b3:9d:89:e0:8f:24:23:fe:1a:55:57:60:cd:
17:a8:62:24:5d:c4:c6:74:ce:ee:0f:58:d5:bb:2e:
37:98:b9:8d:f6:9c:2c:16:39:90:43:15:2c:e0:13:
69:20:23:7c:f1:50:70:01:f4:60:e6:af:b1:d6:d1:
17:74:15:3a:f9:bb:0c:34:c2:ec:f1:fb:e0:29:13:
d8:8f:64:cd:4e:61:b9:9b:1b:79:77:2f:57:3c:d9:
79:07:85:3f:1b:ff:ff:44:74:44:0c:65:2a:2f:67:
73:2b:d6:88:69:a8:65:ed:69:ea:b2:9a:9e:3c:95:
63:ff:bf:c8:04:d3:90:df:0f:ce:c9:8c:2c:47:94:
e4:a7:86:09:09:5d:9b:e8:29:32:6b:7a:f9:2c:0e:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:64:43:27:CD:23:41:D0:E1:BE:B4:0C:55:76:E5:80:5F:03:47:47
X509v3 Authority Key Identifier:
keyid:88:60:5B:B5:A2:13:F0:6A:FB:82:44:FB:2F:95:3B:AD:CD:FE:17:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGBbtaIT8Gr7gkT7L5U7rc3-F30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/UGRDJ80jQdDhvrQMVXblgF8DR0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/iGBbtaIT8Gr7gkT7L5U7rc3-F30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.32.0/24
IPv6:
2a03:3a61::/32
Signature Algorithm: sha256WithRSAEncryption
13:77:9a:c1:ce:d7:2d:78:4d:76:d3:4f:10:c5:9e:3a:fb:5b:
72:c4:c1:66:58:e2:12:40:0c:99:46:d7:dc:5b:0c:7d:73:5b:
7a:fd:c2:6b:0a:de:3f:b2:83:32:a4:cd:20:93:90:27:77:d1:
d3:e0:c6:52:83:e0:a5:24:41:63:36:c8:11:9c:fd:4f:97:5f:
82:46:10:06:f4:15:54:ec:27:b3:3b:c4:f9:08:6b:c9:1a:60:
19:2f:a7:f4:86:d1:9c:eb:f2:99:3e:03:c4:2f:17:74:52:ba:
a6:bd:c7:8a:be:32:c6:61:d7:35:a1:a8:ea:d1:4b:7f:64:58:
ed:b9:4a:04:87:a8:c1:10:8f:99:e6:59:c3:cf:98:0f:d7:33:
33:a3:b9:36:ee:51:45:ce:9c:61:7c:78:21:01:58:18:68:75:
85:94:96:dd:f9:c4:e4:3d:21:5c:92:de:0d:6c:ab:ed:f1:9a:
47:56:78:bd:c2:8f:ce:5f:dd:f1:88:1c:7a:e4:c9:32:1c:53:
2e:72:ae:6e:dd:9a:64:c4:d2:a1:aa:fc:8c:0d:82:9f:47:3c:
c3:30:26:97:b1:5f:07:e8:20:41:78:6c:2c:a7:3b:b3:da:b1:
66:10:1a:a2:02:d4:1d:cd:47:d6:b2:8c:1e:6a:2a:44:d1:09:
31:37:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:56:42 2026 by rpki-client