Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UnQDWfR3Plj0gM93rBgTbC4ofZc.roa
File: UnQDWfR3Plj0gM93rBgTbC4ofZc.roa (raw, json)
Hash identifier: 5KwUHQCXZ9KQryF/1OMfzaoHHd8RF85K7skuKWKaaxY=
Subject key identifier: 52:74:03:59:F4:77:3E:58:F4:80:CF:77:AC:18:13:6C:2E:28:7D:97
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F6667CD4796B30F9D9BE445030A592DCD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UnQDWfR3Plj0gM93rBgTbC4ofZc.roa
Signing time: Wed 15 Jul 2026 15:31:46 +0000
ROA not before: Wed 15 Jul 2026 15:31:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.72.10.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.152.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.95.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.192.249.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:67:cd:47:96:b3:0f:9d:9b:e4:45:03:0a:59:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 15 15:31:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52740359f4773e58f480cf77ac18136c2e287d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:97:07:14:32:17:4c:ee:68:62:8d:8d:aa:
8b:3a:aa:37:d0:46:16:dc:13:36:c5:9b:54:a4:70:
55:a8:4b:3d:24:da:b0:95:1d:8e:69:29:f8:25:03:
59:82:c6:51:97:ca:f2:91:fb:b6:15:f9:79:81:f6:
b6:9d:67:61:01:7d:91:e1:c3:92:14:21:e1:a9:f6:
d9:e8:16:1c:04:83:27:20:a2:e7:e9:4f:e1:2f:0c:
eb:37:76:bd:28:8a:90:19:99:a0:7a:4d:0e:0a:55:
94:60:f4:9b:c1:7f:33:7c:34:cd:90:18:9b:c5:b3:
e9:cf:e7:a1:30:f8:38:ab:8a:17:b1:95:65:82:d1:
ca:b5:93:fe:be:a3:d7:0d:0e:ea:33:ba:11:4c:0d:
17:21:26:4c:4f:c0:2f:e4:22:ea:53:0b:5c:73:c2:
5e:c2:06:38:55:94:a7:10:f9:ce:01:33:38:ee:2f:
88:3a:6f:9b:fa:67:cc:4a:4e:0c:9a:a0:93:11:90:
69:06:7b:b1:98:ea:1d:e2:7f:e5:a2:05:df:b6:bc:
c6:71:05:c5:95:56:ce:77:6a:21:b2:9c:26:05:1c:
ef:80:dd:d8:b2:cc:11:f5:aa:bb:52:7e:cc:ef:39:
09:34:06:1e:d9:36:e6:e4:d0:a5:f4:8b:e8:2e:2f:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:03:59:F4:77:3E:58:F4:80:CF:77:AC:18:13:6C:2E:28:7D:97
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UnQDWfR3Plj0gM93rBgTbC4ofZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
192.124.188.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0-193.124.8.255
193.124.94.0/24
193.124.206.0/24
194.58.43.0/24
194.58.58.0/24
194.58.67.0/24
194.58.155.0/24
194.87.3.0/24
194.87.6.0/23
194.87.36.0/24
194.87.53.0/24
194.87.59.0/24
194.87.63.0/24
194.87.75.0/24
194.87.116.0/23
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.152.0/24
194.87.160.0/24
194.87.163.0/24
194.87.165.0-194.87.166.255
194.87.176.0/23
194.87.179.0-194.87.183.255
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.229.0/24
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.12.0/24
195.133.19.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0/23
195.133.50.0/23
195.133.56.0-195.133.58.255
195.133.60.0/23
195.133.72.0/24
195.133.80.0/24
195.133.82.0/24
195.133.92.0/23
195.133.95.0/24
212.192.241.0-212.192.242.255
212.192.247.0/24
212.192.249.0/24
212.192.251.0/24
212.193.0.0/24
212.193.10.0/24
212.193.15.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
23:a1:98:b9:4d:fa:68:eb:40:2c:ec:70:bd:96:30:98:5f:a7:
19:7d:d0:28:4c:63:f1:a4:f1:08:d6:f1:ad:e2:ed:36:a9:23:
72:16:69:7a:2b:a1:2f:cd:fd:7c:6d:55:d1:dc:a8:75:00:89:
cb:2f:f8:b2:23:0e:4b:86:5b:f8:ed:7e:e7:dc:39:20:7a:5d:
27:70:76:54:93:92:01:c5:47:d5:d5:e5:e4:a1:19:50:02:c8:
c0:aa:ce:51:73:dc:f9:82:05:f8:42:3c:15:16:6d:ee:c9:21:
49:ab:fa:44:f8:eb:3a:87:81:75:0a:4f:7e:46:f7:3d:58:8a:
ce:b3:77:2f:13:91:f8:2d:44:31:e0:2a:d1:f2:fb:90:d5:d2:
fb:2a:ae:13:d9:09:48:da:cc:c8:e3:5e:0c:31:a7:1a:a9:ea:
44:55:11:75:77:8d:24:9b:1f:0d:73:b4:a5:75:5f:ae:7c:99:
5e:bc:20:b9:9f:a5:b8:68:cf:32:7c:28:5b:3a:67:e5:fd:97:
e2:2c:2d:5d:89:66:99:bc:46:66:8f:aa:34:3f:35:8d:5f:25:
5d:cf:ad:59:17:f0:79:d1:e5:cf:0d:d3:0f:df:40:ff:42:91:
fc:10:46:d1:bc:15:bb:86:15:18:23:e6:de:c1:ee:28:26:1e:
dc:c7:7a:c7
-----BEGIN CERTIFICATE-----
MIIGvTCCBaWgAwIBAgISAZ9mZ81HlrMPnZvkRQMKWS3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNzE1MTUzMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mjc0MDM1OWY0NzczZTU4ZjQ4MGNmNzdhYzE4MTM2YzJlMjg3ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F6XBxQyF0zuaGKNjaqLOqo30EYW
3BM2xZtUpHBVqEs9JNqwlR2OaSn4JQNZgsZRl8rykfu2Ffl5gfa2nWdhAX2R4cOS
FCHhqfbZ6BYcBIMnIKLn6U/hLwzrN3a9KIqQGZmgek0OClWUYPSbwX8zfDTNkBib
xbPpz+ehMPg4q4oXsZVlgtHKtZP+vqPXDQ7qM7oRTA0XISZMT8Av5CLqUwtcc8Je
wgY4VZSnEPnOATM47i+IOm+b+mfMSk4MmqCTEZBpBnuxmOod4n/logXftrzGcQXF
lVbOd2ohspwmBRzvgN3YsswR9aq7Un7M7zkJNAYe2Tbm5NCl9IvoLi/F7QIDAQAB
o4IDyTCCA8UwHQYDVR0OBBYEFFJ0A1n0dz5Y9IDPd6wYE2wuKH2XMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVW5RRFdmUjNQbGowZ005M3JCZ1RiQzRvZlpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB3QYIKwYBBQUHAQcBAf8EggHMMIIByDCCAa4EAgABMIIB
pgMEALlICgMEAMB8vAMEAMB8vgMEAMF8BTAMAwQAwXwHAwQAwXwIAwQAwXxeAwQA
wXzOAwQAwjorAwQAwjo6AwQAwjpDAwQAwjqbAwQAwlcDAwQBwlcGAwQAwlckAwQA
wlc1AwQAwlc7AwQAwlc/AwQAwldLAwQBwld0MAwDBADCV3cDBADCV3gDBADCV3oD
BADCV4gDBADCV5gDBADCV6ADBADCV6MwDAMEAMJXpQMEAMJXpgMEAcJXsDAMAwQA
wlezAwQDwlewAwQAwle5MAwDBADCV9MDBADCV9QDBADCV+UDBADCV+cwDAMEAMKH
FwMEAMKHGDAMAwQAwzo3AwQAwzo4AwQAwzo7AwQAwzo+AwQAw4UMAwQAw4UTAwQB
w4UYAwQAw4UdAwQBw4UoAwQBw4UyMAwDBAPDhTgDBADDhToDBAHDhTwDBADDhUgD
BADDhVADBADDhVIDBAHDhVwDBADDhV8wDAMEANTA8QMEANTA8gMEANTA9wMEANTA
+QMEANTA+wMEANTBAAMEANTBCgMEANTBDzAMAwQB1MEaAwQA1MEcMBQEAgACMA4D
BQMqAVfAAwUDKgz/QDANBgkqhkiG9w0BAQsFAAOCAQEAI6GYuU36aOtALOxwvZYw
mF+nGX3QKExj8aTxCNbxreLtNqkjchZpeiuhL839fG1V0dyodQCJyy/4siMOS4Zb
+O1+59w5IHpdJ3B2VJOSAcVH1dXl5KEZUALIwKrOUXPc+YIF+EI8FRZt7skhSav6
RPjrOoeBdQpPfkb3PViKzrN3LxOR+C1EMeAq0fL7kNXS+yquE9kJSNrMyONeDDGn
GqnqRFURdXeNJJsfDXO0pXVfrnyZXrwguZ+luGjPMnwoWzpn5f2X4iwtXYlmmbxG
Zo+qND81jV8lXc+tWRfwedHlzw3TD99A/0KR/BBG0bwVu4YVGCPm3sHuKCYe3Md6
xw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:18 2026 by rpki-client