Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/UqImUVHBq3p8NTSpUZrZaZqeIO0.roa
File: UqImUVHBq3p8NTSpUZrZaZqeIO0.roa (raw, json)
Hash identifier: b0cbtwxFDLQWZmYSn/tfFyO/bdt5kbBtbbVLEmIteZY=
Subject key identifier: 52:A2:26:51:51:C1:AB:7A:7C:35:34:A9:51:9A:D9:69:9A:9E:20:ED
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F23684922741D484162432F80F0E38357
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/UqImUVHBq3p8NTSpUZrZaZqeIO0.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202635
IP address blocks: 86.110.32.0/24 maxlen: 24
86.110.35.0/24 maxlen: 24
86.110.38.0/24 maxlen: 24
86.110.39.0/24 maxlen: 24
86.110.43.0/24 maxlen: 24
86.110.45.0/24 maxlen: 24
185.158.176.0/22 maxlen: 24
185.193.60.0/22 maxlen: 24
185.244.100.0/22 maxlen: 24
2a13:ca40::/32 maxlen: 32
2a13:ca41::/32 maxlen: 32
2a13:ca42::/32 maxlen: 32
2a13:ca43::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:49:22:74:1d:48:41:62:43:2f:80:f0:e3:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52a2265151c1ab7a7c3534a9519ad9699a9e20ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:ee:43:32:d1:86:2b:3e:8b:5d:1e:c1:85:
3c:91:3a:aa:77:d0:27:23:54:c9:82:83:90:74:a8:
ac:d9:9a:b5:be:f4:40:ea:99:b7:79:62:f4:30:d4:
1c:a1:1c:95:08:10:43:73:48:8c:95:78:dd:59:2e:
ee:30:d5:0a:d1:0c:fc:07:2a:b9:c7:ed:48:8a:04:
70:53:1c:b7:d3:62:8c:42:06:56:db:1c:87:26:7d:
ba:a2:8a:45:71:3f:7e:fb:23:51:84:5d:b5:27:b9:
9f:f3:12:bb:0d:b5:31:31:39:bb:fd:e9:5b:73:21:
e4:30:3a:a8:6b:72:fc:cb:13:87:a6:92:f9:12:9d:
2a:46:9d:d5:0d:f2:5e:5b:d3:0a:01:12:a1:1c:a6:
2b:35:7d:c2:8c:f9:d4:38:83:92:2a:22:ae:ae:28:
80:80:7f:ed:f4:fc:7a:9c:f6:f5:c8:3f:ff:0a:08:
d9:49:f9:d0:3a:c3:ee:85:ab:78:22:37:c2:0a:db:
c6:73:e6:17:de:8b:8a:7d:71:aa:fe:df:0a:9e:f4:
dc:53:b3:46:53:bd:ef:43:7a:d5:bc:94:33:6e:af:
5b:db:1a:55:a8:66:66:21:63:3b:7a:3b:f2:74:81:
b9:40:84:2d:3b:0e:57:ff:6b:a8:1a:c3:75:13:db:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:26:51:51:C1:AB:7A:7C:35:34:A9:51:9A:D9:69:9A:9E:20:ED
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/UqImUVHBq3p8NTSpUZrZaZqeIO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.32.0/24
86.110.35.0/24
86.110.38.0/23
86.110.43.0/24
86.110.45.0/24
185.158.176.0/22
185.193.60.0/22
185.244.100.0/22
IPv6:
2a13:ca40::/30
Signature Algorithm: sha256WithRSAEncryption
a0:e9:0f:f1:0d:40:d5:43:c6:f6:9c:5b:a8:21:4b:17:3e:c8:
d4:20:6e:a3:12:87:a5:2a:de:d4:46:7f:d4:79:b0:c0:78:e5:
65:1d:13:e6:4a:0e:4f:5a:d5:7a:81:23:18:fd:f1:ae:48:a0:
aa:b3:3c:b4:6c:2a:42:18:57:5e:0d:77:c8:55:2f:29:b5:b3:
4a:55:06:1e:c6:c6:0a:5a:3b:b8:7c:22:3b:ea:8e:e3:3d:f2:
6f:2b:89:46:ce:3a:bf:94:37:f0:8c:05:48:f8:0f:63:c7:4a:
c3:4c:91:5e:e4:3a:eb:7b:4a:ee:0d:c8:c2:63:16:51:b5:00:
47:19:64:fd:c6:c3:93:1f:03:c9:65:5c:b3:4a:62:41:4d:6d:
18:43:cf:1b:3b:55:87:9e:1e:dd:cb:60:a4:67:97:77:51:ed:
df:ef:87:97:9c:29:6c:92:8d:f9:7b:12:27:b7:c5:00:5e:ec:
47:2e:38:73:e0:e0:c1:15:7f:83:41:67:dd:b8:5b:a2:1e:5c:
18:40:2b:00:48:29:0f:f4:a2:24:b4:9e:5f:99:90:2f:8d:0e:
81:c1:ed:55:37:95:c0:30:a5:e4:c9:3b:a9:0a:61:60:8c:60:
64:fd:b3:1a:32:60:9b:de:98:f4:b8:59:d6:91:66:43:11:9a:
38:2e:04:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 09:19:23 2026 by rpki-client