Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/uUXbGveHh5dI8opniCmhRttZRQo.roa
File: uUXbGveHh5dI8opniCmhRttZRQo.roa (raw, json)
Hash identifier: 217TbMSDudGUCYzygu/2lmf/QwsJ65KMrSXfrm+gAfg=
Subject key identifier: B9:45:DB:1A:F7:87:87:97:48:F2:8A:67:88:29:A1:46:DB:59:45:0A
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 01A0490F92A2B0905B0B3D6B2BDD14E3AA41
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/uUXbGveHh5dI8opniCmhRttZRQo.roa
Signing time: Fri 28 Aug 2026 15:49:12 +0000
ROA not before: Fri 28 Aug 2026 15:49:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203217
IP address blocks: 93.180.216.0/21 maxlen: 24
93.180.217.0/24 maxlen: 24
93.180.219.0/24 maxlen: 24
93.180.221.0/24 maxlen: 24
138.124.156.0/22 maxlen: 24
144.86.228.0/22 maxlen: 24
144.86.228.0/24 maxlen: 24
185.20.196.0/22 maxlen: 24
185.20.196.0/23 maxlen: 23
185.138.120.0/22 maxlen: 24
185.254.12.0/22 maxlen: 24
195.133.220.0/22 maxlen: 24
195.133.222.0/24 maxlen: 24
195.133.223.0/24 maxlen: 24
199.74.188.0/22 maxlen: 24
199.74.188.0/23 maxlen: 23
199.74.190.0/23 maxlen: 23
199.74.190.0/24 maxlen: 24
199.74.191.0/24 maxlen: 24
2a0b:1880::/29 maxlen: 64
2a0b:1880:7::/48 maxlen: 48
2a0b:1880:19::/48 maxlen: 48
2a0b:1880:1a::/48 maxlen: 48
2a0b:1880:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:0f:92:a2:b0:90:5b:0b:3d:6b:2b:dd:14:e3:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Aug 28 15:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b945db1af787879748f28a678829a146db59450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:e9:3e:c9:82:83:d9:f9:fd:a9:af:52:38:
1d:2b:59:6c:5a:f7:a0:2e:65:80:f5:34:9b:b8:a4:
61:69:af:46:86:bb:bb:bf:0f:0e:33:34:ef:00:e4:
75:f3:76:68:e9:73:17:eb:78:b5:e6:31:03:d4:8a:
53:d2:0a:bf:91:17:5e:a2:86:99:1a:36:77:dd:77:
b5:bc:d6:f6:4c:a6:08:35:a4:06:93:1a:40:dd:5f:
b0:8b:1f:38:59:ec:ad:d6:02:63:a4:e7:a6:e1:44:
df:05:25:f2:8c:30:5f:b4:3c:63:ea:e8:6d:5b:91:
b8:bd:77:37:cc:84:b7:f2:f6:ed:e2:b1:b1:f1:33:
4a:6e:01:60:9d:d8:83:ad:6b:3f:03:fb:11:00:cd:
04:5e:56:be:de:78:08:63:1b:af:db:df:a2:2a:1c:
e9:d0:46:67:f9:5d:b5:e7:8c:6d:fd:41:73:5f:e0:
1e:bf:d3:ee:a9:23:3d:c0:f4:a3:dd:bc:fa:ac:da:
25:9b:3b:34:2e:89:53:50:f3:c8:de:51:ca:9e:d8:
0c:83:48:b0:8b:be:9a:af:a0:83:63:08:bb:3f:ac:
4e:e5:b5:9c:e4:b4:39:29:32:07:27:1e:9b:6a:67:
92:9c:33:6e:c7:5d:85:83:7a:73:b1:a3:5f:d0:b1:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:DB:1A:F7:87:87:97:48:F2:8A:67:88:29:A1:46:DB:59:45:0A
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/uUXbGveHh5dI8opniCmhRttZRQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.216.0/21
138.124.156.0/22
144.86.228.0/22
185.20.196.0/22
185.138.120.0/22
185.254.12.0/22
195.133.220.0/22
199.74.188.0/22
IPv6:
2a0b:1880::/29
Signature Algorithm: sha256WithRSAEncryption
2a:09:1f:f9:b3:fd:83:dc:16:9d:ad:fc:d7:7f:76:96:64:73:
d9:f3:72:4b:02:e1:2b:a2:2c:a5:c3:5f:cc:7a:9a:a3:c5:78:
13:a6:e3:1f:ce:75:21:7a:83:e2:94:e6:3d:98:ae:d3:c2:5f:
26:1c:dc:02:fb:9f:99:95:27:23:0c:c0:db:ad:0f:bb:d7:e1:
94:5b:b5:ee:76:54:71:2a:a6:3c:dd:aa:41:39:b8:7b:95:6c:
6d:08:0a:a0:0f:ff:96:b0:af:b5:ac:91:6e:0e:38:bb:7e:fc:
bb:15:dd:ca:55:99:6f:08:68:f5:1e:87:aa:99:d1:a2:aa:1a:
fa:58:96:e1:e2:3a:29:96:81:c5:e6:32:b1:df:0d:c3:3d:73:
13:a5:92:6b:42:73:2a:3c:9b:6d:e4:c6:42:3d:bf:33:24:b2:
62:3a:62:d9:76:cb:58:1f:64:a9:8d:95:f8:42:93:84:6f:b6:
f9:08:a9:13:a0:12:23:18:a7:08:ba:a2:6e:63:0d:8f:04:f2:
38:d8:b1:38:6d:03:16:b9:b9:35:05:5d:26:20:f4:07:40:90:
97:aa:e9:f3:e2:65:66:ef:72:d0:cd:24:1b:54:a1:e7:6d:b6:
a3:a9:bb:61:d0:81:69:c1:2a:ea:61:fc:9a:2f:6c:e7:45:2d:
80:ec:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:49:42 2026 by rpki-client