Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/UzVDY7Ik-roKvAyzq6Ihe3SKnZI.roa
File: UzVDY7Ik-roKvAyzq6Ihe3SKnZI.roa (raw, json)
Hash identifier: dxbmqUacns4yzNWlQr8E0ENvALizLGWt/CfFnlL61L0=
Subject key identifier: 53:35:43:63:B2:24:FA:BA:0A:BC:0C:B3:AB:A2:21:7B:74:8A:9D:92
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019F73EFA81F8EA91EBCD7E2A3A5FBC9AD28
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/UzVDY7Ik-roKvAyzq6Ihe3SKnZI.roa
Signing time: Sat 18 Jul 2026 06:35:13 +0000
ROA not before: Sat 18 Jul 2026 06:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20115
IP address blocks: 9.233.0.0/19 maxlen: 19
9.233.64.0/19 maxlen: 19
9.237.48.0/20 maxlen: 20
9.237.64.0/20 maxlen: 20
9.237.128.0/18 maxlen: 18
9.249.28.0/22 maxlen: 22
138.226.214.0/23 maxlen: 23
151.145.128.0/20 maxlen: 20
151.145.128.0/24 maxlen: 24
151.145.144.0/20 maxlen: 20
151.145.160.0/20 maxlen: 20
151.145.176.0/20 maxlen: 20
158.120.48.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
158.120.54.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
158.120.62.0/24 maxlen: 24
170.100.148.0/22 maxlen: 22
170.100.204.0/24 maxlen: 24
170.100.206.0/23 maxlen: 23
192.6.64.0/22 maxlen: 22
192.6.172.0/22 maxlen: 22
192.6.252.0/22 maxlen: 22
192.25.180.0/22 maxlen: 22
192.25.200.0/22 maxlen: 22
192.25.208.0/22 maxlen: 22
192.25.232.0/22 maxlen: 22
192.25.244.0/22 maxlen: 22
192.137.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:73:ef:a8:1f:8e:a9:1e:bc:d7:e2:a3:a5:fb:c9:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 18 06:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53354363b224faba0abc0cb3aba2217b748a9d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:12:c3:76:ca:49:55:a5:ad:f4:0d:79:eb:bd:
ff:86:fa:16:34:61:f5:6a:e6:d1:fb:54:2b:f4:fd:
a9:e3:b0:83:1e:3d:6d:75:44:23:39:10:f7:9d:ad:
63:55:64:4b:ea:fa:5a:d1:b9:77:8d:3c:e4:78:63:
b1:95:cd:f0:f6:5f:14:ed:dc:68:46:2b:bb:dc:aa:
1f:32:0a:74:01:bb:ce:75:0a:2a:7f:bc:68:dc:5f:
16:24:92:99:00:c5:e5:06:4b:2e:f9:22:98:c3:b7:
09:08:bd:f4:eb:f8:b1:4f:73:6b:86:38:82:49:2c:
0b:c4:94:09:30:d3:12:fe:7b:0a:0e:89:9c:d4:d1:
de:0c:22:7c:ae:dc:23:fa:64:7e:51:78:b0:49:95:
2b:d3:41:87:29:a6:b1:a2:e5:ce:eb:26:57:56:9d:
26:56:2d:89:7f:fa:1a:41:3b:e5:29:57:b1:16:a3:
97:b1:8b:96:d0:63:26:05:73:b9:84:c2:99:54:1a:
ee:81:19:17:f6:80:49:56:6f:99:c6:4e:bf:90:67:
1b:7e:12:24:0e:ed:2e:5e:43:be:be:7f:8b:93:7c:
53:ac:ed:81:2b:5e:17:fd:d7:c9:46:af:9a:69:0b:
a7:30:3c:2a:b4:86:03:a6:64:39:4c:16:9d:8a:8e:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:43:63:B2:24:FA:BA:0A:BC:0C:B3:AB:A2:21:7B:74:8A:9D:92
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/UzVDY7Ik-roKvAyzq6Ihe3SKnZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.233.0.0/19
9.233.64.0/19
9.237.48.0-9.237.79.255
9.237.128.0/18
9.249.28.0/22
138.226.214.0/23
151.145.128.0/18
158.120.48.0/24
158.120.50.0/24
158.120.52.0/24
158.120.54.0/24
158.120.56.0/24
158.120.58.0/24
158.120.60.0/24
158.120.62.0/24
170.100.148.0/22
170.100.204.0/24
170.100.206.0/23
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
63:12:5b:a4:80:b0:1f:4e:6c:bb:75:94:4c:6d:74:f9:9a:6a:
f3:a0:dd:ff:2b:09:53:16:22:4a:ab:cb:99:28:ba:90:5f:3d:
43:12:e7:44:27:2b:36:45:56:38:a3:69:55:97:c8:32:43:75:
61:18:72:2f:c6:a3:40:ad:aa:4f:31:cf:6c:2b:1f:1b:a5:36:
f9:ed:73:e0:d6:b9:83:e0:9b:27:54:ee:45:ee:88:b5:37:18:
2c:55:8f:b7:4d:52:51:d6:4e:7a:a4:17:40:14:69:cf:58:b1:
5f:6c:6b:30:57:ed:fc:fb:dc:a9:e1:97:0f:d4:0d:25:f8:0c:
3a:93:82:d3:3b:01:1b:71:40:f9:76:c7:44:20:43:a4:e4:63:
03:56:4d:e3:e8:e2:ee:22:e9:90:70:cd:ae:a9:eb:d7:f1:6a:
1b:35:67:e3:19:8c:d1:6a:5c:1b:53:a5:e3:fe:c6:bc:23:16:
78:44:1b:4b:a7:00:85:72:8c:1e:77:0e:86:8c:58:78:5d:ec:
4b:cb:eb:a9:bd:12:24:e1:e9:78:7a:c1:fe:b0:d7:f5:bb:8f:
52:52:02:81:3e:30:f1:ff:1a:5e:2b:e7:15:8a:f8:b5:fa:7d:
11:22:16:1c:5b:d6:67:df:35:e8:0c:13:45:35:03:3c:c8:2e:
bd:10:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:58 2026 by rpki-client