Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Ujb-rer8y3oK0PdMis_6UQDfRGM.roa
File: Ujb-rer8y3oK0PdMis_6UQDfRGM.roa (raw, json)
Hash identifier: nS8Vjs9N/IpOZFb9HOe0gvaHw/0KIqNUH3dpTtA4BZI=
Subject key identifier: 52:36:FE:AD:EA:FC:CB:7A:0A:D0:F7:4C:8A:CF:FA:51:00:DF:44:63
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019CD7A799E6D875B779C232C6C1495E4BC2
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Ujb-rer8y3oK0PdMis_6UQDfRGM.roa
Signing time: Tue 10 Mar 2026 12:10:11 +0000
ROA not before: Tue 10 Mar 2026 12:10:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42065
IP address blocks: 46.19.184.0/21 maxlen: 21
77.239.224.0/19 maxlen: 19
91.108.0.0/22 maxlen: 24
91.108.24.0/21 maxlen: 24
91.108.32.0/23 maxlen: 24
91.108.52.0/24 maxlen: 24
92.62.48.0/20 maxlen: 22
94.124.176.0/22 maxlen: 23
94.124.178.0/23 maxlen: 24
94.229.96.0/20 maxlen: 20
95.140.92.0/24 maxlen: 24
95.140.94.0/24 maxlen: 24
95.161.0.0/18 maxlen: 24
95.161.88.0/22 maxlen: 24
95.161.95.0/24 maxlen: 24
95.161.96.0/23 maxlen: 24
95.161.100.0/23 maxlen: 23
95.161.102.0/23 maxlen: 24
95.161.104.0/23 maxlen: 24
95.161.124.0/24 maxlen: 24
95.161.125.0/24 maxlen: 24
95.161.127.0/24 maxlen: 24
185.26.72.0/24 maxlen: 24
185.26.74.0/24 maxlen: 24
185.51.60.0/22 maxlen: 24
188.65.64.0/21 maxlen: 21
212.232.64.0/20 maxlen: 20
213.21.0.0/19 maxlen: 19
213.21.48.0/20 maxlen: 20
2a00:11d8::/32 maxlen: 48
2a02:1e1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:a7:99:e6:d8:75:b7:79:c2:32:c6:c1:49:5e:4b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Mar 10 12:10:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5236feadeafccb7a0ad0f74c8acffa5100df4463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:3f:72:82:cf:a2:9f:c7:19:b0:c3:94:42:
23:e7:99:f7:1d:14:a8:ef:0d:66:79:06:1c:55:0c:
fb:f3:43:52:f8:66:5b:48:14:d5:2e:79:ab:0e:01:
2b:94:0a:ec:e1:82:df:25:7e:54:fe:e9:c7:93:e0:
0a:4c:01:34:0b:ad:c5:9e:8c:f3:f4:4e:7c:ed:eb:
e8:46:6d:fb:9d:66:ce:db:8c:37:65:15:d3:cd:65:
a6:e5:32:5f:29:f1:b7:9a:e8:e3:82:e0:30:6c:0a:
27:eb:f0:73:0a:4a:10:35:4b:47:da:81:93:fc:93:
e5:f2:ff:d1:2f:4f:44:81:e8:1d:4d:df:81:44:8f:
ff:07:e4:3e:c9:09:6f:37:00:63:58:6e:59:c2:fc:
22:25:ee:f8:9f:60:f1:6c:c5:35:82:24:ed:72:ce:
da:a4:f2:80:38:d1:db:f4:f9:6b:6c:84:94:17:d1:
fa:fe:ab:55:60:5a:99:55:3b:42:56:d1:6c:0b:4f:
ab:71:5f:14:43:96:c3:7d:f3:97:88:ad:12:a0:a0:
3c:3a:3f:77:5f:dc:7a:4b:4c:34:2a:39:c8:45:ef:
8b:e9:01:4c:c5:b9:91:17:6e:37:b3:a0:b2:67:ba:
98:38:1a:6c:dc:67:89:6f:d3:73:f6:ff:1a:9c:d8:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:36:FE:AD:EA:FC:CB:7A:0A:D0:F7:4C:8A:CF:FA:51:00:DF:44:63
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Ujb-rer8y3oK0PdMis_6UQDfRGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.184.0/21
77.239.224.0/19
91.108.0.0/22
91.108.24.0-91.108.33.255
91.108.52.0/24
92.62.48.0/20
94.124.176.0/22
94.229.96.0/20
95.140.92.0/24
95.140.94.0/24
95.161.0.0/18
95.161.88.0/22
95.161.95.0-95.161.97.255
95.161.100.0-95.161.105.255
95.161.124.0/23
95.161.127.0/24
185.26.72.0/24
185.26.74.0/24
185.51.60.0/22
188.65.64.0/21
212.232.64.0/20
213.21.0.0/19
213.21.48.0/20
IPv6:
2a00:11d8::/32
2a02:1e1::/32
Signature Algorithm: sha256WithRSAEncryption
7e:be:df:27:c5:03:a3:63:60:12:1f:4d:bd:eb:09:22:6b:ff:
aa:b5:98:ef:59:4e:7c:60:2f:39:06:34:34:68:02:32:37:83:
2f:48:d1:d1:28:ea:85:8b:0e:59:9e:e2:42:84:7b:29:71:d5:
16:aa:ac:68:e9:44:2d:0f:44:c7:cd:2e:fd:be:1e:02:46:f2:
35:59:8c:ae:31:ea:5a:fe:fd:fe:26:59:65:5d:17:d1:a4:88:
3f:e1:f6:20:0d:30:68:22:7c:5c:83:c8:73:c0:54:e4:af:df:
a4:82:db:c5:09:57:bb:e7:25:0f:94:e8:18:26:ad:b0:aa:36:
80:4a:1b:fe:53:1a:e4:3d:73:52:47:94:68:b0:5c:d4:1e:e0:
22:c2:8c:0e:40:76:a1:85:b9:28:88:66:87:c8:92:6d:a4:7a:
e8:f1:e2:c7:a5:e8:1c:7f:63:dc:6a:26:4b:52:e1:19:30:d6:
97:cd:d2:c9:8c:ef:92:cf:3d:33:48:72:bf:d1:54:eb:71:41:
27:74:12:8b:cb:4e:a1:93:ec:e7:69:9a:78:79:a9:4c:c3:9b:
cc:4d:e8:dc:6d:e6:c8:de:f9:c2:df:1e:6a:86:70:e1:dd:2e:
26:33:81:48:0b:91:21:be:cd:81:2f:73:86:c0:30:1c:96:67:
fc:3e:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:51:47 2026 by rpki-client