Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/UXNF5kVaOq-W-e9EdVk2K4QWKD0.roa
File: UXNF5kVaOq-W-e9EdVk2K4QWKD0.roa (raw, json)
Hash identifier: M2GGr29hNVwpGL58D6ogKvCYQWNsSUAPYCU+j7Wh2lM=
Subject key identifier: 51:73:45:E6:45:5A:3A:AF:96:F9:EF:44:75:59:36:2B:84:16:28:3D
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019F9355154FB5CA4DF806EE6EDFD25A7B1F
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/UXNF5kVaOq-W-e9EdVk2K4QWKD0.roa
Signing time: Fri 24 Jul 2026 08:54:14 +0000
ROA not before: Fri 24 Jul 2026 08:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 186.247.72.0/24 maxlen: 24
186.247.185.0/24 maxlen: 24
187.13.19.0/24 maxlen: 24
187.13.210.0/24 maxlen: 24
187.13.215.0/24 maxlen: 24
187.13.216.0/24 maxlen: 24
187.14.116.0/24 maxlen: 24
187.14.117.0/24 maxlen: 24
187.15.100.0/24 maxlen: 24
187.15.102.0/24 maxlen: 24
187.15.117.0/24 maxlen: 24
187.15.119.0/24 maxlen: 24
187.15.134.0/24 maxlen: 24
187.15.135.0/24 maxlen: 24
187.15.136.0/24 maxlen: 24
187.15.162.0/24 maxlen: 24
187.40.17.0/24 maxlen: 24
187.40.18.0/24 maxlen: 24
187.40.226.0/24 maxlen: 24
2a13:240:300::/40 maxlen: 40
2a13:240:500::/40 maxlen: 40
2a13:240:700::/40 maxlen: 40
2a13:240:900::/40 maxlen: 40
2a13:240:b00::/40 maxlen: 40
2a13:240:2800::/40 maxlen: 40
2a13:240:2e00::/40 maxlen: 40
2a13:240:3200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:55:15:4f:b5:ca:4d:f8:06:ee:6e:df:d2:5a:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jul 24 08:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=517345e6455a3aaf96f9ef447559362b8416283d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:66:e0:21:e7:7f:f9:1c:4d:c9:e7:13:9a:f5:
b5:24:e2:ed:e1:c9:9f:dc:1a:e1:ea:1f:a7:6d:2e:
4e:4d:52:af:24:68:7c:f1:4d:69:a8:4e:f8:bc:bf:
c7:90:e1:18:c9:94:79:95:bd:2f:bb:c2:31:94:be:
9f:6f:24:f0:41:1a:59:53:45:54:f9:b3:d1:06:2d:
7e:15:e4:a2:e1:92:93:86:e0:52:f7:4a:56:76:28:
01:1e:1b:ec:cf:fe:39:8b:ae:cb:7b:61:37:01:cd:
84:50:25:13:7d:9a:82:03:8f:ee:e4:6e:7c:d0:65:
86:9d:60:ab:5d:ae:fb:82:57:1d:88:12:82:f5:fc:
31:1e:ff:73:8c:74:05:a3:7d:8c:6f:a9:e0:72:35:
d8:64:ba:e0:2f:74:57:58:ee:aa:17:d3:35:4a:49:
c5:27:5a:4c:ce:8e:38:7a:eb:5a:69:58:18:e1:d5:
34:5f:3b:44:55:47:8b:dd:b2:46:ab:44:44:4d:71:
27:1f:e1:72:f8:15:ae:00:39:c7:23:5c:ff:bb:05:
88:f6:f6:eb:22:8c:aa:5e:b3:da:61:b0:b0:c9:68:
ac:cd:e9:3d:e9:55:dc:0b:18:8c:7a:b7:92:11:b2:
4e:42:bb:bf:79:be:d9:13:52:9a:23:8b:50:c9:40:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:45:E6:45:5A:3A:AF:96:F9:EF:44:75:59:36:2B:84:16:28:3D
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/UXNF5kVaOq-W-e9EdVk2K4QWKD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.72.0/24
186.247.185.0/24
187.13.19.0/24
187.13.210.0/24
187.13.215.0-187.13.216.255
187.14.116.0/23
187.15.100.0/24
187.15.102.0/24
187.15.117.0/24
187.15.119.0/24
187.15.134.0-187.15.136.255
187.15.162.0/24
187.40.17.0-187.40.18.255
187.40.226.0/24
IPv6:
2a13:240:300::/40
2a13:240:500::/40
2a13:240:700::/40
2a13:240:900::/40
2a13:240:b00::/40
2a13:240:2800::/40
2a13:240:2e00::/40
2a13:240:3200::/40
Signature Algorithm: sha256WithRSAEncryption
dc:f4:78:0f:72:9d:80:c1:0a:c5:9c:3f:af:0a:7d:70:b7:56:
99:b3:c4:b4:a8:b7:e9:3c:fe:d6:31:37:bb:86:2f:2f:55:bf:
60:c5:68:57:ba:11:e9:5b:3f:b5:11:c6:ec:b8:0d:16:9d:d3:
ce:0e:88:85:c5:2c:78:7c:f1:2f:5b:8a:07:04:d0:60:f8:02:
6e:04:e8:5d:92:be:d4:2a:bb:2e:b9:63:b9:e8:b3:b7:00:f5:
3e:1a:a9:d9:fb:41:4f:73:53:87:ac:cd:bb:13:aa:4a:d3:55:
95:c3:f4:81:67:be:6d:38:ce:70:8b:cc:a2:8c:11:da:c5:9f:
62:10:68:9a:25:1c:82:33:ce:b2:5d:77:5c:51:b9:bd:6b:c7:
6e:9f:8f:98:6b:78:19:7b:b9:29:1a:0f:08:03:dc:37:94:92:
28:46:12:a6:d6:2a:f4:10:e6:b0:c3:39:e7:fd:7f:80:ac:b1:
ca:fb:2c:cf:50:18:5f:f9:28:b5:27:fd:a0:17:7b:74:a8:6f:
a2:99:13:99:4d:c6:f9:c9:1c:d4:fd:35:3c:b2:d4:41:f6:b0:
fe:e8:c6:00:25:97:0d:e4:5f:44:c6:86:4b:45:ae:40:ef:a5:
e4:1c:5b:9d:08:c3:21:bb:f6:09:2d:6c:5f:39:ee:ad:5e:7d:
d3:47:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:17:20 2026 by rpki-client