Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/UbbfXlDt5ItqVkt47qCE7Q-cWa4.roa
File: UbbfXlDt5ItqVkt47qCE7Q-cWa4.roa (raw, json)
Hash identifier: 2N6GN/Syp2xg8awpUyCZ72kT72P3AjcfpXuKHfUafHk=
Subject key identifier: 51:B6:DF:5E:50:ED:E4:8B:6A:56:4B:78:EE:A0:84:ED:0F:9C:59:AE
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23687A9A3040785CBDADD224FFD5E0F1
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/UbbfXlDt5ItqVkt47qCE7Q-cWa4.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1273
IP address blocks: 46.108.0.0/16 maxlen: 24
46.190.128.0/17 maxlen: 24
46.190.137.0/24 maxlen: 24
46.190.254.0/24 maxlen: 24
47.73.0.0/16 maxlen: 24
47.73.182.0/24 maxlen: 24
47.73.183.0/24 maxlen: 24
47.73.184.0/24 maxlen: 24
47.73.239.0/24 maxlen: 24
47.73.240.0/22 maxlen: 22
62.213.128.0/23 maxlen: 24
62.213.156.0/22 maxlen: 24
85.205.0.0/16 maxlen: 24
108.179.64.0/18 maxlen: 24
139.47.192.0/18 maxlen: 24
195.233.0.0/16 maxlen: 24
2a01:818:1a00::/40 maxlen: 44
2a01:818:1b00::/40 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7a:9a:30:40:78:5c:bd:ad:d2:24:ff:d5:e0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51b6df5e50ede48b6a564b78eea084ed0f9c59ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:e7:e4:c2:c3:3d:5e:95:48:00:6d:a0:ee:
7c:4c:08:23:37:06:e8:c6:b3:c9:ac:01:c5:04:6d:
3d:d1:c6:06:87:e3:db:e8:40:cb:82:48:ee:7d:11:
7a:58:12:c0:6a:8a:b5:03:b8:b9:3a:b3:20:ac:4c:
37:75:8e:67:e2:7f:dc:59:ca:97:e5:86:57:f6:80:
7d:56:8a:35:e2:51:13:29:10:35:9f:c2:02:df:96:
40:38:81:c1:21:27:23:65:bc:39:af:4d:1d:83:8b:
ae:58:51:81:fa:81:65:59:81:62:4a:32:79:1a:6e:
49:a0:5e:b0:15:4d:96:05:8c:49:8d:40:53:b6:9e:
aa:97:57:85:d0:d0:41:7d:4e:dd:41:d2:e6:e4:76:
16:d5:78:35:9d:d0:7a:96:48:0f:0f:40:5a:98:86:
24:12:ac:8f:7c:3f:20:fc:fc:ed:f2:82:55:7d:1f:
29:48:3d:05:7c:bc:78:6e:f7:e0:aa:10:5c:9e:3b:
bd:9f:81:e4:4f:b9:3c:16:ea:f9:a3:c8:5c:07:df:
6e:dc:4a:e7:34:3f:52:a0:93:7a:fe:5b:d1:03:22:
85:b9:1b:37:a4:24:bf:e7:03:75:6a:1e:c5:e1:10:
53:7f:c1:a1:77:74:29:9c:61:eb:bc:78:b9:b2:71:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B6:DF:5E:50:ED:E4:8B:6A:56:4B:78:EE:A0:84:ED:0F:9C:59:AE
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/UbbfXlDt5ItqVkt47qCE7Q-cWa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.108.0.0/16
46.190.128.0/17
47.73.0.0/16
62.213.128.0/23
62.213.156.0/22
85.205.0.0/16
108.179.64.0/18
139.47.192.0/18
195.233.0.0/16
IPv6:
2a01:818:1a00::/39
Signature Algorithm: sha256WithRSAEncryption
7a:6f:c2:f7:df:c5:b0:39:08:ac:90:3f:64:58:c3:ac:71:29:
0d:1b:9c:4e:70:fa:d1:41:a1:e2:26:aa:0b:25:96:0a:b4:86:
bd:b4:13:1e:1b:56:6b:ce:22:0c:00:42:3a:ce:42:71:c5:0f:
e1:2d:59:d4:0f:e3:d5:4b:78:72:69:a0:e2:d1:de:33:d6:8e:
bb:a9:25:8c:16:da:66:6d:cd:08:a9:74:03:f1:e7:61:b4:6e:
02:1f:ae:a5:34:71:1b:6b:84:da:c0:ce:6c:f2:78:9c:60:9f:
f4:bc:84:a0:29:91:af:32:f4:1d:61:5a:47:84:f2:cf:20:1e:
df:f6:08:ab:aa:56:d9:07:db:d9:14:22:30:07:10:8b:2a:dc:
02:6a:01:84:a9:e9:aa:ce:f8:4e:ad:2e:94:f5:d9:58:3a:2e:
c5:3d:a1:90:98:f1:21:80:94:fd:e6:71:46:df:07:fd:0e:6e:
d6:ce:0d:f2:82:42:02:74:48:69:29:c2:19:df:54:b1:80:98:
e6:59:98:f8:b6:62:ad:e2:f9:3d:b9:8f:61:03:a1:1e:8b:0f:
c4:63:31:90:cd:31:30:f0:de:9b:79:df:71:e5:30:5a:17:ff:
5a:cb:56:c8:42:79:fc:85:64:78:3f:02:b7:b3:f7:49:4a:06:
41:d5:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:18 2026 by rpki-client