Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uikt1pQNNOBLKatJ5DC4XO5hfQI.roa
File: uikt1pQNNOBLKatJ5DC4XO5hfQI.roa (raw, json)
Hash identifier: gXD+nU3/Je9p6NdOjOPqmSxgSIxhJbT8U5CxmklZVxY=
Subject key identifier: BA:29:2D:D6:94:0D:34:E0:4B:29:AB:49:E4:30:B8:5C:EE:61:7D:02
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A0F8BCD37D76D11C2BF9F41BDA88E02EF3
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uikt1pQNNOBLKatJ5DC4XO5hfQI.roa
Signing time: Thu 01 Oct 2026 18:31:59 +0000
ROA not before: Thu 01 Oct 2026 18:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.86.16.0/22 maxlen: 22
89.39.242.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/23 maxlen: 23
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
146.19.50.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.180.145.0/24 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 22
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
213.134.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:bc:d3:7d:76:d1:1c:2b:f9:f4:1b:da:88:e0:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 1 18:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba292dd6940d34e04b29ab49e430b85cee617d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:23:93:2e:67:60:89:15:0e:f7:13:3a:d3:
e9:9a:9f:7d:91:0d:cc:53:7e:d9:ab:6c:58:a6:54:
60:ad:b4:c8:a7:8f:5c:16:42:e6:0a:a2:ee:d0:65:
e2:12:90:7c:48:9f:0a:02:2c:ee:78:b9:32:7a:35:
97:7e:55:fc:4d:c5:d7:f0:02:ae:66:80:9d:88:c9:
03:c4:8a:69:2d:49:e0:93:71:78:eb:b6:5b:40:0c:
a7:4f:a1:ce:64:b2:bc:87:af:2b:58:e4:14:9d:27:
ef:35:45:b0:34:4c:4f:67:af:ba:6d:44:44:f1:67:
11:78:6b:03:56:ea:41:24:79:6e:dd:ec:71:dd:a5:
d8:d5:9c:d7:d4:fb:fa:d0:6f:34:d7:2f:8f:b0:d6:
f3:17:0b:f0:84:42:e2:e2:bc:f6:76:32:86:98:e6:
34:1c:22:d6:a8:6a:d8:0d:a7:37:52:86:97:b5:bd:
cb:04:ea:e9:b8:55:00:5d:56:f7:8b:f5:78:4c:37:
57:7c:26:98:77:f6:a1:f2:a7:d7:4e:97:77:21:e8:
58:4a:41:c2:1f:cd:81:91:41:cb:c0:f0:89:9b:4e:
00:fa:8a:57:78:d1:7d:be:81:08:39:4e:3f:b7:b3:
36:09:c2:b8:68:11:93:e5:55:ed:d8:ff:41:a1:1d:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:2D:D6:94:0D:34:E0:4B:29:AB:49:E4:30:B8:5C:EE:61:7D:02
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/uikt1pQNNOBLKatJ5DC4XO5hfQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
5.182.28.0/22
45.86.16.0/22
89.39.242.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
94.231.198.0/24
146.19.50.0/24
178.175.176.0/22
185.180.145.0/24
195.138.103.0-195.138.107.255
195.138.112.0/24
195.138.120.0/24
195.138.122.0/23
213.134.25.0/24
Signature Algorithm: sha256WithRSAEncryption
61:be:49:9c:b8:67:42:46:f7:9e:dd:14:4b:69:10:1e:9d:bc:
04:5a:af:99:f9:bf:b4:1f:31:e6:a6:74:87:5b:80:37:49:f9:
1b:af:a6:c3:63:79:17:bc:cc:a0:e0:59:cc:cd:27:04:92:ea:
aa:85:b3:06:c1:f7:32:7b:29:9e:53:8e:bc:9c:25:04:0d:83:
42:44:75:40:41:8e:cd:58:0c:ac:35:2b:6d:45:16:0c:f6:fe:
18:91:c1:e2:31:e8:d9:53:fe:ff:c3:62:fd:83:cb:19:5d:49:
9e:ff:43:67:e4:42:58:e1:6a:19:35:2f:f9:31:3e:d9:f1:d6:
2f:3c:1d:d5:a3:da:da:7c:ca:5d:26:13:c8:6a:bc:38:5b:87:
39:29:d2:eb:37:95:49:11:ac:48:f1:1e:eb:b3:5d:ed:99:ff:
c9:1d:f4:ec:12:87:1e:c9:d6:b3:be:4c:4c:c2:bf:03:f8:21:
33:fd:c8:26:5e:f7:31:bc:77:e7:85:64:ec:68:a4:df:0c:6a:
05:3c:52:c9:7e:83:bc:d6:70:cc:a9:c4:8b:2c:19:aa:e3:e3:
f0:06:35:a5:b8:e3:21:43:7f:f0:d1:63:2c:e8:c6:07:e2:0f:
3c:1a:2c:2d:24:fe:6a:03:5d:57:d1:96:b5:da:7e:1c:0e:12:
44:9e:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:25:22 2026 by rpki-client