Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/uiJFdaJRW_IvGZlH4S2t7KeWTGE.roa
File: uiJFdaJRW_IvGZlH4S2t7KeWTGE.roa (raw, json)
Hash identifier: 6SMIjJZcRRN9XbseNElKZerubHd6RO+4/fe+SB9ZZb4=
Subject key identifier: BA:22:45:75:A2:51:5B:F2:2F:19:99:47:E1:2D:AD:EC:A7:96:4C:61
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019FDCB34D5D6DA942E82CB2EDB7278D0761
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/uiJFdaJRW_IvGZlH4S2t7KeWTGE.roa
Signing time: Fri 07 Aug 2026 14:49:25 +0000
ROA not before: Fri 07 Aug 2026 14:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207728
IP address blocks: 31.10.5.0/24 maxlen: 24
31.210.170.0/23 maxlen: 24
31.210.172.0/24 maxlen: 24
31.210.173.0/24 maxlen: 24
46.28.234.0/24 maxlen: 24
62.171.228.0/22 maxlen: 22
62.171.228.0/24 maxlen: 24
62.171.229.0/24 maxlen: 24
62.171.230.0/24 maxlen: 24
62.171.231.0/24 maxlen: 24
62.204.42.0/24 maxlen: 24
85.136.112.0/24 maxlen: 24
85.136.113.0/24 maxlen: 24
85.136.114.0/24 maxlen: 24
85.136.115.0/24 maxlen: 24
85.136.180.0/24 maxlen: 24
85.136.181.0/24 maxlen: 24
85.136.182.0/24 maxlen: 24
85.136.183.0/24 maxlen: 24
87.236.177.0/24 maxlen: 24
93.88.74.0/24 maxlen: 24
93.88.75.0/24 maxlen: 24
103.65.231.0/24 maxlen: 24
104.192.42.0/24 maxlen: 24
138.226.220.0/24 maxlen: 24
138.226.222.0/24 maxlen: 24
138.226.223.0/24 maxlen: 24
148.227.170.0/24 maxlen: 24
185.162.8.0/24 maxlen: 24
185.162.9.0/24 maxlen: 24
185.162.11.0/24 maxlen: 24
185.204.52.0/24 maxlen: 24
185.204.55.0/24 maxlen: 24
194.146.127.0/24 maxlen: 24
2a12:9cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:b3:4d:5d:6d:a9:42:e8:2c:b2:ed:b7:27:8d:07:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Aug 7 14:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba224575a2515bf22f199947e12dadeca7964c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:7e:ec:1e:6f:f7:87:ce:fd:40:c5:aa:5c:
7b:95:2e:b3:30:a2:50:00:a9:e6:59:67:26:53:4f:
de:40:7e:fe:c9:70:f3:ed:55:6a:05:cf:4a:68:25:
09:e0:43:6e:a2:e8:88:e2:16:79:b5:09:14:84:54:
ab:d6:47:e5:75:2e:25:74:63:0c:af:2f:27:4e:20:
ec:57:c5:13:e0:d7:66:2b:86:f5:e4:aa:75:90:5c:
6d:ed:fa:da:70:48:40:36:91:cd:2f:74:00:0b:5f:
65:12:94:8c:c1:aa:46:f7:50:76:2b:39:0a:2b:28:
df:8d:89:5f:66:53:02:f9:ff:3a:79:60:f7:94:47:
28:45:1e:89:23:33:fa:98:f1:db:ba:c3:92:bd:83:
11:d2:cb:dc:db:80:38:05:03:27:b5:aa:de:54:f0:
99:74:c8:7f:9c:e2:c3:ce:20:02:ed:4f:79:63:d5:
79:15:80:fe:27:bd:98:0b:b3:60:bf:65:e8:d0:51:
81:c3:7d:5a:ea:c9:0e:20:87:4c:5a:9a:07:53:86:
44:c0:b0:bf:76:7a:50:8b:0c:33:c4:40:2b:6d:49:
c0:22:cf:a4:6c:22:20:6e:d9:05:c6:dd:d4:9f:36:
35:3d:a9:27:ac:6d:34:18:a9:9c:b3:60:60:ee:9f:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:45:75:A2:51:5B:F2:2F:19:99:47:E1:2D:AD:EC:A7:96:4C:61
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/uiJFdaJRW_IvGZlH4S2t7KeWTGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.5.0/24
31.210.170.0-31.210.173.255
46.28.234.0/24
62.171.228.0/22
62.204.42.0/24
85.136.112.0/22
85.136.180.0/22
87.236.177.0/24
93.88.74.0/23
103.65.231.0/24
104.192.42.0/24
138.226.220.0/24
138.226.222.0/23
148.227.170.0/24
185.162.8.0/23
185.162.11.0/24
185.204.52.0/24
185.204.55.0/24
194.146.127.0/24
IPv6:
2a12:9cc0::/48
Signature Algorithm: sha256WithRSAEncryption
da:e8:e7:c3:98:9e:da:00:0d:0e:76:bd:3b:fd:ee:5b:fe:33:
50:2f:7d:5d:f5:b7:b7:d1:86:d0:9f:73:ff:a8:19:94:b3:d7:
b5:df:f2:b4:5f:83:2a:5e:da:6b:83:a9:0f:68:44:a7:7b:6f:
96:d7:23:23:11:64:bc:e3:9f:05:4e:a6:71:be:0f:40:3c:f2:
0d:88:a0:ff:7e:c2:3f:8f:2a:fb:de:60:5a:a5:3a:ea:17:7a:
d9:5e:be:89:67:7b:37:0e:d2:33:66:50:db:6c:03:2a:79:d0:
8d:45:fe:55:95:5b:59:f9:1b:25:ff:e4:9f:01:8f:28:6f:db:
6f:39:f0:ff:fc:05:4e:ec:f8:f3:b5:21:76:85:a2:33:d9:77:
0c:2d:96:fa:ca:da:79:73:67:f5:8b:00:17:74:3f:a3:d4:38:
06:55:e6:e8:3b:b0:45:4d:36:6c:71:e0:99:74:3a:95:3f:53:
04:36:f2:ce:7c:a1:87:9b:49:ed:82:7c:8c:d2:15:ee:3d:f3:
5a:02:ad:da:2a:d1:c8:56:99:07:44:d3:fe:9f:66:ab:84:b6:
c4:15:6e:5e:53:87:e0:67:e6:27:ec:1b:fa:2e:1b:9e:d7:5a:
f7:6c:cf:64:a8:78:be:a5:71:ac:74:d3:f4:bc:31:7b:f9:4d:
7e:ef:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:54 2026 by rpki-client