Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/UVz7Jz-vRbmjv60CUdJRwlL5d9k.roa
File: UVz7Jz-vRbmjv60CUdJRwlL5d9k.roa (raw, json)
Hash identifier: 2loeiAsnCgkFA+e/zul6V4oJZslxwq6RTKrln0d3znk=
Subject key identifier: 51:5C:FB:27:3F:AF:45:B9:A3:BF:AD:02:51:D2:51:C2:52:F9:77:D9
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A013CB06E7BDDEE67CC1A9DE0D8B3CDC9B
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/UVz7Jz-vRbmjv60CUdJRwlL5d9k.roa
Signing time: Tue 18 Aug 2026 07:34:27 +0000
ROA not before: Tue 18 Aug 2026 07:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 2.59.219.0/24 maxlen: 24
45.93.8.0/24 maxlen: 24
45.93.9.0/24 maxlen: 24
45.148.244.0/24 maxlen: 24
46.16.34.0/24 maxlen: 24
93.185.167.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
94.231.223.0/24 maxlen: 24
171.22.181.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
176.125.242.0/23 maxlen: 24
176.125.242.0/24 maxlen: 24
176.125.243.0/24 maxlen: 24
185.103.164.0/24 maxlen: 24
185.103.167.0/24 maxlen: 24
185.139.214.0/24 maxlen: 24
185.139.215.0/24 maxlen: 24
185.212.117.0/24 maxlen: 24
185.234.9.0/24 maxlen: 24
193.27.90.0/24 maxlen: 24
213.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:cb:06:e7:bd:de:e6:7c:c1:a9:de:0d:8b:3c:dc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Aug 18 07:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=515cfb273faf45b9a3bfad0251d251c252f977d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:19:b2:4b:13:44:b7:29:53:8e:95:75:eb:
d8:e2:ae:3e:42:2c:f3:08:e9:58:65:44:b5:28:f3:
71:80:d2:61:49:6d:83:37:1c:09:10:ed:66:31:31:
ba:ef:a3:b1:aa:50:33:84:85:a1:7b:72:33:2d:f8:
4d:3b:40:26:12:67:5e:5c:d9:6d:4e:d1:75:37:f1:
d7:66:e0:ae:14:68:31:5c:2b:83:2f:d5:e2:4e:e7:
d7:a3:d1:5a:3e:32:2b:ef:d9:bb:4d:8a:af:c1:10:
46:83:d1:f7:64:ba:e6:1b:ba:97:34:2f:bf:83:32:
fc:a6:d4:a8:49:21:3e:a7:07:a6:bc:5f:d6:4c:ed:
49:04:83:7c:a8:a8:e1:cb:97:93:cc:6b:ef:98:83:
83:b6:94:1f:22:da:10:a4:f7:fa:5f:7c:1b:d6:9b:
7a:60:e5:85:eb:39:e2:9f:ec:84:c6:37:bb:cc:b1:
4f:19:a6:7c:bd:25:8d:eb:60:92:85:e0:ad:f3:7d:
67:ce:43:41:f3:2f:70:6c:28:24:eb:ca:ac:0b:9e:
05:33:7a:3b:dc:de:cb:a1:14:9d:91:2d:b7:b3:90:
35:00:ef:73:c1:ae:3f:e4:2d:a5:3f:5d:9f:9a:df:
74:19:43:c3:10:48:c3:3f:09:13:58:07:31:74:9c:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5C:FB:27:3F:AF:45:B9:A3:BF:AD:02:51:D2:51:C2:52:F9:77:D9
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/UVz7Jz-vRbmjv60CUdJRwlL5d9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.219.0/24
45.93.8.0/23
45.148.244.0/24
46.16.34.0/24
93.185.167.0/24
94.103.188.0/24
94.231.223.0/24
171.22.181.0/24
176.116.0.0/24
176.125.242.0/23
185.103.164.0/24
185.103.167.0/24
185.139.214.0/23
185.212.117.0/24
185.234.9.0/24
193.27.90.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:20:ef:84:2d:4b:e4:13:a7:f8:9a:f7:4e:25:2c:0a:8f:32:
b2:d5:b6:12:11:f7:ee:b2:db:e1:ce:b6:12:d5:4b:f1:8c:70:
f5:64:44:45:27:89:75:13:5f:ab:0a:3b:9a:77:a3:40:d2:2b:
80:0f:d9:32:52:cc:98:22:8e:1c:22:8a:19:e7:81:81:11:86:
8a:40:d6:e0:00:56:37:5c:c1:f1:fc:dd:5f:3c:50:bb:c6:ac:
32:29:5d:e5:5a:67:86:0e:f7:a5:17:d7:85:7d:27:d0:1a:8b:
5b:22:5b:a7:9b:f5:f6:9e:4e:78:84:65:1a:e8:06:29:21:b3:
32:c0:ee:dc:78:72:cb:32:81:96:8a:e6:b2:de:1e:24:38:f8:
61:10:44:45:10:54:df:2e:06:16:f8:60:8c:db:c5:cb:04:69:
0d:a6:a4:7f:a0:a6:d4:5b:3e:c6:02:b0:61:e7:d5:52:e6:53:
c0:4c:0d:99:0b:d7:7b:26:89:3a:4f:a2:76:92:c6:eb:85:11:
97:4c:d2:f6:0a:ee:ec:3d:0c:6e:1c:26:d2:fe:04:5a:3c:00:
24:85:1d:1a:2c:0a:0e:72:7c:4d:ef:1d:bc:af:99:42:1b:52:
08:35:e2:b2:93:4e:83:7c:8c:67:a2:70:38:e2:5b:2d:0e:ae:
74:ea:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:07 2026 by rpki-client