Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ulLaang29v_ytVkTgNgYQY7qzZY.roa
File: ulLaang29v_ytVkTgNgYQY7qzZY.roa (raw, json)
Hash identifier: O09t9jxR9CNlw1/AHGdmN+AqglIdH/4hEe7pRBUTsQs=
Subject key identifier: BA:52:DA:6A:78:36:F6:FF:F2:B5:59:13:80:D8:18:41:8E:EA:CD:96
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECE83FC8B26FCB7525FBC3CB6D7B13C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ulLaang29v_ytVkTgNgYQY7qzZY.roa
Signing time: Mon 14 Sep 2026 07:25:29 +0000
ROA not before: Mon 14 Sep 2026 07:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
45.136.137.0/24 maxlen: 24
45.136.139.0/24 maxlen: 24
185.102.84.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ce:83:fc:8b:26:fc:b7:52:5f:bc:3c:b6:d7:b1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba52da6a7836f6fff2b5591380d818418eeacd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:c0:d7:78:42:60:6c:18:de:d7:20:e4:1d:
fc:3f:bd:1b:45:10:9a:8a:07:8c:74:08:86:91:6c:
31:7c:d1:06:68:fa:ab:cc:35:ff:f3:ba:0d:c5:75:
36:c5:ad:6e:d9:d7:78:b7:39:e2:b1:7b:9a:f4:a1:
37:2b:59:9c:26:5a:05:41:8b:da:6f:1b:5b:38:e4:
17:42:8a:f6:41:b4:a7:fe:f7:5f:ae:32:ce:84:b9:
17:44:3b:49:b3:c5:86:3f:00:71:1c:62:b5:e4:13:
41:a8:44:e4:6a:73:f6:67:54:4f:f1:be:05:e4:34:
62:21:20:8a:95:ca:90:57:a5:d0:e2:c1:94:df:01:
45:2a:8e:3e:64:d8:68:5e:66:f5:d9:e3:64:88:73:
ec:28:7c:73:c5:bd:85:bf:16:66:1e:6e:7e:90:8f:
f0:0b:66:1c:d5:c3:7b:83:68:15:ad:f3:49:73:03:
a2:c7:84:e4:15:fa:3a:85:ad:fa:95:14:5a:8f:4f:
f1:e1:e2:97:7f:cd:2a:0a:b8:e3:cc:0b:33:09:4b:
2c:60:38:a5:f9:95:a7:ae:f1:4c:91:53:54:84:2a:
c2:7e:bb:0b:08:8e:43:98:18:cf:93:da:ad:27:75:
62:42:e7:cd:39:7d:c2:fc:4e:6d:3d:ae:1a:b1:d7:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:52:DA:6A:78:36:F6:FF:F2:B5:59:13:80:D8:18:41:8E:EA:CD:96
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ulLaang29v_ytVkTgNgYQY7qzZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.136.0/22
185.102.84.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1165::/48
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
Signature Algorithm: sha256WithRSAEncryption
79:8e:1b:2b:c9:11:2b:63:f0:32:74:ad:86:f5:a0:f6:f9:48:
ed:50:b3:b0:d3:b2:bc:79:30:28:1b:67:bc:6c:47:b8:3a:66:
1c:70:64:68:e1:9d:a4:aa:d2:8c:6e:2c:c0:b2:ff:8e:06:84:
1f:42:77:d1:9d:fd:e1:1d:f2:24:ca:43:8a:c8:2d:f5:c2:15:
60:f9:6d:86:ab:af:7b:31:0c:60:00:af:3e:98:76:d8:54:fc:
31:d4:18:6b:ae:fb:99:60:d7:21:b4:e3:93:ff:41:6e:ec:6f:
2f:c1:74:1d:ea:c0:f5:61:fd:15:47:9d:fb:13:d0:7b:35:7c:
ea:b7:38:ef:f3:fe:4e:4b:a3:a8:e3:ad:f4:4c:e3:fb:3e:a5:
d0:5f:87:ea:b1:8f:9e:86:f9:46:c9:cb:cf:0b:de:1f:15:36:
22:bd:5d:a0:1a:e9:9b:f9:9c:2e:d7:df:73:86:94:45:20:d7:
53:e7:ee:64:f7:ff:24:63:1e:dd:c8:9b:f1:62:68:57:b0:08:
69:ca:ab:3c:23:90:75:fc:ed:41:67:de:59:9c:be:66:fa:ea:
a1:7c:a4:09:a9:38:cd:4c:e8:fa:0b:2d:b0:2e:dc:24:d4:bc:
a6:8f:19:e6:fb:73:5a:07:37:96:f5:3d:44:ad:cd:c8:51:69:
61:38:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:27 2026 by rpki-client