Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/UssRL_azfcBW0-ZAXO28l_WRTQ8.roa
File: UssRL_azfcBW0-ZAXO28l_WRTQ8.roa (raw, json)
Hash identifier: Q1CPH56Bt7FCDBhQza5YAQW6lKSo+XxyyUkTKJFqTBQ=
Subject key identifier: 52:CB:11:2F:F6:B3:7D:C0:56:D3:E6:40:5C:ED:BC:97:F5:91:4D:0F
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01A10C59D592AA42E513938EFBA2C6699B13
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/UssRL_azfcBW0-ZAXO28l_WRTQ8.roa
Signing time: Mon 05 Oct 2026 13:56:16 +0000
ROA not before: Mon 05 Oct 2026 13:56:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197033
IP address blocks: 46.18.224.0/21 maxlen: 21
91.216.43.0/24 maxlen: 24
91.224.230.0/23 maxlen: 23
93.177.81.0/24 maxlen: 24
185.24.152.0/22 maxlen: 22
185.33.88.0/22 maxlen: 22
185.97.204.0/22 maxlen: 22
185.147.65.0/24 maxlen: 24
185.147.67.0/24 maxlen: 24
185.149.216.0/22 maxlen: 22
185.155.173.0/24 maxlen: 24
185.195.248.0/24 maxlen: 24
185.195.249.0/24 maxlen: 24
185.195.250.0/24 maxlen: 24
185.195.251.0/24 maxlen: 24
185.232.24.0/22 maxlen: 22
193.34.32.0/22 maxlen: 22
193.34.35.0/24 maxlen: 24
194.147.172.0/24 maxlen: 24
194.147.227.0/24 maxlen: 24
194.147.228.0/24 maxlen: 24
217.18.86.0/24 maxlen: 24
2a00:aa60::/32 maxlen: 32
2a07:6ac0::/29 maxlen: 29
2a0d:7e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:59:d5:92:aa:42:e5:13:93:8e:fb:a2:c6:69:9b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Oct 5 13:56:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52cb112ff6b37dc056d3e6405cedbc97f5914d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:fe:92:be:55:39:75:00:e1:5f:fb:69:0f:
80:e2:cc:75:4d:2b:c5:d9:87:42:79:71:5e:1d:49:
1e:67:97:02:68:ac:36:33:a1:b8:ae:30:06:66:33:
ff:e7:39:e2:9b:2e:3b:76:fb:f8:ef:0a:d9:0b:ca:
cf:5e:75:6b:bf:73:80:d3:9b:a7:a2:5d:24:41:ad:
54:8a:27:b1:31:9b:31:d6:60:86:c3:86:3e:6a:bd:
4a:4f:70:00:29:70:66:e4:cb:9a:20:5e:f5:3c:c4:
ac:c5:a7:f0:ad:5a:55:13:c4:4d:bc:6a:69:d2:df:
2d:d1:5e:8d:b7:13:d1:39:69:7b:5b:cc:34:10:60:
a1:66:df:5f:b7:e3:14:e5:e5:ad:18:8e:99:28:21:
25:af:03:4f:ae:b6:a6:d4:4f:e5:c6:22:99:f8:a5:
9f:d5:5f:42:f1:6f:08:b9:b9:18:e0:8a:51:4b:f6:
f6:d1:79:8c:32:e5:a2:23:a0:0e:fe:26:73:fe:e4:
cb:cd:30:bf:e1:ae:74:82:b3:5a:58:9b:90:bb:ab:
ce:be:6b:3c:5f:fd:f0:c8:ae:b0:51:aa:96:a1:f0:
96:33:51:46:52:7d:1c:ac:51:21:c5:81:10:26:c1:
3f:21:fe:7b:9b:95:8c:ad:31:cf:19:42:51:fe:89:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CB:11:2F:F6:B3:7D:C0:56:D3:E6:40:5C:ED:BC:97:F5:91:4D:0F
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/UssRL_azfcBW0-ZAXO28l_WRTQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.224.0/21
91.216.43.0/24
91.224.230.0/23
93.177.81.0/24
185.24.152.0/22
185.33.88.0/22
185.97.204.0/22
185.147.65.0/24
185.147.67.0/24
185.149.216.0/22
185.155.173.0/24
185.195.248.0/22
185.232.24.0/22
193.34.32.0/22
194.147.172.0/24
194.147.227.0-194.147.228.255
217.18.86.0/24
IPv6:
2a00:aa60::/32
2a07:6ac0::/29
2a0d:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
31:2f:d0:73:b6:a8:aa:36:ce:cc:8d:47:41:bf:48:ac:c0:c0:
8a:e4:9a:0b:b3:85:a7:76:1d:63:a3:02:b6:62:92:9a:d5:94:
21:e0:2a:9d:33:ca:a6:9f:35:94:11:bc:b3:f3:33:8e:85:7a:
24:c6:c9:65:e9:b7:3a:37:db:df:a9:c9:83:76:ac:25:31:a1:
d3:3c:59:25:cd:24:18:98:aa:e9:bc:92:4c:82:13:73:3e:f0:
85:47:51:00:d8:70:e8:9b:87:f8:3f:66:f4:f2:b1:f2:d5:80:
c8:2e:bf:9c:d0:4e:59:5e:f9:07:10:f6:51:21:19:26:7e:32:
e6:e0:5b:7a:8b:6e:98:87:eb:b3:8e:bf:60:f7:be:54:6c:32:
dc:f2:c6:31:35:b2:c7:cd:35:93:a0:3d:48:1e:fa:c7:0b:75:
f7:20:fc:86:d5:88:a5:77:d0:04:07:1d:e2:c2:2c:82:fc:32:
14:d3:19:ac:97:13:6a:0d:e1:2f:15:b3:1f:31:6c:c9:b9:f8:
5d:3b:a6:49:b3:0d:37:32:14:00:7e:c5:df:55:4e:f0:c2:06:
f4:cd:24:74:39:78:51:19:1c:c8:32:ca:9b:df:e2:f4:d9:2a:
81:b1:03:8e:79:d2:11:04:20:d9:6d:e6:b5:ab:b3:8e:db:de:
65:2c:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:43 2026 by rpki-client