Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/uxhT_9GpVyKzcM31mqhkX8X0o3c.roa
File: uxhT_9GpVyKzcM31mqhkX8X0o3c.roa (raw, json)
Hash identifier: B5T22Nmp0cpzAUumBR5CV4XqeuskYmmn5flUFliVMWM=
Subject key identifier: BB:18:53:FF:D1:A9:57:22:B3:70:CD:F5:9A:A8:64:5F:C5:F4:A3:77
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A12B278F44F6D3078E2CED58F91567B519
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/uxhT_9GpVyKzcM31mqhkX8X0o3c.roa
Signing time: Sun 11 Oct 2026 13:29:35 +0000
ROA not before: Sun 11 Oct 2026 13:29:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48309
IP address blocks: 37.191.92.0/22 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.140.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.144.0/24 maxlen: 24
188.136.149.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.161.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:27:8f:44:f6:d3:07:8e:2c:ed:58:f9:15:67:b5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Oct 11 13:29:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb1853ffd1a95722b370cdf59aa8645fc5f4a377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:e3:be:ce:db:89:35:65:b8:cc:b9:20:e6:
93:be:76:55:dc:f5:fa:a0:51:45:29:34:6f:58:2c:
94:9a:f8:31:cb:cd:d2:cb:cd:2b:50:08:5c:60:11:
31:aa:02:1f:6e:45:73:80:d3:32:1f:dd:63:d1:c6:
7a:a5:99:e1:cb:df:a8:90:09:86:0a:b1:be:9d:94:
62:15:d2:b2:88:30:17:fe:bb:2f:cd:57:06:12:00:
ea:65:af:98:df:ea:ce:47:75:38:5c:ac:31:0c:12:
de:e1:cd:9e:d8:8a:63:2f:86:e9:87:e8:85:34:2c:
b5:58:21:34:43:b1:a1:6a:b3:ae:53:fb:d2:1b:2e:
d0:b7:d9:77:6a:7a:07:9a:86:48:19:ea:68:fb:e4:
28:a2:b0:a3:02:1a:73:77:df:10:74:cd:53:2d:db:
11:4f:74:92:78:99:4e:56:eb:ae:e3:45:11:a6:c6:
82:ae:a3:b8:53:1c:39:f8:22:54:74:97:72:ca:56:
f5:f2:e5:59:91:f6:f8:28:2a:f9:64:21:e7:5b:3d:
cc:d7:8a:2b:81:4d:06:59:3f:4b:c5:74:81:eb:e0:
0b:26:43:3b:c0:49:04:27:a6:ea:9b:82:ce:6e:4f:
b1:b2:be:5c:1a:b1:08:18:b3:20:71:47:0f:10:1e:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:18:53:FF:D1:A9:57:22:B3:70:CD:F5:9A:A8:64:5F:C5:F4:A3:77
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/uxhT_9GpVyKzcM31mqhkX8X0o3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.191.92.0/22
188.136.128.0-188.136.133.255
188.136.135.0/24
188.136.140.0/24
188.136.142.0-188.136.144.255
188.136.149.0-188.136.150.255
188.136.152.0-188.136.156.255
188.136.160.0/23
188.136.163.0-188.136.164.255
188.136.166.0/23
188.136.170.0/24
188.136.172.0/23
188.136.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a2:14:b0:2b:9f:08:6c:c9:d5:42:3f:0b:59:39:9a:67:ed:
e8:71:d8:e4:e1:ad:41:b6:25:eb:c7:25:56:7c:eb:a1:08:f1:
47:77:22:53:69:42:29:b0:fc:ae:2f:d4:6f:28:6b:e7:93:c8:
45:d1:80:f0:ae:c1:aa:36:95:0e:98:df:c3:68:68:81:a7:9e:
51:42:6c:80:52:b3:a0:17:20:1a:04:43:b6:fa:d0:10:1c:61:
24:b5:0d:98:eb:ec:f7:22:58:bd:d2:25:07:93:bd:c7:06:0f:
a6:bd:01:2c:68:65:9d:57:f2:a0:e2:60:51:0c:80:9f:b6:f1:
39:ba:21:95:19:9e:db:9b:23:67:25:3a:a8:d5:d3:1c:cc:21:
25:91:73:8f:14:f7:af:50:62:ec:5b:b1:35:6e:60:c8:e9:0c:
33:ee:9d:5c:23:da:98:60:62:0e:54:12:69:f6:82:14:06:3d:
3c:57:d9:cd:c9:33:32:10:57:3c:99:b9:93:18:6c:71:bc:3c:
bf:a1:fa:93:de:43:0b:f8:7d:1c:32:78:77:93:99:4b:e7:b8:
ed:0d:07:b0:8c:8a:75:d8:b1:4f:47:4b:9f:73:d7:00:db:ea:
9c:7a:26:26:2e:32:91:18:6b:a6:de:c7:a9:0c:b0:0e:6d:de:
9b:23:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:31 2026 by rpki-client