Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/uZCJ1ZlX7FZKbkYCZM2a8EPtRMI.roa
File: uZCJ1ZlX7FZKbkYCZM2a8EPtRMI.roa (raw, json)
Hash identifier: gQPzOCK/RXUj7ECDDWVHnreCZ/IrlUfLQtw8hRWnAl8=
Subject key identifier: B9:90:89:D5:99:57:EC:56:4A:6E:46:02:64:CD:9A:F0:43:ED:44:C2
Certificate issuer: /CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
Certificate serial: 019F2368B279D4B9EA7E13E7BF2ABCCCFF6C
Authority key identifier: EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/uZCJ1ZlX7FZKbkYCZM2a8EPtRMI.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33983
IP address blocks: 37.35.64.0/21 maxlen: 21
37.35.64.0/24 maxlen: 24
37.35.65.0/24 maxlen: 24
37.35.66.0/24 maxlen: 24
37.35.67.0/24 maxlen: 24
37.35.68.0/24 maxlen: 24
37.35.69.0/24 maxlen: 24
37.35.70.0/24 maxlen: 24
37.35.71.0/24 maxlen: 24
84.22.32.0/19 maxlen: 19
84.22.32.0/24 maxlen: 24
84.22.33.0/24 maxlen: 24
84.22.34.0/24 maxlen: 24
84.22.35.0/24 maxlen: 24
84.22.36.0/24 maxlen: 24
84.22.37.0/24 maxlen: 24
84.22.38.0/24 maxlen: 24
84.22.39.0/24 maxlen: 24
84.22.40.0/24 maxlen: 24
84.22.41.0/24 maxlen: 24
84.22.42.0/24 maxlen: 24
84.22.43.0/24 maxlen: 24
84.22.44.0/24 maxlen: 24
84.22.45.0/24 maxlen: 24
84.22.46.0/24 maxlen: 24
84.22.47.0/24 maxlen: 24
84.22.48.0/24 maxlen: 24
84.22.49.0/24 maxlen: 24
84.22.50.0/24 maxlen: 24
84.22.51.0/24 maxlen: 24
84.22.52.0/24 maxlen: 24
84.22.53.0/24 maxlen: 24
84.22.54.0/24 maxlen: 24
84.22.55.0/24 maxlen: 24
84.22.56.0/24 maxlen: 24
84.22.57.0/24 maxlen: 24
84.22.58.0/24 maxlen: 24
84.22.59.0/24 maxlen: 24
84.22.60.0/24 maxlen: 24
84.22.61.0/24 maxlen: 24
84.22.62.0/24 maxlen: 24
84.22.63.0/24 maxlen: 24
185.173.204.0/22 maxlen: 22
185.173.204.0/24 maxlen: 24
185.173.205.0/24 maxlen: 24
185.173.206.0/24 maxlen: 24
185.173.207.0/24 maxlen: 24
2a0b:6300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b2:79:d4:b9:ea:7e:13:e7:bf:2a:bc:cc:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b99089d59957ec564a6e460264cd9af043ed44c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:e8:d0:aa:32:e4:e4:70:bc:d9:d7:5a:13:
fd:64:8b:86:98:bc:00:28:c0:74:c7:9e:df:a2:38:
49:41:78:fd:50:e6:d4:e7:67:e8:b2:d5:e5:82:28:
ae:63:6e:71:83:33:74:c8:62:d5:3d:3b:0e:60:0a:
e9:fa:6f:7c:6c:35:70:68:52:47:fc:ec:d7:45:c4:
b8:81:4b:e1:b2:67:80:89:b7:f9:b6:6f:fc:81:50:
b3:df:33:51:d6:4b:14:4e:9c:03:07:67:25:76:27:
74:08:88:08:6d:85:d6:6f:4a:30:18:d8:4b:9e:bb:
99:40:39:04:17:a7:da:b3:85:ff:e7:dc:bf:87:88:
da:56:82:62:dc:0e:ba:43:79:6e:ed:df:7c:4f:84:
4a:8a:d3:da:23:88:60:56:76:23:89:24:74:3d:b9:
1f:12:f4:2e:46:75:0f:d0:36:fa:0c:27:64:23:87:
88:7b:f2:52:fa:27:3b:8e:d8:1f:98:e4:7d:3e:23:
35:50:2c:81:84:05:e1:fa:48:ff:d4:16:bb:b9:da:
4e:cc:58:b3:73:cd:ad:1f:fb:ba:6e:f8:a7:8e:89:
5a:fe:3f:6c:63:1b:3c:39:fd:3d:97:d5:1f:78:01:
de:f9:89:e0:1c:93:72:88:65:9f:19:a5:90:4f:60:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:89:D5:99:57:EC:56:4A:6E:46:02:64:CD:9A:F0:43:ED:44:C2
X509v3 Authority Key Identifier:
keyid:EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/uZCJ1ZlX7FZKbkYCZM2a8EPtRMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.64.0/21
84.22.32.0/19
185.173.204.0/22
IPv6:
2a0b:6300::/29
Signature Algorithm: sha256WithRSAEncryption
36:c6:91:e0:97:14:b3:fe:47:17:7b:9c:e8:21:e5:65:63:4a:
a9:0d:50:16:44:56:89:dc:1c:7c:18:19:8c:2e:11:66:63:8f:
2e:a0:ac:90:97:6f:cd:c8:33:b0:6a:4f:dd:86:83:67:64:08:
e2:63:d1:be:f0:ae:3d:90:5f:78:8e:f7:b5:b4:11:88:64:94:
64:35:99:6f:2e:f5:30:7d:ce:65:bd:76:5e:71:70:e5:f0:3f:
5a:ff:1e:97:a8:0f:a6:e3:78:0e:b3:3c:d6:95:f1:fe:b4:11:
4e:d8:24:19:7a:df:d6:41:53:d9:19:9b:91:6e:c1:47:7e:aa:
c3:c4:a9:1c:ae:2e:cf:d2:2b:e1:90:01:75:cb:e9:8d:23:6e:
08:ed:1f:58:d0:04:54:a0:14:a3:45:c2:59:06:da:6e:a2:84:
58:3b:64:e8:46:87:47:c4:46:6d:a4:6c:f1:a6:a1:f7:71:4c:
ae:28:85:8d:6e:37:81:83:e0:28:6e:9d:d8:8e:70:50:44:14:
53:f8:e9:14:b0:28:25:1d:f6:ae:60:fd:1d:e1:f2:57:35:11:
0d:12:7f:13:ce:75:96:f1:f8:25:a3:c0:b2:1d:be:04:e0:53:
3e:45:f7:9d:de:12:0a:1a:47:9c:e3:ed:57:15:ba:5d:40:9c:
45:b7:a7:43
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ8jaLJ51LnqfhPnvyq8zP9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGYzZWYyOGU4ODlmZDMwZGNmMTM3ZTdjZjEyNDhmMjU1
ZTY3MWEwHhcNMjYwNzAyMTUxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTkwODlkNTk5NTdlYzU2NGE2ZTQ2MDI2NGNkOWFmMDQzZWQ0NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCTo0Koy5ORwvNnXWhP9ZIuGmLwA
KMB0x57fojhJQXj9UObU52fostXlgiiuY25xgzN0yGLVPTsOYArp+m98bDVwaFJH
/OzXRcS4gUvhsmeAibf5tm/8gVCz3zNR1ksUTpwDB2cldid0CIgIbYXWb0owGNhL
nruZQDkEF6fas4X/59y/h4jaVoJi3A66Q3lu7d98T4RKitPaI4hgVnYjiSR0Pbkf
EvQuRnUP0Db6DCdkI4eIe/JS+ic7jtgfmOR9PiM1UCyBhAXh+kj/1Ba7udpOzFiz
c82tH/u6bvinjola/j9sYxs8Of09l9UfeAHe+YngHJNyiGWfGaWQT2A7wQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLmQidWZV+xWSm5GAmTNmvBD7UTCMB8GA1UdIwQY
MBaAFO/fPvKOiJ/TDc8TfnzxJI8lXmcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzk4LThvNkluOU1OenhOLWZQRWtqeVZlWnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQt
YTM1YzI3ZDk1MTg2LzEvdVpDSjFabFg3RlpLYmtZQ1pNMmE4RVB0Uk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQtYTM1YzI3ZDk1MTg2
LzEvNzk4LThvNkluOU1OenhOLWZQRWtqeVZlWnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJSNAAwQF
VBYgAwQCua3MMA0EAgACMAcDBQMqC2MAMA0GCSqGSIb3DQEBCwUAA4IBAQA2xpHg
lxSz/kcXe5zoIeVlY0qpDVAWRFaJ3Bx8GBmMLhFmY48uoKyQl2/NyDOwak/dhoNn
ZAjiY9G+8K49kF94jve1tBGIZJRkNZlvLvUwfc5lvXZecXDl8D9a/x6XqA+m43gO
szzWlfH+tBFO2CQZet/WQVPZGZuRbsFHfqrDxKkcri7P0ivhkAF1y+mNI24I7R9Y
0ARUoBSjRcJZBtpuooRYO2ToRodHxEZtpGzxpqH3cUyuKIWNbjeBg+Aobp3YjnBQ
RBRT+OkUsCglHfauYP0d4fJXNRENEn8TznWW8fglo8CyHb4E4FM+Rfed3hIKGkec
4+1XFbpdQJxFt6dD
-----END CERTIFICATE-----
Generated at Fri Jul 3 20:52:36 2026 by rpki-client