Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UA5AwMHOCFDaw0mWqy9gIkUUo6A.roa
File: UA5AwMHOCFDaw0mWqy9gIkUUo6A.roa (raw, json)
Hash identifier: NomPWZ+u0CGK+/0vNMXnAtrzeb4jOSfW16T7oq3HrV4=
Subject key identifier: 50:0E:40:C0:C1:CE:08:50:DA:C3:49:96:AB:2F:60:22:45:14:A3:A0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A043E0A2AA127B5712A8F5FDF559F870DD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UA5AwMHOCFDaw0mWqy9gIkUUo6A.roa
Signing time: Thu 27 Aug 2026 15:39:50 +0000
ROA not before: Thu 27 Aug 2026 15:39:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 79.121.188.0/23 maxlen: 24
79.121.194.0/23 maxlen: 24
79.121.208.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
82.108.101.0/24 maxlen: 24
87.86.216.0/24 maxlen: 24
92.244.162.0/23 maxlen: 24
92.244.164.0/23 maxlen: 24
92.244.166.0/23 maxlen: 24
92.244.168.0/23 maxlen: 24
92.244.170.0/23 maxlen: 24
92.244.172.0/23 maxlen: 24
93.152.0.0/23 maxlen: 24
93.152.10.0/23 maxlen: 24
93.152.12.0/22 maxlen: 24
93.152.18.0/24 maxlen: 24
93.152.21.0/24 maxlen: 24
93.152.48.0/22 maxlen: 24
93.152.64.0/22 maxlen: 24
93.152.92.0/24 maxlen: 24
93.152.116.0/22 maxlen: 24
94.185.130.0/23 maxlen: 24
94.185.132.0/23 maxlen: 24
94.185.136.0/23 maxlen: 24
94.185.142.0/23 maxlen: 24
94.185.148.0/23 maxlen: 24
94.185.152.0/22 maxlen: 24
94.185.152.0/23 maxlen: 24
94.185.154.0/23 maxlen: 24
94.185.168.0/22 maxlen: 24
94.185.168.0/23 maxlen: 24
94.185.170.0/23 maxlen: 24
94.185.172.0/23 maxlen: 24
94.185.180.0/23 maxlen: 24
94.185.186.0/23 maxlen: 24
94.185.192.0/22 maxlen: 24
94.185.192.0/23 maxlen: 24
94.185.194.0/23 maxlen: 24
94.185.196.0/23 maxlen: 24
94.185.200.0/22 maxlen: 24
94.185.200.0/23 maxlen: 24
94.185.202.0/23 maxlen: 24
94.185.204.0/23 maxlen: 24
94.185.214.0/23 maxlen: 24
94.185.216.0/23 maxlen: 24
94.185.220.0/22 maxlen: 24
94.185.220.0/23 maxlen: 24
94.185.222.0/23 maxlen: 24
94.185.230.0/23 maxlen: 24
94.185.232.0/23 maxlen: 24
95.177.3.0/24 maxlen: 24
95.177.5.0/24 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.13.0/24 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
109.174.128.0/22 maxlen: 24
109.174.128.0/23 maxlen: 24
109.174.130.0/23 maxlen: 24
109.174.134.0/23 maxlen: 24
109.174.136.0/23 maxlen: 24
109.174.140.0/22 maxlen: 24
109.174.140.0/23 maxlen: 24
109.174.142.0/23 maxlen: 24
109.174.152.0/23 maxlen: 24
109.174.160.0/22 maxlen: 24
109.174.160.0/23 maxlen: 24
109.174.162.0/23 maxlen: 24
109.174.168.0/23 maxlen: 24
109.174.172.0/23 maxlen: 24
109.174.250.0/23 maxlen: 24
109.174.252.0/23 maxlen: 24
109.174.254.0/23 maxlen: 24
109.204.0.0/22 maxlen: 24
109.204.16.0/22 maxlen: 24
109.204.21.0/24 maxlen: 24
109.204.24.0/22 maxlen: 24
109.204.29.0/24 maxlen: 24
109.204.41.0/24 maxlen: 24
109.204.45.0/24 maxlen: 24
109.204.51.0/24 maxlen: 24
109.204.54.0/24 maxlen: 24
109.204.58.0/24 maxlen: 24
109.204.96.0/22 maxlen: 24
109.204.112.0/24 maxlen: 24
109.204.117.0/24 maxlen: 24
109.204.118.0/24 maxlen: 24
109.204.121.0/24 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 24
195.40.28.0/23 maxlen: 24
195.40.96.0/23 maxlen: 24
195.40.108.0/23 maxlen: 24
195.40.162.0/23 maxlen: 24
195.172.96.0/23 maxlen: 24
195.172.100.0/23 maxlen: 24
195.172.104.0/23 maxlen: 24
195.172.192.0/23 maxlen: 24
195.172.198.0/23 maxlen: 24
195.172.202.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:e0:a2:aa:12:7b:57:12:a8:f5:fd:f5:59:f8:70:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 27 15:39:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=500e40c0c1ce0850dac34996ab2f60224514a3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:55:eb:e3:1b:cb:4c:2b:10:08:7d:46:d0:70:
4c:9b:db:b8:c1:91:97:a1:63:47:c5:05:9e:58:2a:
a2:a3:3a:66:fe:8e:15:5d:d9:ef:7e:65:9a:69:ce:
11:92:af:14:8b:24:ac:b2:82:a6:26:3c:fb:db:25:
31:1b:04:c5:98:35:1c:4c:8b:50:44:f6:83:08:30:
fb:57:fd:5e:3c:63:eb:37:80:f3:3a:f4:18:31:0b:
ab:07:a8:58:3f:ce:af:a2:ac:54:a5:7e:ab:9e:70:
85:81:b1:9c:fa:25:66:80:b5:a4:b4:da:32:b0:be:
01:e2:e8:2c:6e:f5:74:77:9a:d4:80:23:bf:69:87:
03:4f:78:d9:82:92:61:3e:90:75:f3:f4:67:0e:a6:
91:5d:b6:80:d8:ed:74:b9:f6:7d:48:4a:c5:ce:f4:
a3:29:49:2a:44:41:a4:05:14:6d:32:26:4a:c5:22:
a4:cb:a5:75:60:e3:3f:b4:2e:bf:52:5e:af:b5:8e:
25:c2:f3:9b:3f:ce:a8:93:e8:6d:ec:a8:f4:08:5d:
40:4f:6f:ce:58:ad:9f:76:3f:5b:c9:67:9c:a0:74:
ad:c8:ed:b4:78:fb:77:9b:32:53:ad:5b:76:ce:77:
08:37:9a:0b:9a:7b:83:33:f0:4c:5c:15:ae:8f:76:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0E:40:C0:C1:CE:08:50:DA:C3:49:96:AB:2F:60:22:45:14:A3:A0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UA5AwMHOCFDaw0mWqy9gIkUUo6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.188.0/23
79.121.194.0/23
79.121.208.0/23
79.121.222.0/23
79.121.226.0/23
79.121.238.0/23
82.108.101.0/24
87.86.216.0/24
92.244.162.0-92.244.173.255
93.152.0.0/23
93.152.10.0-93.152.15.255
93.152.18.0/24
93.152.21.0/24
93.152.48.0/22
93.152.64.0/22
93.152.92.0/24
93.152.116.0/22
94.185.130.0-94.185.133.255
94.185.136.0/23
94.185.142.0/23
94.185.148.0/23
94.185.152.0/22
94.185.168.0-94.185.173.255
94.185.180.0/23
94.185.186.0/23
94.185.192.0-94.185.197.255
94.185.200.0-94.185.205.255
94.185.214.0-94.185.217.255
94.185.220.0/22
94.185.230.0-94.185.233.255
95.177.3.0/24
95.177.5.0/24
95.177.8.0/23
95.177.13.0/24
95.177.54.0/23
95.177.72.0/23
109.174.128.0/22
109.174.134.0-109.174.137.255
109.174.140.0/22
109.174.152.0/23
109.174.160.0/22
109.174.168.0/23
109.174.172.0/23
109.174.250.0-109.174.255.255
109.204.0.0/22
109.204.16.0/22
109.204.21.0/24
109.204.24.0/22
109.204.29.0/24
109.204.41.0/24
109.204.45.0/24
109.204.51.0/24
109.204.54.0/24
109.204.58.0/24
109.204.96.0/22
109.204.112.0/24
109.204.117.0-109.204.118.255
109.204.121.0/24
109.204.124.0/23
195.40.18.0/23
195.40.28.0/23
195.40.96.0/23
195.40.108.0/23
195.40.162.0/23
195.172.96.0/23
195.172.100.0/23
195.172.104.0/23
195.172.192.0/23
195.172.198.0/23
195.172.202.0/23
212.134.11.0/24
212.135.0.0/24
212.135.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:8c:4b:33:bd:b2:d3:78:13:40:3f:25:63:5b:68:ad:5f:72:
7f:35:a0:7f:f7:8f:a0:87:1b:6b:a4:24:72:d2:36:c0:cc:8c:
79:ec:f9:65:61:bd:cb:db:6b:8e:a9:05:70:93:13:b5:8d:1c:
4f:12:cc:37:b8:c4:e5:87:58:74:76:3b:1e:86:ec:b4:f7:54:
c4:5b:eb:6e:33:50:ec:e1:14:f6:5c:33:b2:b7:6c:e1:49:c6:
c7:3a:b9:50:1e:84:db:3a:23:e6:a3:69:fd:d5:43:1d:f9:52:
80:ae:8c:54:b9:78:6f:4e:6c:45:84:44:02:b2:d9:61:c4:91:
14:fa:d1:2b:9c:e3:7d:57:d7:c2:90:f9:8e:13:50:8d:22:7c:
fe:9c:9b:f3:5b:4e:a2:bd:86:20:cf:ab:14:11:70:e4:99:59:
70:0a:5c:80:b6:69:eb:49:3d:e9:6d:c9:18:f4:b6:ed:95:ea:
92:e0:2a:d0:2f:f9:c7:1b:de:61:e7:96:6f:c3:e7:cc:64:db:
57:56:be:52:75:d4:f7:e5:35:ed:21:84:ba:31:f6:cd:76:e1:
ad:98:4a:d3:3b:8b:4a:9b:83:27:d5:60:1e:94:8a:b5:55:20:
16:bb:77:cc:b8:68:b5:13:22:f5:94:bc:67:db:e2:05:0a:4b:
dd:d3:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:10 2026 by rpki-client