Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UENDJQ4IDH2QTq05N14rPCC9sXY.roa
File: UENDJQ4IDH2QTq05N14rPCC9sXY.roa (raw, json)
Hash identifier: b/ixME5AIMG3OH7npgaFWwGbVfjQIoiDWXMKN92zLk0=
Subject key identifier: 50:43:43:25:0E:08:0C:7D:90:4E:AD:39:37:5E:2B:3C:20:BD:B1:76
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368BB4B2D7549B480C129D8368FD7FF
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UENDJQ4IDH2QTq05N14rPCC9sXY.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47583
IP address blocks: 37.98.151.0/24 maxlen: 24
109.176.196.0/24 maxlen: 24
109.176.197.0/24 maxlen: 24
109.176.198.0/24 maxlen: 24
109.176.199.0/24 maxlen: 24
212.38.94.0/24 maxlen: 24
212.38.95.0/24 maxlen: 24
213.130.144.0/24 maxlen: 24
213.130.145.0/24 maxlen: 24
213.130.146.0/24 maxlen: 24
213.130.147.0/24 maxlen: 24
213.210.13.0/24 maxlen: 24
213.210.20.0/24 maxlen: 24
213.210.21.0/24 maxlen: 24
213.210.36.0/24 maxlen: 24
213.210.37.0/24 maxlen: 24
213.210.57.0/24 maxlen: 24
213.218.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bb:4b:2d:75:49:b4:80:c1:29:d8:36:8f:d7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=504343250e080c7d904ead39375e2b3c20bdb176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:c1:30:ec:40:08:85:ab:59:2b:21:ad:c2:
a6:5b:e9:b6:4c:cd:19:91:bf:bc:64:01:53:9d:f8:
58:5c:24:6b:15:9f:a8:22:d4:fd:e7:5c:21:df:90:
07:9b:0e:8f:1d:a8:b0:fa:3f:8d:61:1c:c7:0a:df:
dd:f1:ba:ca:b6:d6:6a:c8:78:30:e4:fb:5a:7d:1b:
d4:a0:d1:fc:97:23:0f:4a:e3:a9:8a:b3:67:b4:9d:
c7:b8:37:ba:dd:7d:aa:07:c1:a1:83:47:98:08:f7:
c1:8c:a8:09:eb:d3:34:17:23:19:7f:1d:5f:f5:b3:
05:cd:f9:63:38:ab:5c:11:7b:c3:7f:46:0b:60:34:
c8:05:34:58:4b:88:0c:01:5b:2a:4f:ae:55:84:38:
95:7b:84:b8:8e:38:96:80:99:2c:f8:22:2e:34:b9:
c6:a6:1f:b5:39:d5:2d:1c:e1:cc:86:b8:42:3a:8b:
c0:be:65:f9:7f:71:cb:cd:63:db:fa:28:0c:9c:95:
f4:0c:17:e7:85:c2:c9:7d:06:97:e4:92:c8:fc:08:
00:11:4c:6c:d7:d2:3b:95:8c:0c:1b:65:aa:30:82:
f4:69:be:b3:65:19:8f:71:4c:fa:d1:8c:e2:af:15:
58:cc:91:9d:af:4e:32:ea:d2:e9:a2:9a:34:0b:6e:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:43:25:0E:08:0C:7D:90:4E:AD:39:37:5E:2B:3C:20:BD:B1:76
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UENDJQ4IDH2QTq05N14rPCC9sXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.151.0/24
109.176.196.0/22
212.38.94.0/23
213.130.144.0/22
213.210.13.0/24
213.210.20.0/23
213.210.36.0/23
213.210.57.0/24
213.218.240.0/24
Signature Algorithm: sha256WithRSAEncryption
56:20:a5:a3:f3:e7:c5:90:66:87:f4:28:38:de:5a:af:ff:81:
d2:64:49:86:6d:b9:a4:2e:1e:08:25:b6:04:b0:0e:6c:98:34:
1e:3b:78:a9:94:eb:f4:81:63:81:e0:b7:76:e8:bf:34:01:d6:
83:93:c4:00:24:48:21:05:3a:3e:90:8c:e1:cb:a2:dd:20:8e:
4c:13:66:d3:4d:39:7e:4b:a0:f8:2c:9b:2a:fc:d7:c8:aa:63:
0b:36:98:bd:d4:c5:36:06:49:0d:97:a8:d6:d2:40:99:3d:ee:
14:0e:5b:5e:2d:6f:d8:43:bd:c0:97:ed:cf:18:20:79:b5:76:
22:2b:1e:68:39:4a:17:62:8c:d6:5e:e7:41:bd:c6:f2:59:5a:
36:7e:d9:6d:05:06:fb:ec:fe:5a:5f:ce:d4:d5:7c:b6:47:55:
8b:b5:e6:dc:8d:e8:0b:55:80:d6:a7:40:4b:cb:f7:a4:5c:86:
ac:29:58:0c:ca:15:b4:91:9b:9d:9e:1e:05:d4:d7:93:03:22:
22:d8:2f:da:c0:17:cb:4f:a8:af:0a:ee:db:a8:2c:52:04:68:
65:02:96:60:c5:e0:5b:6b:f3:29:63:a6:e9:d7:9e:bf:1b:52:
9d:0f:2a:19:fd:ce:fc:48:6c:7c:18:ae:2a:12:fc:b7:8f:0d:
8c:29:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:32 2026 by rpki-client