Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/uUDKYyFFirLuGqR8U0Iysb1Nw8I.roa
File: uUDKYyFFirLuGqR8U0Iysb1Nw8I.roa (raw, json)
Hash identifier: Y7R75luVVqvdP03OWGWhzCZwuixQZrQDRe/qiiGkEy4=
Subject key identifier: B9:40:CA:63:21:45:8A:B2:EE:1A:A4:7C:53:42:32:B1:BD:4D:C3:C2
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 01A07B3007DB179A1351D492F3934C69089D
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/uUDKYyFFirLuGqR8U0Iysb1Nw8I.roa
Signing time: Mon 07 Sep 2026 09:25:40 +0000
ROA not before: Mon 07 Sep 2026 09:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48635
IP address blocks: 2.57.59.0/24 maxlen: 24
5.157.80.0/21 maxlen: 24
31.25.96.0/21 maxlen: 24
31.25.98.0/24 maxlen: 24
31.186.168.0/21 maxlen: 24
46.17.0.0/21 maxlen: 24
62.84.240.0/21 maxlen: 24
62.221.248.0/21 maxlen: 24
62.221.250.0/24 maxlen: 24
77.94.248.0/21 maxlen: 24
79.99.128.0/21 maxlen: 24
91.198.106.0/24 maxlen: 24
91.238.176.0/23 maxlen: 24
92.63.168.0/21 maxlen: 24
92.63.168.0/24 maxlen: 24
92.63.169.0/24 maxlen: 24
93.180.64.0/21 maxlen: 24
93.180.65.0/24 maxlen: 24
93.187.220.0/22 maxlen: 24
109.70.0.0/21 maxlen: 24
109.72.80.0/20 maxlen: 24
109.106.160.0/20 maxlen: 24
109.106.176.0/21 maxlen: 24
128.140.216.0/21 maxlen: 24
145.131.0.0/20 maxlen: 24
145.131.16.0/20 maxlen: 24
145.131.32.0/20 maxlen: 24
176.117.58.0/23 maxlen: 24
185.27.140.0/22 maxlen: 24
185.27.172.0/22 maxlen: 22
185.28.56.0/22 maxlen: 24
185.37.68.0/22 maxlen: 24
185.56.144.0/22 maxlen: 24
185.66.248.0/22 maxlen: 24
185.89.4.0/22 maxlen: 24
185.94.228.0/24 maxlen: 24
185.94.230.0/23 maxlen: 24
185.95.31.0/24 maxlen: 24
185.103.156.0/22 maxlen: 24
185.103.240.0/22 maxlen: 24
185.103.242.0/23 maxlen: 24
185.107.212.0/22 maxlen: 24
185.107.224.0/23 maxlen: 24
185.109.216.0/22 maxlen: 24
185.159.240.0/22 maxlen: 24
185.175.200.0/22 maxlen: 24
185.182.56.0/22 maxlen: 24
185.182.56.0/24 maxlen: 24
185.187.12.0/22 maxlen: 24
185.223.32.0/22 maxlen: 24
185.224.88.0/22 maxlen: 24
185.231.200.0/22 maxlen: 24
185.232.248.0/22 maxlen: 24
193.23.143.0/24 maxlen: 24
193.164.192.0/23 maxlen: 24
194.247.30.0/23 maxlen: 24
195.20.8.0/22 maxlen: 24
195.238.74.0/23 maxlen: 24
2001:678:76c::/48 maxlen: 48
2001:67c:28fc::/48 maxlen: 48
2a00:f10::/29 maxlen: 48
2a00:f60::/32 maxlen: 48
2a00:9b60::/40 maxlen: 48
2a01:b940::/29 maxlen: 48
2a02:2968::/29 maxlen: 48
2a02:40c1::/32 maxlen: 48
2a03:3060::/29 maxlen: 48
2a04:6bc0::/36 maxlen: 48
2a05:1500::/29 maxlen: 48
2a05:1500:600::/40 maxlen: 48
2a06:4040::/29 maxlen: 48
2a0b:7280::/29 maxlen: 48
2a0b:8f80::/29 maxlen: 48
2a0c:84c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:30:07:db:17:9a:13:51:d4:92:f3:93:4c:69:08:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Sep 7 09:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b940ca6321458ab2ee1aa47c534232b1bd4dc3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:4e:44:1a:21:90:e1:a7:ae:75:b7:f4:27:
fe:93:02:4b:be:8a:96:60:2e:e2:fa:3c:a5:b4:b4:
84:df:4f:72:38:26:19:19:32:ac:3b:a2:cd:4e:0b:
2e:cd:3e:88:7e:1d:6e:8e:cf:c7:9d:64:06:d4:c7:
fa:88:8d:96:b7:41:6c:7c:6e:3e:be:8a:82:43:1a:
11:c9:05:8b:ff:fd:37:1f:d4:c7:99:bf:4a:51:09:
79:bd:59:cb:0c:74:33:6b:1d:92:5d:e1:8d:a0:da:
2d:47:d2:95:87:d2:b2:e6:39:43:fd:ce:5b:22:56:
27:a0:c6:9d:fe:38:db:6a:97:8d:2e:51:f0:fb:aa:
0b:cb:42:7d:52:12:0a:ee:e2:39:b7:65:7e:fe:c7:
79:e6:a3:7b:3d:01:37:24:ad:9b:1c:9d:2f:aa:e3:
2b:ff:53:98:31:84:1a:8b:d5:44:90:23:e4:28:8f:
af:28:5d:22:98:67:b9:cc:cc:9f:78:21:1e:70:c5:
2e:55:c7:90:0e:1f:30:d3:07:98:2e:3e:84:ee:14:
ba:6b:f7:72:6f:94:cc:97:60:51:98:ed:57:37:18:
ad:e2:77:8a:8a:ca:1a:0f:64:9d:c1:a8:c4:a0:44:
67:82:68:db:74:4e:f6:f9:dc:5c:22:2a:38:5a:d8:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:40:CA:63:21:45:8A:B2:EE:1A:A4:7C:53:42:32:B1:BD:4D:C3:C2
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/uUDKYyFFirLuGqR8U0Iysb1Nw8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.59.0/24
5.157.80.0/21
31.25.96.0/21
31.186.168.0/21
46.17.0.0/21
62.84.240.0/21
62.221.248.0/21
77.94.248.0/21
79.99.128.0/21
91.198.106.0/24
91.238.176.0/23
92.63.168.0/21
93.180.64.0/21
93.187.220.0/22
109.70.0.0/21
109.72.80.0/20
109.106.160.0-109.106.183.255
128.140.216.0/21
145.131.0.0-145.131.47.255
176.117.58.0/23
185.27.140.0/22
185.27.172.0/22
185.28.56.0/22
185.37.68.0/22
185.56.144.0/22
185.66.248.0/22
185.89.4.0/22
185.94.228.0/24
185.94.230.0/23
185.95.31.0/24
185.103.156.0/22
185.103.240.0/22
185.107.212.0/22
185.107.224.0/23
185.109.216.0/22
185.159.240.0/22
185.175.200.0/22
185.182.56.0/22
185.187.12.0/22
185.223.32.0/22
185.224.88.0/22
185.231.200.0/22
185.232.248.0/22
193.23.143.0/24
193.164.192.0/23
194.247.30.0/23
195.20.8.0/22
195.238.74.0/23
IPv6:
2001:678:76c::/48
2001:67c:28fc::/48
2a00:f10::/29
2a00:f60::/32
2a00:9b60::/40
2a01:b940::/29
2a02:2968::/29
2a02:40c1::/32
2a03:3060::/29
2a04:6bc0::/36
2a05:1500::/29
2a06:4040::/29
2a0b:7280::/29
2a0b:8f80::/29
2a0c:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:7a:85:2e:3a:16:6c:b6:19:31:c9:aa:99:5e:12:33:b2:3a:
56:05:76:9b:b4:20:0b:1e:0a:33:5f:53:e0:c4:1b:6b:18:0e:
92:88:ea:89:95:b3:21:94:56:32:f5:6a:c1:87:ee:30:da:77:
b6:4c:40:e8:28:fe:bd:4b:a2:77:c3:d6:81:88:7c:b2:c9:a9:
00:68:40:2a:f5:2d:85:0e:98:e3:20:c8:59:2b:c6:9e:d9:ce:
5c:43:a6:d8:7e:6a:d8:b8:01:f7:12:63:31:cf:8d:bf:90:57:
77:5a:11:31:10:22:23:b6:54:06:83:dd:fe:14:09:fb:55:23:
21:59:89:4e:80:55:7e:ca:f8:d7:4d:c2:23:9e:e8:af:4d:64:
60:fb:1d:1b:5e:4b:6c:d2:ae:ab:58:dd:4c:6a:31:23:6e:1a:
5a:81:dd:47:1c:81:1f:23:a9:3c:a2:70:ca:d2:4f:03:00:dc:
d0:fe:1d:ce:88:96:75:9b:44:c1:27:c6:98:0d:54:21:ad:7c:
6a:26:2a:de:8b:5f:51:20:94:6e:74:a8:cf:20:08:d4:e4:cb:
56:57:2e:a9:fc:f5:b2:e8:f1:03:fe:03:7d:c3:4d:ca:7c:84:
43:dc:52:a0:b4:f5:85:a6:ce:7a:86:75:c7:4a:d1:bb:69:a2:
0f:cb:d7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:13:59 2026 by rpki-client