Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/UFIlSKxx9JVyflAe4XZ9RSQQiYg.roa
File: UFIlSKxx9JVyflAe4XZ9RSQQiYg.roa (raw, json)
Hash identifier: PLd/XdORbh+AqlA44ImDYbauW5MSTsm0/u80XEVDYgk=
Subject key identifier: 50:52:25:48:AC:71:F4:95:72:7E:50:1E:E1:76:7D:45:24:10:89:88
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 01A12F9F1BFD502D1C86B60FD51CA075B6BF
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/UFIlSKxx9JVyflAe4XZ9RSQQiYg.roa
Signing time: Mon 12 Oct 2026 10:18:38 +0000
ROA not before: Mon 12 Oct 2026 10:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43372
IP address blocks: 45.158.4.0/22 maxlen: 24
45.158.4.0/23 maxlen: 23
45.158.6.0/23 maxlen: 23
87.199.160.0/19 maxlen: 24
91.209.177.0/24 maxlen: 24
185.186.152.0/22 maxlen: 24
185.186.152.0/23 maxlen: 23
185.186.154.0/23 maxlen: 23
185.236.96.0/22 maxlen: 24
185.236.96.0/23 maxlen: 23
185.236.98.0/23 maxlen: 23
185.236.108.0/22 maxlen: 24
185.236.108.0/23 maxlen: 23
185.236.110.0/23 maxlen: 23
2a0b:7e80::/29 maxlen: 29
2a0b:7e80:0:100::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:9f:1b:fd:50:2d:1c:86:b6:0f:d5:1c:a0:75:b6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Oct 12 10:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50522548ac71f495727e501ee1767d4524108988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:b5:33:3e:ff:10:5f:95:ce:a5:65:e0:1e:
c5:85:d7:e6:c3:ab:a4:49:a9:2f:85:aa:49:f5:1a:
4f:b9:05:1a:69:b2:a9:50:d3:b1:dd:56:76:36:a4:
a0:24:57:f4:2f:80:90:c7:ab:fa:d8:1e:25:b3:92:
9f:97:f9:ad:93:8d:2f:66:d0:8a:1a:ed:64:3a:86:
4c:0e:98:81:20:21:e6:76:e9:b2:8d:20:4b:b4:f2:
a1:2b:fa:f9:57:87:1b:af:9f:c8:5a:90:a7:91:a6:
06:cc:13:36:4f:f1:4a:91:58:ae:e6:6d:ca:05:8c:
ca:8d:df:e4:66:5d:3c:12:fe:3a:d1:cb:fb:32:c7:
95:f5:9b:3c:aa:7c:ec:72:7c:b8:e2:83:a4:c1:e1:
8d:3a:21:c4:51:09:23:e4:a0:16:d0:54:2e:81:0d:
c6:78:58:5d:63:c4:bb:a4:3d:d1:49:be:eb:a0:1c:
83:4f:fa:09:d2:a9:43:0a:f4:cd:6e:8b:ec:54:b1:
33:97:0f:8d:c0:a3:5c:eb:28:68:4a:26:96:fc:78:
56:dc:4e:80:2d:59:7e:9d:63:22:40:61:86:6e:fd:
34:be:1c:2f:32:13:83:a4:e9:8d:dc:6c:31:50:80:
0d:eb:63:a6:93:ec:e9:19:8f:92:b1:6d:7c:57:06:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:25:48:AC:71:F4:95:72:7E:50:1E:E1:76:7D:45:24:10:89:88
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/UFIlSKxx9JVyflAe4XZ9RSQQiYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.4.0/22
87.199.160.0/19
91.209.177.0/24
185.186.152.0/22
185.236.96.0/22
185.236.108.0/22
IPv6:
2a0b:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
09:aa:7a:4b:80:18:64:b6:fd:ae:6b:6e:f6:50:da:b2:bd:c8:
12:5c:1d:26:89:3a:82:51:4c:ec:1e:c8:12:fc:ef:83:47:68:
77:85:4c:9f:59:c6:60:ca:70:40:ed:14:51:e5:f9:dc:5d:e2:
93:9c:f7:5a:a8:25:ea:11:c0:7a:c4:e5:0c:ba:34:c3:9c:e6:
0c:28:87:8f:b3:f8:b7:39:e4:76:1f:34:8b:71:01:b7:db:41:
8f:65:24:a9:08:e9:99:1e:ba:b8:56:5b:3f:17:d1:93:d5:70:
cb:a5:60:6c:e0:c5:a7:50:f4:19:5c:a4:6d:40:fb:6a:83:3c:
cc:9a:46:b3:70:a9:c7:a3:2b:32:30:05:a0:50:23:73:bb:cb:
8a:c1:99:15:75:63:7a:bb:fa:6d:4f:2a:fd:4f:49:99:14:a0:
59:54:bc:9f:18:20:ac:7c:c3:1b:b6:9d:2c:98:78:6f:f2:61:
b7:a7:83:0b:49:aa:a4:54:2d:c8:73:38:bf:af:3c:3a:2d:bd:
6c:0a:82:57:a2:97:4a:75:f0:e1:40:75:62:94:84:a9:6d:d3:
57:1f:8d:ce:25:cc:53:dd:44:a7:f8:e9:c1:69:d4:e9:31:44:
cf:a8:08:b6:a1:20:69:0f:62:9f:71:9d:62:1f:c3:9b:ba:37:
ba:7e:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:42 2026 by rpki-client