Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/UBprnGDgUIQGgKvWmIS8_yQFiII.roa
File: UBprnGDgUIQGgKvWmIS8_yQFiII.roa (raw, json)
Hash identifier: jDsEX8R1Ij/Kl7yB4Ey14j2vt5dE21hu/30hNI0mPyA=
Subject key identifier: 50:1A:6B:9C:60:E0:50:84:06:80:AB:D6:98:84:BC:FF:24:05:88:82
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019F36F6618A1945E72153D9A695552456B4
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/UBprnGDgUIQGgKvWmIS8_yQFiII.roa
Signing time: Mon 06 Jul 2026 10:25:44 +0000
ROA not before: Mon 06 Jul 2026 10:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.110.0/23 maxlen: 23
138.16.128.0/24 maxlen: 24
138.16.129.0/24 maxlen: 24
138.16.130.0/24 maxlen: 24
185.42.24.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
193.150.70.0/24 maxlen: 24
194.26.210.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:f6:61:8a:19:45:e7:21:53:d9:a6:95:55:24:56:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 6 10:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501a6b9c60e050840680abd69884bcff24058882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:b3:1a:19:94:cc:32:96:55:6c:57:75:70:
b5:c3:8d:5d:78:9c:ba:51:0a:bf:c7:b6:6b:3a:a4:
30:48:ac:fa:3e:da:22:6c:ac:45:db:83:4e:f6:48:
96:e9:8f:19:bc:c2:0d:fd:70:de:62:f5:17:04:e8:
36:89:60:d2:a5:db:49:37:5d:4c:a5:db:8a:26:0b:
96:68:1d:5c:48:f9:44:96:78:14:2e:29:6b:40:b6:
02:ac:fc:9a:3c:fa:4b:80:ef:ce:3f:72:8b:a5:0e:
82:5b:12:61:ab:0f:61:ca:c1:35:71:13:55:32:5a:
99:3d:91:2c:6c:de:ed:b2:72:09:61:44:a8:63:a1:
a0:0c:21:db:1e:ee:dc:c7:b7:ce:22:00:37:5e:6d:
4b:28:ff:f5:db:d0:a8:66:27:09:cf:23:82:10:05:
e1:10:49:c2:f2:df:94:5e:0a:4f:3c:a2:b7:17:31:
2d:31:6b:e1:64:45:37:c1:24:df:c1:61:22:0c:c3:
ff:8b:e4:63:a5:21:d8:5f:32:05:1e:fd:6c:a7:92:
dc:80:0c:a8:57:0c:10:ed:d4:0d:07:0c:b9:55:2c:
7c:21:c5:70:29:b1:15:1e:a3:ff:b4:0b:39:a9:c4:
72:75:ff:51:0a:ab:2a:43:77:58:1b:c4:b9:d3:e3:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:6B:9C:60:E0:50:84:06:80:AB:D6:98:84:BC:FF:24:05:88:82
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/UBprnGDgUIQGgKvWmIS8_yQFiII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
81.22.193.0/24
83.171.240.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
138.16.128.0-138.16.130.255
185.42.24.0/24
185.42.26.0/24
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
193.150.70.0/24
194.26.210.0/24
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
39:6d:ca:5a:0b:c0:9a:46:08:9f:05:ad:4c:82:f5:dd:f6:f0:
73:1c:8c:55:21:eb:5e:ca:9e:50:a9:54:dc:d8:e1:b2:4a:20:
34:ef:43:a5:d4:e8:ce:dc:5d:d2:7b:c2:88:7a:67:f7:09:35:
bb:b3:3a:df:d2:1a:a5:3e:63:7d:ee:99:06:d6:33:a6:4d:6f:
5a:e8:73:d8:7f:7c:89:4a:5d:51:a6:6e:88:bd:7d:1e:d4:05:
b6:cf:9f:7a:9f:d9:6f:59:a5:18:4f:1f:79:51:4a:1e:98:9c:
5b:41:96:83:54:d4:2e:ba:35:ef:23:57:f1:c6:31:40:22:15:
53:38:58:ed:7b:e9:aa:40:b0:7e:b3:ca:af:9c:12:ac:0f:71:
4a:24:63:94:0b:6d:30:f9:4e:f5:98:92:07:28:e2:0b:3e:3c:
bf:48:4c:1f:c2:24:5d:e1:a4:2e:8e:1c:74:ef:79:cf:e6:08:
1c:0d:9c:77:3d:30:14:78:9d:d4:11:19:bf:6a:a2:f7:95:9c:
c5:bb:92:98:e4:c9:6b:72:6e:c9:b6:15:4e:b0:f3:89:56:a1:
01:9d:2a:79:27:d4:e9:f0:7c:74:24:dd:b3:f8:32:2b:f6:a0:
d7:5e:55:ca:f6:32:17:2b:e5:63:03:f0:52:27:08:88:6b:18:
65:c5:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:28 2026 by rpki-client