Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/uE7ORiNsRQGjdCc4HH6coM1CcnQ.roa
File: uE7ORiNsRQGjdCc4HH6coM1CcnQ.roa (raw, json)
Hash identifier: sElnQC2IhBjiqBFU5wF4Odl3TglqL3IWyDtwzfQrYCM=
Subject key identifier: B8:4E:CE:46:23:6C:45:01:A3:74:27:38:1C:7E:9C:A0:CD:42:72:74
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019F43EC3DD28618C256D2DDB57E74862903
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/uE7ORiNsRQGjdCc4HH6coM1CcnQ.roa
Signing time: Wed 08 Jul 2026 22:49:43 +0000
ROA not before: Wed 08 Jul 2026 22:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
46.16.131.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
185.213.21.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:4::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:9::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:16::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:23::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:28::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:31::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:53::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:57::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
2a11:840:69::/48 maxlen: 48
2a11:840:70::/48 maxlen: 48
2a11:840:71::/48 maxlen: 48
2a11:840:72::/48 maxlen: 48
2a11:840:73::/48 maxlen: 48
2a11:840:73:1b::/64 maxlen: 64
2a11:840:74::/48 maxlen: 48
2a11:840:75::/48 maxlen: 48
2a11:840:76::/48 maxlen: 48
2a11:840:77::/48 maxlen: 48
2a11:840:78::/48 maxlen: 48
2a11:840:79::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:ec:3d:d2:86:18:c2:56:d2:dd:b5:7e:74:86:29:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jul 8 22:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b84ece46236c4501a37427381c7e9ca0cd427274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:72:00:f3:4b:9b:42:ab:ac:f6:26:f8:78:
84:ee:f2:51:96:24:b1:28:82:13:bf:51:14:30:77:
4f:8f:66:b3:a8:ac:dd:c8:49:00:28:ff:82:f6:80:
d5:e0:f4:7c:2c:23:5f:cd:75:47:ad:55:37:b6:d1:
10:48:48:92:42:e2:10:7e:d2:f7:5d:f9:3f:bf:28:
e2:1b:e2:1a:b2:de:26:b7:4b:9e:46:a7:ee:2e:af:
21:7b:47:ff:b5:20:1b:c3:43:d8:47:d6:a0:f9:0b:
f0:e7:d3:ca:1e:98:83:6d:91:3d:91:9c:03:e3:07:
5a:db:79:e8:41:f4:8d:20:3b:21:42:40:d8:a8:ab:
6c:e3:83:f7:de:60:21:39:01:6d:36:40:16:30:a1:
9b:4b:d0:4b:01:6c:4e:eb:77:c0:1e:cb:aa:4c:99:
ef:1a:d6:08:41:62:77:8f:18:42:d2:c6:1d:39:81:
e3:05:af:84:7a:1b:de:81:fb:1d:27:a0:e9:27:6d:
33:8e:3d:1e:e7:ba:38:79:d5:d4:52:3c:d4:94:36:
7b:75:c3:87:5d:2e:ed:e2:eb:a5:c0:2f:1e:a6:d7:
49:8f:ea:71:69:e6:fe:49:89:2b:d3:25:3a:b4:9b:
ba:45:8a:c8:e1:04:1a:54:4c:4d:e1:14:b4:24:42:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:CE:46:23:6C:45:01:A3:74:27:38:1C:7E:9C:A0:CD:42:72:74
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/uE7ORiNsRQGjdCc4HH6coM1CcnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/22
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.236.0/22
185.213.20.0/23
185.213.23.0/24
IPv6:
2a11:840:1::/48
2a11:840:3::-2a11:840:9:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:16::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:28::/48
2a11:840:30::/47
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:53::-2a11:840:54:ffff:ffff:ffff:ffff:ffff
2a11:840:57::/48
2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff
2a11:840:70::-2a11:840:79:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
02:80:76:9b:95:1f:da:c1:ad:e7:69:1b:84:b9:78:84:bd:76:
06:34:83:38:f9:8d:a1:02:b8:b1:d8:3b:1c:da:99:c2:2f:65:
6f:28:14:c0:49:99:ed:13:bc:55:8f:f3:6f:10:55:c2:32:16:
63:e6:bc:18:1f:d9:31:60:0c:e8:d6:e1:4a:66:8e:26:72:1d:
fe:a2:cd:37:4c:b6:ed:a0:6a:cc:a5:11:f7:49:b3:52:3a:51:
76:da:2d:b2:10:80:11:81:22:89:31:93:1c:87:1b:03:f2:be:
09:37:6d:d4:12:1b:5d:38:ec:f1:ba:e9:98:8b:5a:8b:aa:a3:
40:79:c9:c4:52:54:43:83:e5:8b:92:01:1f:f3:38:bc:bc:8c:
00:18:3d:b7:5c:1e:02:5c:f2:59:03:3d:18:92:d1:f7:dd:b1:
55:3f:72:17:61:6e:76:81:6e:5a:a5:5c:f3:fa:1e:06:8f:70:
4e:d5:12:52:ab:ae:b2:4a:88:ff:ea:98:5f:70:36:15:61:a3:
ab:43:dc:56:b5:87:95:5f:98:e8:3d:52:ea:df:a3:7b:e6:97:
67:2c:0d:ef:26:3d:48:24:0c:19:73:ce:78:8a:0c:0e:0b:a5:
1e:5f:13:36:87:c8:9f:a0:95:15:78:85:92:7f:71:3c:ac:23:
86:3d:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:49 2026 by rpki-client