Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/UlsUu7gepOaa3SQKJJkuwOw5-Ow.roa
File: UlsUu7gepOaa3SQKJJkuwOw5-Ow.roa (raw, json)
Hash identifier: hU1g21d4Xv9edIn/CDl1qXeVfqS91ol/VVK46174T28=
Subject key identifier: 52:5B:14:BB:B8:1E:A4:E6:9A:DD:24:0A:24:99:2E:C0:EC:39:F8:EC
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 01A05829D7FD511F8FB206616ED5CE8E7FBC
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/UlsUu7gepOaa3SQKJJkuwOw5-Ow.roa
Signing time: Mon 31 Aug 2026 14:12:12 +0000
ROA not before: Mon 31 Aug 2026 14:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 85.137.248.0/23 maxlen: 24
85.137.248.0/24 maxlen: 24
85.137.249.0/24 maxlen: 24
91.208.162.0/24 maxlen: 24
91.208.184.0/24 maxlen: 24
91.208.197.0/24 maxlen: 24
91.208.206.0/24 maxlen: 24
131.123.32.0/19 maxlen: 24
131.123.32.0/24 maxlen: 24
131.123.33.0/24 maxlen: 24
131.123.34.0/24 maxlen: 24
131.123.35.0/24 maxlen: 24
131.123.36.0/24 maxlen: 24
131.123.37.0/24 maxlen: 24
131.123.38.0/24 maxlen: 24
131.123.39.0/24 maxlen: 24
131.123.40.0/24 maxlen: 24
131.123.41.0/24 maxlen: 24
131.123.42.0/24 maxlen: 24
131.123.43.0/24 maxlen: 24
131.123.44.0/22 maxlen: 22
131.123.48.0/20 maxlen: 20
131.123.50.0/24 maxlen: 24
143.246.192.0/21 maxlen: 24
143.246.192.0/24 maxlen: 24
143.246.193.0/24 maxlen: 24
143.246.194.0/24 maxlen: 24
143.246.195.0/24 maxlen: 24
143.246.196.0/24 maxlen: 24
143.246.197.0/24 maxlen: 24
143.246.198.0/24 maxlen: 24
143.246.199.0/24 maxlen: 24
143.246.202.0/24 maxlen: 24
143.246.208.0/24 maxlen: 24
143.246.209.0/24 maxlen: 24
143.246.210.0/24 maxlen: 24
143.246.211.0/24 maxlen: 24
143.246.212.0/24 maxlen: 24
143.246.215.0/24 maxlen: 24
143.246.216.0/24 maxlen: 24
143.246.217.0/24 maxlen: 24
143.246.218.0/24 maxlen: 24
143.246.219.0/24 maxlen: 24
143.246.221.0/24 maxlen: 24
143.246.222.0/24 maxlen: 24
2a0f:5f40::/29 maxlen: 48
2a0f:5f40::/48 maxlen: 48
2a0f:5f40:1::/48 maxlen: 48
2a0f:5f40:1000::/48 maxlen: 48
2a0f:5f45::/32 maxlen: 32
2a0f:5f46::/32 maxlen: 32
2a0f:5f46:600::/40 maxlen: 40
2a0f:5f46:700::/40 maxlen: 40
2a0f:5f46:800::/40 maxlen: 40
2a0f:5f46:1000::/40 maxlen: 40
2a0f:5f47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:29:d7:fd:51:1f:8f:b2:06:61:6e:d5:ce:8e:7f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Aug 31 14:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=525b14bbb81ea4e69add240a24992ec0ec39f8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:2b:91:d6:9b:77:5f:72:cc:df:85:8b:0f:
18:e7:0d:70:f0:de:1c:09:47:64:7e:41:fa:9c:0d:
6c:c2:f7:04:69:d4:38:ed:57:09:1d:ee:a5:0b:2d:
13:ea:61:64:a7:c8:f5:a0:2d:48:6b:4d:24:78:61:
0f:7b:6d:dc:56:14:67:f3:77:76:a1:bf:74:e1:f5:
4f:01:b5:cd:4d:f4:24:95:34:cd:d3:40:9d:45:ef:
c7:e3:c3:b5:19:5c:bf:b5:98:d3:4f:6e:3b:80:ba:
d3:00:06:53:f3:b3:72:5f:05:51:08:e7:0c:67:70:
6e:69:37:73:eb:fb:28:43:89:2f:85:50:73:57:10:
84:fa:bb:8f:41:66:c6:86:10:b8:81:47:34:be:f8:
39:1f:28:62:54:b5:0a:0a:39:b9:6e:aa:cb:3a:b0:
9f:f6:75:17:b1:51:7f:3f:d5:9a:eb:e6:05:ed:24:
fc:85:65:df:9f:69:4d:04:c6:6c:48:fa:32:14:0b:
8c:74:af:2e:ea:66:a8:79:2a:04:66:7f:69:3e:0a:
44:97:79:48:a2:fb:a8:11:80:30:e1:e2:94:a5:b9:
b3:32:4b:15:b9:a9:0a:d1:29:a4:b5:37:de:ba:ef:
99:20:4d:6a:64:e4:46:ac:c5:53:67:d2:06:01:00:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:14:BB:B8:1E:A4:E6:9A:DD:24:0A:24:99:2E:C0:EC:39:F8:EC
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/UlsUu7gepOaa3SQKJJkuwOw5-Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.248.0/23
91.208.162.0/24
91.208.184.0/24
91.208.197.0/24
91.208.206.0/24
131.123.32.0/19
143.246.192.0/21
143.246.202.0/24
143.246.208.0-143.246.212.255
143.246.215.0-143.246.219.255
143.246.221.0-143.246.222.255
IPv6:
2a0f:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
5f:ae:55:4b:63:17:fb:f7:e6:56:f6:03:64:f9:53:7e:f3:bc:
53:83:bb:f1:bd:2c:69:09:29:0f:f0:bc:92:45:be:76:c1:9a:
93:8c:31:29:6e:5f:aa:76:78:d9:a7:b2:c0:22:13:5a:64:f1:
75:4f:0c:d3:2c:c1:1b:3c:da:9f:14:c6:32:19:91:98:35:91:
f0:62:b7:d3:4d:49:36:bf:a9:cd:ad:87:1b:cc:a3:02:cf:28:
46:b4:3f:e2:83:3d:bb:37:c6:ac:1e:a5:bf:51:48:aa:d8:83:
41:ed:82:1f:41:e1:73:f2:65:d6:cb:ef:a8:1b:ff:95:26:d2:
52:2e:d6:e7:fb:4c:b8:60:37:e4:ce:58:21:62:db:2c:84:f4:
1b:f4:ce:9f:3b:ba:82:fc:72:fa:c9:bb:a7:45:d3:96:5d:91:
cc:93:ac:ac:d2:d7:8d:a8:aa:c9:59:16:a8:e1:53:92:5f:ff:
ff:94:48:79:98:52:0f:25:84:e6:b7:43:df:ec:c5:9e:ee:6b:
11:ca:50:64:ac:aa:aa:b4:86:38:55:28:aa:80:2b:99:f3:0c:
9c:8e:58:d6:82:c3:74:08:5e:a7:e0:7c:2b:1b:c4:63:46:96:
5a:40:86:11:7e:bc:99:99:06:03:ef:6d:89:0a:7b:42:ea:c5:
a7:c0:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:12 2026 by rpki-client