Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/UE3rL7zpaLm2SNTNuQ_P2WzZEmA.roa
File: UE3rL7zpaLm2SNTNuQ_P2WzZEmA.roa (raw, json)
Hash identifier: xmWFoDrPk0aUWmQMRX8ayV7sBUWalQjY9fCBxeyV5bc=
Subject key identifier: 50:4D:EB:2F:BC:E9:68:B9:B6:48:D4:CD:B9:0F:CF:D9:6C:D9:12:60
Certificate issuer: /CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
Certificate serial: 019F2368842D8CD8FB826CA053EF212CEDF4
Authority key identifier: F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/UE3rL7zpaLm2SNTNuQ_P2WzZEmA.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214286
IP address blocks: 185.223.136.0/24 maxlen: 24
185.223.137.0/24 maxlen: 24
185.223.138.0/24 maxlen: 24
185.223.139.0/24 maxlen: 24
2a14:43c0:1000::/36 maxlen: 36
2a14:43c0:2000::/36 maxlen: 36
2a14:43c0:3000::/36 maxlen: 36
2a14:43c0:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:84:2d:8c:d8:fb:82:6c:a0:53:ef:21:2c:ed:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=504deb2fbce968b9b648d4cdb90fcfd96cd91260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:db:f2:6e:90:5d:13:2d:dd:c4:39:38:b4:
83:99:41:23:27:09:8c:ef:21:6f:63:90:67:6b:de:
fc:c6:80:e9:1a:a7:1b:03:e7:ad:a6:95:38:42:ac:
53:23:d8:08:96:96:e6:d1:a9:1b:45:bb:96:be:33:
2d:d9:32:8b:24:b1:59:b8:cd:93:0b:d7:06:3a:16:
b7:93:68:db:48:4e:66:6a:90:35:7c:5c:30:bc:eb:
f4:9d:e1:c0:3c:74:54:77:7e:c0:45:3c:9c:54:46:
cb:8a:e9:7e:9e:33:62:e6:de:36:6b:9d:04:c2:e3:
7d:38:a3:83:ab:a8:1a:7f:f2:8b:6a:09:5a:1e:b9:
76:9a:65:2e:04:48:04:bd:20:c6:c0:54:37:da:4e:
a6:61:29:24:3c:e1:b2:81:16:06:be:23:dc:4a:1e:
32:97:91:86:c5:7b:a7:3a:fe:db:9b:93:2f:f8:5a:
fb:24:3e:68:04:d0:7f:e8:af:65:42:34:b5:7b:a4:
8c:88:e8:ec:f1:6c:1e:42:e4:36:f5:44:54:10:cf:
56:e4:2b:64:00:eb:5b:f8:ac:ff:5f:60:a9:9c:be:
8c:ab:e1:ac:b3:19:23:6e:7a:6c:91:95:84:6c:68:
91:3e:c9:5f:dd:53:37:59:7e:4e:53:30:42:bb:0e:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4D:EB:2F:BC:E9:68:B9:B6:48:D4:CD:B9:0F:CF:D9:6C:D9:12:60
X509v3 Authority Key Identifier:
keyid:F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/UE3rL7zpaLm2SNTNuQ_P2WzZEmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.136.0/22
IPv6:
2a14:43c0:1000::-2a14:43c0:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a5:cf:a8:10:68:61:1a:d6:42:94:17:f1:e8:61:14:fe:63:4e:
17:76:07:68:07:5d:68:80:8f:92:fd:2e:70:f8:e7:4b:37:5e:
aa:bb:6a:a3:43:52:c6:54:18:bb:34:61:8c:1f:e5:5a:6e:bc:
cd:b6:be:55:60:c6:d6:48:94:6d:56:77:5e:9b:26:c1:8a:9c:
4a:a6:ff:b7:c0:5c:aa:23:d7:7b:db:be:9c:54:16:cd:6b:8c:
d6:43:fe:96:a8:6f:97:1d:aa:67:ae:fd:f1:bb:fd:d4:aa:66:
ff:31:28:f4:ec:77:fe:1a:b9:a4:48:b6:5c:0f:e5:b0:28:1c:
74:5a:8e:83:fd:82:9c:24:b2:09:5d:23:55:41:d7:9f:0a:b6:
b8:33:54:9d:95:1d:ef:6e:98:d3:23:00:1f:9f:1c:f4:65:7a:
45:19:f0:2e:71:6e:f9:f9:44:db:22:74:ce:c5:77:3c:1e:be:
b5:4c:bc:ac:85:8b:ec:27:07:ba:41:ae:0b:3b:1f:08:66:9f:
88:03:3e:be:30:ca:90:d4:4c:96:68:36:63:0b:e2:5d:10:41:
65:93:3e:27:7c:d8:cb:20:8a:24:06:0a:c0:85:fd:fb:a4:1b:
dc:ac:d6:1a:52:fe:57:5d:78:92:18:b6:00:da:f7:57:19:eb:
a5:4d:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:30 2026 by rpki-client