Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/t-UGZFzwAaCjLNyuz1bGpvLd_6Y.roa
File: t-UGZFzwAaCjLNyuz1bGpvLd_6Y.roa (raw, json)
Hash identifier: e8yJ8vA9csLBL9fXV0svbNdPk2NABIuW0KFnXDTtmZw=
Subject key identifier: B7:E5:06:64:5C:F0:01:A0:A3:2C:DC:AE:CF:56:C6:A6:F2:DD:FF:A6
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A19C106C65D76DE9DE04474BFEE602DCE4
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/t-UGZFzwAaCjLNyuz1bGpvLd_6Y.roa
Signing time: Mon 02 Nov 2026 11:41:24 +0000
ROA not before: Mon 02 Nov 2026 11:41:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 142.228.110.0/24 maxlen: 24
142.228.126.0/24 maxlen: 24
142.228.151.0/24 maxlen: 24
142.228.156.0/22 maxlen: 22
142.228.176.0/22 maxlen: 22
142.228.244.0/23 maxlen: 23
142.228.246.0/23 maxlen: 23
142.228.248.0/23 maxlen: 23
142.228.250.0/23 maxlen: 23
142.228.252.0/23 maxlen: 23
198.33.84.0/24 maxlen: 24
198.33.90.0/24 maxlen: 24
198.33.100.0/22 maxlen: 22
198.33.182.0/24 maxlen: 24
198.34.69.0/24 maxlen: 24
198.34.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:10:6c:65:d7:6d:e9:de:04:47:4b:fe:e6:02:dc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Nov 2 11:41:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7e506645cf001a0a32cdcaecf56c6a6f2ddffa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:c8:1c:15:b3:76:05:3d:49:76:03:d8:0d:
54:1b:c3:21:8e:40:bf:b5:91:9c:0e:26:e0:08:8d:
d5:ac:01:77:72:58:06:91:ed:b9:44:38:c1:3b:20:
54:fa:ad:ae:d5:f4:dd:d2:dd:22:5f:06:16:95:51:
16:75:c2:b7:4e:7a:68:94:db:77:2e:4e:a4:e7:1d:
f3:de:0b:95:a2:e3:2b:e8:4c:13:67:7e:8e:17:15:
7a:08:85:2a:07:09:6b:27:ca:e0:98:f5:a2:67:1e:
0b:89:d2:e4:b7:56:7f:a1:8d:b8:f4:87:6f:79:92:
79:79:0e:d8:aa:3c:cd:a1:0e:ca:ec:c9:aa:f6:b0:
40:a4:44:52:72:06:d0:4e:e7:5c:00:0f:c1:b4:aa:
c0:0e:cd:18:0f:91:63:d4:34:b7:63:54:70:62:30:
a6:33:ba:84:38:74:3a:3f:04:65:1e:a5:44:a3:53:
0d:56:98:9e:de:98:65:d6:81:79:ba:4b:75:fd:cf:
a6:1d:fd:fe:09:79:99:b7:0f:6c:6b:20:e0:ba:eb:
b4:22:bb:cb:df:c8:72:6c:14:df:05:a9:cf:ed:01:
44:e5:11:f9:c9:30:39:0b:a9:ed:e4:8f:dc:9c:84:
c8:aa:a8:3e:12:c5:35:81:80:0f:93:ea:61:6e:13:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:06:64:5C:F0:01:A0:A3:2C:DC:AE:CF:56:C6:A6:F2:DD:FF:A6
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/t-UGZFzwAaCjLNyuz1bGpvLd_6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.110.0/24
142.228.126.0/24
142.228.151.0/24
142.228.156.0/22
142.228.176.0/22
142.228.244.0-142.228.253.255
198.33.84.0/24
198.33.90.0/24
198.33.100.0/22
198.33.182.0/24
198.34.69.0/24
198.34.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0e:af:c9:e7:86:4d:d0:58:32:8f:f5:3c:80:e7:9d:47:4f:
94:4a:69:7c:13:43:5c:92:37:2a:9f:9d:84:31:88:2a:84:62:
06:10:ab:5b:ae:3b:e5:d8:b3:d6:f3:e1:6d:ea:5b:22:0d:85:
23:6a:56:5a:af:da:dc:f1:bd:9f:57:31:46:f3:93:e8:21:14:
fd:86:b2:85:bb:3b:34:c9:18:33:b9:d7:d9:c7:1a:63:39:9c:
6e:bc:57:0e:a1:02:cf:65:2d:ba:e6:c6:95:8a:7f:7e:4d:27:
a3:99:6f:09:91:e7:30:c9:19:9a:47:e1:db:92:1b:5b:12:db:
59:85:58:c4:89:9d:a1:e0:7f:26:a7:5f:5e:4d:bd:74:88:23:
eb:fd:50:e9:44:f5:06:ef:0a:eb:38:d4:15:4f:e3:05:9c:5a:
0a:d0:5d:87:59:81:e6:87:44:2d:fb:68:db:d5:d9:a8:1a:b4:
2b:ca:0c:c7:29:ed:f0:15:95:77:69:e7:b8:13:6d:81:5d:58:
25:1b:24:1a:ba:3c:fb:f0:99:5a:46:0d:1d:e5:d5:ee:c1:41:
8e:3e:8f:29:c6:bc:ff:7c:ed:07:45:9a:81:3e:b7:0b:c5:13:
0e:06:9c:04:58:97:84:22:40:59:fd:33:c3:f8:39:9d:61:2e:
56:99:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:50:04 2026 by rpki-client