Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/uBuqY0pD3piJ7xuPcYzanm_Rwqc.roa
File: uBuqY0pD3piJ7xuPcYzanm_Rwqc.roa (raw, json)
Hash identifier: esHk6ctBRveV3IlZ4pJdKyF9pm/etnBt7sCDn0w0Kjw=
Subject key identifier: B8:1B:AA:63:4A:43:DE:98:89:EF:1B:8F:71:8C:DA:9E:6F:D1:C2:A7
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BDF40B276A2474C4A19B8463AA8D3
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/uBuqY0pD3piJ7xuPcYzanm_Rwqc.roa
Signing time: Tue 15 Sep 2026 21:49:28 +0000
ROA not before: Tue 15 Sep 2026 21:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 142.228.16.0/22 maxlen: 22
142.228.80.0/22 maxlen: 22
142.228.131.0/24 maxlen: 24
142.228.134.0/24 maxlen: 24
142.228.136.0/22 maxlen: 22
142.228.140.0/22 maxlen: 22
142.228.152.0/24 maxlen: 24
142.228.160.0/22 maxlen: 22
142.228.164.0/22 maxlen: 22
142.228.172.0/22 maxlen: 22
142.228.184.0/22 maxlen: 22
142.228.188.0/22 maxlen: 22
142.228.200.0/23 maxlen: 23
142.228.202.0/23 maxlen: 23
142.228.204.0/23 maxlen: 23
142.228.206.0/23 maxlen: 23
142.228.208.0/23 maxlen: 23
142.228.210.0/23 maxlen: 23
142.228.212.0/23 maxlen: 23
142.228.214.0/23 maxlen: 23
142.228.216.0/23 maxlen: 23
142.228.218.0/23 maxlen: 23
142.228.220.0/23 maxlen: 23
142.228.222.0/23 maxlen: 23
142.228.224.0/23 maxlen: 23
142.228.226.0/23 maxlen: 23
198.33.16.0/23 maxlen: 23
198.33.24.0/23 maxlen: 23
198.33.38.0/23 maxlen: 23
198.33.64.0/23 maxlen: 23
198.33.85.0/24 maxlen: 24
198.33.88.0/24 maxlen: 24
198.33.89.0/24 maxlen: 24
198.33.91.0/24 maxlen: 24
198.33.92.0/24 maxlen: 24
198.33.142.0/24 maxlen: 24
198.33.147.0/24 maxlen: 24
198.33.151.0/24 maxlen: 24
198.33.177.0/24 maxlen: 24
198.33.178.0/24 maxlen: 24
198.33.179.0/24 maxlen: 24
198.33.180.0/24 maxlen: 24
198.33.181.0/24 maxlen: 24
198.33.183.0/24 maxlen: 24
198.33.188.0/22 maxlen: 22
198.33.212.0/22 maxlen: 22
198.33.216.0/24 maxlen: 24
198.33.217.0/24 maxlen: 24
198.33.218.0/24 maxlen: 24
198.33.220.0/24 maxlen: 24
198.33.221.0/24 maxlen: 24
198.33.223.0/24 maxlen: 24
198.33.224.0/24 maxlen: 24
198.33.226.0/24 maxlen: 24
198.33.229.0/24 maxlen: 24
198.33.230.0/24 maxlen: 24
198.33.232.0/24 maxlen: 24
198.33.233.0/24 maxlen: 24
198.33.234.0/24 maxlen: 24
198.33.235.0/24 maxlen: 24
198.33.236.0/24 maxlen: 24
198.33.238.0/24 maxlen: 24
198.33.248.0/24 maxlen: 24
198.33.251.0/24 maxlen: 24
198.33.252.0/24 maxlen: 24
198.33.253.0/24 maxlen: 24
198.33.255.0/24 maxlen: 24
198.34.72.0/24 maxlen: 24
198.34.78.0/24 maxlen: 24
198.34.81.0/24 maxlen: 24
198.34.83.0/24 maxlen: 24
198.34.84.0/24 maxlen: 24
198.34.85.0/24 maxlen: 24
198.34.86.0/24 maxlen: 24
198.34.87.0/24 maxlen: 24
198.34.88.0/24 maxlen: 24
198.34.89.0/24 maxlen: 24
198.34.90.0/24 maxlen: 24
198.34.91.0/24 maxlen: 24
198.34.92.0/24 maxlen: 24
198.34.93.0/24 maxlen: 24
198.34.95.0/24 maxlen: 24
198.34.112.0/24 maxlen: 24
198.34.114.0/24 maxlen: 24
198.34.115.0/24 maxlen: 24
198.34.116.0/24 maxlen: 24
198.34.117.0/24 maxlen: 24
198.34.118.0/24 maxlen: 24
198.34.119.0/24 maxlen: 24
198.34.176.0/24 maxlen: 24
198.34.188.0/22 maxlen: 22
198.34.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:df:40:b2:76:a2:47:4c:4a:19:b8:46:3a:a8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b81baa634a43de9889ef1b8f718cda9e6fd1c2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:f1:79:e6:9c:9f:f8:c0:ee:67:60:80:2f:
45:52:36:a1:b2:12:f8:20:58:a8:07:6e:04:a4:d5:
81:72:17:52:cd:49:f5:34:76:19:11:78:9d:4e:a3:
b3:fd:e4:a8:91:b3:6d:49:cc:7c:cc:64:56:be:f4:
26:77:e5:41:24:05:ba:b4:3f:b4:64:50:5c:67:04:
e2:15:8d:7a:19:1c:51:4f:6b:55:87:62:2d:a1:f3:
71:8e:f1:02:22:66:ad:e8:65:d3:7c:de:1c:71:04:
23:2e:78:b7:89:8c:38:21:dd:0c:b9:58:d2:bd:53:
26:17:1d:0e:85:79:a6:6d:14:ed:93:0f:ca:4b:30:
45:24:cc:43:16:88:1c:71:5c:a7:dd:35:df:af:a7:
38:5b:5a:b8:c4:ce:76:da:90:22:fe:a3:a5:bd:04:
d3:d7:41:90:25:19:d4:d5:5d:7a:ed:5c:39:29:9b:
f0:7b:d5:8e:17:22:2c:7a:73:ca:ba:d3:f3:b0:71:
ee:d1:65:3b:59:d3:76:91:1f:15:96:e5:cb:0c:d4:
b5:c9:c9:15:ba:cb:f2:6e:a3:8e:24:a3:5d:98:6a:
d2:ab:ec:44:2e:f1:b2:00:7f:f2:8c:7f:c7:43:d8:
7a:b4:2b:c0:c7:c4:bf:38:7b:bb:48:4a:08:c8:70:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1B:AA:63:4A:43:DE:98:89:EF:1B:8F:71:8C:DA:9E:6F:D1:C2:A7
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/uBuqY0pD3piJ7xuPcYzanm_Rwqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.16.0/22
142.228.80.0/22
142.228.131.0/24
142.228.134.0/24
142.228.136.0/21
142.228.152.0/24
142.228.160.0/21
142.228.172.0/22
142.228.184.0/21
142.228.200.0-142.228.227.255
198.33.16.0/23
198.33.24.0/23
198.33.38.0/23
198.33.64.0/23
198.33.85.0/24
198.33.88.0/23
198.33.91.0-198.33.92.255
198.33.142.0/24
198.33.147.0/24
198.33.151.0/24
198.33.177.0-198.33.181.255
198.33.183.0/24
198.33.188.0/22
198.33.212.0-198.33.218.255
198.33.220.0/23
198.33.223.0-198.33.224.255
198.33.226.0/24
198.33.229.0-198.33.230.255
198.33.232.0-198.33.236.255
198.33.238.0/24
198.33.248.0/24
198.33.251.0-198.33.253.255
198.33.255.0/24
198.34.72.0/24
198.34.78.0/24
198.34.81.0/24
198.34.83.0-198.34.93.255
198.34.95.0/24
198.34.112.0/24
198.34.114.0-198.34.119.255
198.34.176.0/24
198.34.188.0/22
198.34.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:de:f1:f3:45:62:94:01:fb:e4:7e:88:21:47:bc:dc:62:52:
fa:82:13:38:b2:db:8c:6e:43:58:0e:3c:32:57:ca:06:65:c8:
24:50:62:23:a2:7a:53:c9:9e:49:c2:ec:0b:63:46:55:e0:c4:
ca:89:e8:62:7d:a4:56:e6:da:19:8a:80:8e:95:b2:c5:aa:34:
e8:ff:b4:46:56:4e:4c:94:87:06:16:1b:f3:e5:00:4d:1c:36:
99:3d:d3:44:26:af:47:c9:e7:36:1d:14:9f:19:24:10:f7:18:
5f:e4:6e:0d:93:7d:7a:96:01:41:69:9d:71:d4:e3:fd:df:58:
41:62:a8:cd:db:ea:f3:46:98:3f:04:f4:fe:fb:e1:16:f8:af:
31:79:c4:6e:8a:3a:a0:ed:95:7b:5f:75:5e:84:b8:d5:cb:a3:
9c:f8:46:d9:01:97:a5:af:b9:7d:8d:f3:6a:9e:b5:6a:12:6b:
86:52:1d:bd:7e:1d:a3:7f:21:f6:49:c8:49:34:bf:24:54:b5:
4e:ee:0d:58:db:0e:e0:16:53:07:fb:1f:53:b5:d7:fb:6c:19:
00:5d:2a:0c:b0:5c:09:8a:4c:f7:a4:6e:60:85:02:ed:24:db:
bd:7c:01:04:26:98:99:86:78:af:eb:83:2c:e9:05:2f:0f:35:
48:e2:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:44:23 2026 by rpki-client