Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/UOXA4oU0cYn3rZAwOMaEWtcF4QY.roa
File: UOXA4oU0cYn3rZAwOMaEWtcF4QY.roa (raw, json)
Hash identifier: DU4w5RjcNeNPeF61/164VHqPXEXFyBssEnx5YQVlwVs=
Subject key identifier: 50:E5:C0:E2:85:34:71:89:F7:AD:90:30:38:C6:84:5A:D7:05:E1:06
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F746884359FF5E427BBD062E41C96F6D0
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/UOXA4oU0cYn3rZAwOMaEWtcF4QY.roa
Signing time: Sat 18 Jul 2026 08:47:14 +0000
ROA not before: Sat 18 Jul 2026 08:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136038
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.152.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
45.142.152.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
91.204.224.0/22 maxlen: 22
91.204.225.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.103.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:68:84:35:9f:f5:e4:27:bb:d0:62:e4:1c:96:f6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 18 08:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50e5c0e285347189f7ad903038c6845ad705e106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:6b:c6:1d:f0:36:9d:6c:94:e5:e2:16:8e:
d5:e2:e7:69:f8:8f:cb:cf:7c:cf:37:b4:f6:b0:f5:
c9:44:35:b6:79:b9:b5:54:2f:3d:3d:94:c4:77:29:
ee:99:21:40:cf:9c:27:2d:2b:59:dc:7d:30:3d:51:
cf:fe:d3:90:fb:73:03:2b:4c:4c:2f:42:cd:45:d0:
b5:75:8f:2d:da:6e:f1:20:84:99:10:6e:76:c7:a1:
7c:1a:cf:62:f8:41:0d:e1:6c:d3:06:a6:db:f6:03:
4e:0f:20:04:59:b9:f2:47:bc:82:e2:96:3d:93:66:
80:61:f5:80:7b:0b:1c:76:e0:9c:13:d0:18:55:54:
b3:8d:6a:07:45:63:21:81:8f:fb:74:df:70:8f:27:
c9:9c:49:7c:16:df:a0:d9:45:30:40:be:8d:f7:9d:
cc:f7:85:10:fb:4f:1b:f9:b7:1e:35:f0:d9:74:da:
6e:e8:76:82:34:40:95:bc:3e:ad:79:4a:40:c1:cb:
e2:c1:fc:f0:40:62:82:2a:1f:aa:ab:74:67:70:be:
02:3c:0f:69:6f:0c:a2:02:53:45:f8:d2:7c:8d:a7:
83:f0:5f:3c:42:40:7a:20:c9:27:8a:d3:b0:00:fa:
c5:4b:6d:df:ab:da:29:ed:df:35:a8:14:e4:e9:b7:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E5:C0:E2:85:34:71:89:F7:AD:90:30:38:C6:84:5A:D7:05:E1:06
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/UOXA4oU0cYn3rZAwOMaEWtcF4QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6c:2c:0a:86:c0:6c:7e:92:33:38:53:9a:b6:9d:80:1a:73:
6a:7e:77:70:2c:30:a0:cc:f2:8b:54:00:a3:a1:c7:b2:25:10:
15:aa:77:43:c5:41:bc:f0:41:8e:2d:55:40:62:ef:98:12:f2:
6b:05:ee:bd:84:b9:f8:3a:b0:28:bc:69:dd:57:5f:e2:29:91:
da:a8:52:ae:27:8a:1b:0d:61:66:47:58:6a:7f:2b:e8:6f:9c:
bb:8e:a7:07:45:80:3b:15:e4:ca:bf:3a:45:dc:06:90:68:e2:
a2:b4:35:1b:9f:9e:8c:48:24:a0:4d:9d:8a:ea:ae:20:88:59:
50:35:6e:a9:0d:ea:91:73:db:34:84:c2:75:8d:10:47:a6:49:
89:a6:7d:c0:e2:8e:ca:b3:b7:6a:e2:90:bb:e0:54:14:11:a6:
30:0e:40:32:28:60:6c:3e:3f:29:d7:3e:c0:7a:90:00:2d:85:
dd:87:a4:bd:0c:8a:1c:89:db:6d:db:91:ea:08:ae:ec:fc:78:
3b:bc:6d:95:98:63:d4:ba:7b:7b:c7:2c:57:8e:3b:c7:22:e2:
0a:33:bb:64:8d:f0:14:dd:e2:ea:ed:9b:05:0c:65:9a:50:be:
9f:41:aa:01:08:cb:bd:7b:4b:86:c6:da:96:0f:84:fc:41:82:
c8:a2:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:20 2026 by rpki-client