Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/UUDuiwdwXBJkRQyOZXL8jNnUvh4.roa
File: UUDuiwdwXBJkRQyOZXL8jNnUvh4.roa (raw, json)
Hash identifier: 2E9XBsXGcCTsZ+IIciA4F+MOAPni9HkOnxgq1kncY7k=
Subject key identifier: 51:40:EE:8B:07:70:5C:12:64:45:0C:8E:65:72:FC:8C:D9:D4:BE:1E
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F746885118B12B4B925224258E21F9C58
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/UUDuiwdwXBJkRQyOZXL8jNnUvh4.roa
Signing time: Sat 18 Jul 2026 08:47:14 +0000
ROA not before: Sat 18 Jul 2026 08:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137427
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.153.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.225.0/24 maxlen: 24
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
91.204.224.0/22 maxlen: 22
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.101.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.151.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:68:85:11:8b:12:b4:b9:25:22:42:58:e2:1f:9c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 18 08:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5140ee8b07705c1264450c8e6572fc8cd9d4be1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:70:06:ee:ed:2a:01:ca:b8:02:d2:ba:ec:
eb:64:a5:17:d9:c8:9e:f1:6c:f2:0f:b2:20:3b:0a:
ff:4f:90:c3:43:0c:a4:6f:39:a1:66:7e:46:98:96:
f5:1a:ef:d3:ef:33:28:f0:4a:90:f0:fb:12:8c:7a:
9b:39:c9:5b:75:83:f4:58:a8:c6:a0:0c:8c:d1:aa:
53:d9:87:ef:56:fe:82:c6:72:c3:55:7e:45:65:55:
ab:b3:1e:d1:df:fc:26:ae:5d:3b:c1:f8:7e:34:3b:
82:ed:32:d9:db:4a:60:88:e8:ca:d0:f2:71:10:c9:
4b:73:80:05:74:9f:75:43:44:91:11:3e:40:82:ac:
6e:e2:d0:48:bc:fb:d1:a2:9b:a4:19:c4:27:4f:ef:
30:c6:a3:bd:15:ca:6f:e0:40:f6:e3:c1:be:3d:85:
e5:d0:74:0d:fb:f6:77:da:23:67:63:1a:9d:72:6d:
18:56:a1:8b:49:ff:38:34:a1:66:87:9b:7c:8d:39:
28:56:6d:d2:42:2b:42:65:f7:1e:da:f4:8c:b4:4b:
b2:d6:79:e7:a8:fd:0a:e0:0a:4e:9a:ad:22:e3:80:
91:d2:6b:79:ec:c0:e6:19:fc:8d:cc:00:c4:0b:4f:
69:9f:b9:98:63:62:1f:3e:ba:28:21:25:92:52:cf:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:40:EE:8B:07:70:5C:12:64:45:0C:8E:65:72:FC:8C:D9:D4:BE:1E
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/UUDuiwdwXBJkRQyOZXL8jNnUvh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
45:18:10:d8:c9:e0:24:a0:5e:51:62:8d:7a:2d:61:98:37:d8:
fe:f4:a8:bf:fe:79:04:39:d8:b5:26:04:13:5b:75:ac:5d:27:
61:02:6d:fc:9b:d6:09:76:3c:74:c5:73:e8:bd:b7:7e:63:84:
7d:86:2c:5d:d1:8a:b9:b4:32:e5:02:df:e5:b7:5e:5c:34:69:
74:80:11:3f:10:f6:64:0d:f8:57:85:8e:8d:fa:10:2a:fb:de:
de:29:3f:81:8b:14:af:48:41:9b:61:b3:d8:8e:a0:5a:1f:da:
22:26:54:5b:50:4a:10:fa:24:a1:67:6e:2d:85:28:c0:e0:8a:
21:0b:9c:f2:17:b7:08:0d:4c:17:d3:d0:cc:89:9b:56:b7:ff:
ee:6a:76:5d:e2:9d:52:63:9d:b6:3a:23:51:ec:06:64:0c:24:
a5:34:cf:67:5b:1f:7f:72:c5:18:12:9f:f6:b7:a9:10:c0:0c:
8b:d7:de:68:f0:32:b0:dd:d8:1c:1c:70:e3:8a:f8:d0:08:8a:
6d:c4:44:6c:ad:78:48:d8:f1:00:39:8a:95:07:04:2c:2b:6f:
35:f0:aa:0d:04:5d:07:fd:3d:55:f6:8d:e4:5b:28:1c:81:48:
3f:c4:a2:10:f3:78:b0:ce:2f:ce:26:65:18:d4:13:1a:1c:3f:
d8:5c:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:45:48 2026 by rpki-client