Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/ujxgZgmwQlEmLaVxV7Z_Qkrr6BA.roa
File: ujxgZgmwQlEmLaVxV7Z_Qkrr6BA.roa (raw, json)
Hash identifier: Ocs4zInZ4epjwCPVof7vdZVx4x829gapTPSS3WXGH9Y=
Subject key identifier: BA:3C:60:66:09:B0:42:51:26:2D:A5:71:57:B6:7F:42:4A:EB:E8:10
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 01A091979CB8712CF1BD344DD4A21F115247
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/ujxgZgmwQlEmLaVxV7Z_Qkrr6BA.roa
Signing time: Fri 11 Sep 2026 17:50:27 +0000
ROA not before: Fri 11 Sep 2026 17:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218692
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.152.0/24 maxlen: 24
2.59.153.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.224.0/24 maxlen: 24
45.91.225.0/24 maxlen: 24
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
45.142.152.0/24 maxlen: 24
45.142.153.0/24 maxlen: 24
45.142.154.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
91.204.224.0/22 maxlen: 22
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.100.0/24 maxlen: 24
185.202.101.0/24 maxlen: 24
185.202.102.0/24 maxlen: 24
185.202.103.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.151.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
193.239.155.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
194.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:97:9c:b8:71:2c:f1:bd:34:4d:d4:a2:1f:11:52:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Sep 11 17:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba3c606609b04251262da57157b67f424aebe810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:f4:df:8b:fe:13:b8:4c:c7:fd:24:ff:85:
3f:97:2b:bb:8e:74:11:89:f7:36:f5:08:cd:61:70:
2e:b4:c6:c8:31:2a:45:3a:79:0e:e2:53:ea:59:12:
de:9e:86:fe:5c:00:10:c9:34:54:73:39:6f:56:7b:
66:fd:0f:77:37:a8:15:6a:62:5f:d7:01:1e:62:8c:
3e:92:82:d3:47:52:c8:06:aa:89:f9:3f:b8:e0:3a:
cd:99:a8:fd:6e:14:a6:b4:49:58:6b:6b:83:1a:f7:
e4:0c:13:19:93:2f:24:2f:89:1e:9c:e7:65:a3:73:
d0:f6:2f:f0:41:e6:52:b8:8d:db:59:be:f9:02:45:
fa:f6:71:6c:ab:bf:4d:36:11:9d:4e:3b:d1:d8:70:
b8:ee:c4:96:cf:7d:48:57:b9:42:a5:fe:a4:58:13:
c1:e3:c1:35:f8:1d:b4:26:86:b6:53:aa:77:97:10:
de:d9:c0:e6:5d:06:49:8a:e3:b2:e8:bc:e4:c4:9a:
ed:40:62:eb:6d:08:5a:69:8f:db:75:68:86:b7:28:
91:68:91:ca:b0:ae:72:a7:51:8e:35:ac:6c:bb:52:
eb:3f:a1:25:4c:1c:2d:c7:7e:99:66:42:0e:d8:44:
7a:f0:7d:47:7c:75:3f:18:fc:54:d9:78:14:f1:78:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3C:60:66:09:B0:42:51:26:2D:A5:71:57:B6:7F:42:4A:EB:E8:10
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/ujxgZgmwQlEmLaVxV7Z_Qkrr6BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
06:95:31:8c:fc:97:85:f9:02:38:7e:2d:f5:6e:95:71:18:2d:
46:44:2e:be:b2:c1:13:3f:ca:93:7b:77:68:2b:0f:1a:94:de:
c2:f1:dd:d6:19:1f:67:4d:51:cc:c5:f6:63:8b:01:29:28:53:
08:5f:97:71:ac:95:b9:be:05:3b:84:59:d0:f4:80:4a:79:57:
d5:af:a2:03:30:15:51:33:94:6c:44:db:c3:48:89:b3:bc:97:
6e:68:0e:57:a9:21:1b:4a:4d:58:ca:a3:98:fa:e4:a8:b8:af:
dc:4c:8b:2a:4e:b5:f3:1d:4a:f0:f5:6e:23:18:e1:76:af:c7:
46:55:d7:e8:de:17:3d:12:e3:15:a9:6a:26:df:27:67:b0:79:
88:a9:b5:03:ad:4a:13:96:d9:0e:a4:aa:d0:2f:53:f1:05:00:
70:93:22:8d:52:4b:f7:c5:d4:da:d8:e5:86:a0:c9:33:bf:a6:
7f:67:87:79:59:24:b4:ae:92:1c:27:3d:27:a7:42:78:4b:3b:
bd:70:36:60:5b:59:74:21:5b:04:46:8f:29:9d:ab:0b:8e:41:
8b:fc:7e:d5:29:84:f4:e4:c9:2c:56:51:1c:0e:2f:1d:78:9c:
e1:5a:cb:c7:87:3c:83:e4:b2:07:09:d2:4b:59:14:77:17:ab:
2c:ab:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:46:24 2026 by rpki-client