Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uQvF6Da23C6ZAMX7vvtkwb0AKRc.roa
File: uQvF6Da23C6ZAMX7vvtkwb0AKRc.roa (raw, json)
Hash identifier: KOaRnulvsn4uqLEE01teqwWw1p8vrt95QXZqBSWyvLE=
Subject key identifier: B9:0B:C5:E8:36:B6:DC:2E:99:00:C5:FB:BE:FB:64:C1:BD:00:29:17
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01A1054FB0AE98C41C32921052D90267950A
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uQvF6Da23C6ZAMX7vvtkwb0AKRc.roa
Signing time: Sun 04 Oct 2026 05:07:50 +0000
ROA not before: Sun 04 Oct 2026 05:07:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48159
IP address blocks: 2.176.128.0/17 maxlen: 17
2.177.0.0/16 maxlen: 16
2.182.0.0/16 maxlen: 24
2.182.128.0/21 maxlen: 21
2.185.0.0/16 maxlen: 16
2.185.0.0/20 maxlen: 20
2.185.18.0/24 maxlen: 24
2.185.40.0/21 maxlen: 21
2.185.88.0/22 maxlen: 22
2.185.160.0/19 maxlen: 19
2.185.164.0/24 maxlen: 24
2.188.0.0/24 maxlen: 24
2.188.1.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
2.188.179.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.187.0/24 maxlen: 24
2.189.40.0/23 maxlen: 23
2.189.40.48/28 maxlen: 28
2.189.40.64/28 maxlen: 28
2.189.42.0/23 maxlen: 23
2.189.42.0/24 maxlen: 24
2.189.42.16/29 maxlen: 29
2.189.42.24/30 maxlen: 30
2.189.42.28/30 maxlen: 30
2.189.42.36/30 maxlen: 30
2.189.42.40/30 maxlen: 30
2.189.42.44/30 maxlen: 30
2.189.42.48/29 maxlen: 29
2.189.42.64/30 maxlen: 30
2.189.42.72/29 maxlen: 29
2.189.42.80/29 maxlen: 29
2.189.43.0/24 maxlen: 24
2.189.56.0/24 maxlen: 24
2.189.58.0/24 maxlen: 24
2.189.68.0/24 maxlen: 24
2.189.72.0/24 maxlen: 24
2.189.79.96/29 maxlen: 29
2.189.187.0/24 maxlen: 24
2.189.188.0/25 maxlen: 25
2.189.188.128/25 maxlen: 25
2.191.0.0/16 maxlen: 16
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
78.38.243.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.39.149.0/24 maxlen: 24
78.39.150.0/24 maxlen: 24
78.39.151.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.240.0/24 maxlen: 24
80.191.0.0/16 maxlen: 16
80.191.56.0/24 maxlen: 24
217.218.0.0/16 maxlen: 24
217.218.67.0/24 maxlen: 24
217.219.0.0/16 maxlen: 24
217.219.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:4f:b0:ae:98:c4:1c:32:92:10:52:d9:02:67:95:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Oct 4 05:07:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b90bc5e836b6dc2e9900c5fbbefb64c1bd002917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:d3:97:e4:da:6c:84:c9:9f:05:0b:e3:05:
ad:0b:5e:ef:a9:19:b9:65:24:f6:9c:dd:e1:41:5a:
b2:31:f5:2f:15:ff:fc:3d:09:8e:c5:34:fa:59:e2:
91:53:e0:13:cb:c1:a2:5f:d9:0c:88:66:b5:28:25:
ca:b9:e7:1c:5f:28:3a:ac:95:0b:55:13:37:67:ae:
fd:4d:58:84:ca:ad:d5:4c:19:3b:20:2c:d5:0f:d9:
ea:c2:12:5b:83:db:2b:96:0b:de:9b:48:a8:43:cf:
33:19:05:5b:91:dc:e8:ba:c0:9d:3b:32:8d:96:01:
1c:50:a0:4b:9f:49:67:9e:5a:09:78:42:d2:07:88:
d5:69:c7:db:23:43:26:8b:1c:e9:81:94:65:82:f3:
d7:a4:50:15:8e:37:10:4a:75:93:28:22:e0:b3:83:
56:e9:dd:42:80:00:07:95:f7:fd:f2:9d:b3:2b:d2:
46:9b:23:cd:ad:61:f3:4b:2b:7e:8a:a5:3f:ab:6a:
48:15:b2:f2:73:59:2f:d7:b7:eb:7e:e1:22:51:a2:
c4:cd:e6:5d:e2:a3:60:07:11:81:a0:db:e7:15:eb:
67:b8:19:18:ae:c6:e8:1d:d1:7c:67:5f:ae:d9:72:
cb:0e:77:4b:54:76:40:80:f5:63:40:ef:47:80:ca:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:C5:E8:36:B6:DC:2E:99:00:C5:FB:BE:FB:64:C1:BD:00:29:17
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uQvF6Da23C6ZAMX7vvtkwb0AKRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.128.0-2.177.255.255
2.182.0.0/16
2.185.0.0/16
2.188.0.0/23
2.188.22.0/24
2.188.28.0/24
2.188.64.0/21
2.188.76.0/24
2.188.179.0/24
2.188.184.0/23
2.188.187.0/24
2.189.40.0/22
2.189.56.0/24
2.189.58.0/24
2.189.68.0/24
2.189.72.0/24
2.189.79.96/29
2.189.187.0-2.189.188.255
2.191.0.0/16
78.38.0.0/15
80.191.0.0/16
217.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
10:3c:c8:3d:4a:66:64:bd:b1:cd:77:f2:e1:00:4e:83:87:1a:
b2:05:69:1c:2f:21:82:b8:67:2f:60:dc:a7:c1:e4:6e:88:58:
f2:c4:bf:e7:7d:3d:66:84:3e:3b:f6:bd:03:9c:7f:e1:be:dc:
52:fd:71:96:cb:e7:64:a1:58:71:ba:a1:9c:d0:f4:13:0c:4f:
e3:14:e9:b5:73:7b:42:85:47:c4:e4:28:a6:ef:0b:3c:5d:09:
18:ae:94:cf:d8:fb:ae:e4:5e:21:80:3a:9d:b0:54:23:f9:0b:
fb:d7:a0:79:3e:f0:bc:ff:81:8a:db:78:31:f7:ac:a1:62:ad:
4a:91:4f:69:45:eb:0a:12:49:45:93:22:f8:25:10:9d:94:7f:
0a:df:a5:e2:8b:bc:f1:83:25:39:7d:be:2e:fa:08:69:e5:b4:
35:b2:24:32:05:44:ce:a8:29:43:57:7f:11:2b:54:0c:ca:a5:
ea:7e:dc:6d:4a:4e:b5:4a:b9:0b:db:64:d5:65:40:c1:01:fc:
d0:cf:8b:e8:a3:7b:b9:9b:02:f7:c4:60:22:52:e9:d7:a3:2c:
1a:3d:f1:96:a0:59:5a:80:59:f5:32:44:81:80:26:04:c1:65:
39:03:4f:ed:c0:a3:f0:88:76:17:0d:ac:e5:f1:74:a4:ab:ec:
35:4c:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:45:53 2026 by rpki-client