Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/uI2p_St8xu7ZpT8GRSPeHacoPgQ.roa
File: uI2p_St8xu7ZpT8GRSPeHacoPgQ.roa (raw, json)
Hash identifier: 51lmLo3rTUt/J6o4QmvUuq3au5ZbWynApTSh9gVcCfU=
Subject key identifier: B8:8D:A9:FD:2B:7C:C6:EE:D9:A5:3F:06:45:23:DE:1D:A7:28:3E:04
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019E8CD4A65955985F5B6CEA313D8999160A
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/uI2p_St8xu7ZpT8GRSPeHacoPgQ.roa
Signing time: Wed 03 Jun 2026 09:33:26 +0000
ROA not before: Wed 03 Jun 2026 09:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49628
IP address blocks: 5.187.8.0/21 maxlen: 21
5.187.8.0/24 maxlen: 24
5.187.9.0/24 maxlen: 24
5.187.10.0/24 maxlen: 24
5.187.11.0/24 maxlen: 24
5.187.12.0/24 maxlen: 24
5.187.13.0/24 maxlen: 24
5.187.14.0/24 maxlen: 24
5.187.15.0/24 maxlen: 24
37.75.128.0/21 maxlen: 21
37.75.128.0/24 maxlen: 24
37.75.129.0/24 maxlen: 24
37.75.130.0/24 maxlen: 24
37.75.131.0/24 maxlen: 24
37.75.132.0/24 maxlen: 24
37.75.133.0/24 maxlen: 24
37.75.134.0/24 maxlen: 24
37.75.135.0/24 maxlen: 24
78.40.104.0/22 maxlen: 22
78.40.104.0/24 maxlen: 24
78.40.105.0/24 maxlen: 24
78.40.106.0/24 maxlen: 24
78.40.107.0/24 maxlen: 24
185.46.176.0/22 maxlen: 22
185.46.176.0/24 maxlen: 24
185.46.177.0/24 maxlen: 24
185.46.178.0/24 maxlen: 24
185.46.179.0/24 maxlen: 24
185.81.92.0/22 maxlen: 22
185.81.92.0/24 maxlen: 24
185.81.93.0/24 maxlen: 24
185.81.94.0/24 maxlen: 24
185.81.95.0/24 maxlen: 24
185.168.224.0/22 maxlen: 22
185.168.224.0/24 maxlen: 24
185.168.225.0/24 maxlen: 24
185.168.226.0/24 maxlen: 24
185.168.227.0/24 maxlen: 24
188.227.192.0/22 maxlen: 22
188.227.192.0/24 maxlen: 24
188.227.193.0/24 maxlen: 24
188.227.194.0/24 maxlen: 24
188.227.195.0/24 maxlen: 24
193.176.212.0/22 maxlen: 22
193.176.212.0/24 maxlen: 24
193.176.213.0/24 maxlen: 24
193.176.214.0/24 maxlen: 24
193.176.215.0/24 maxlen: 24
2a01:88e0::/32 maxlen: 32
2a05:86c0::/29 maxlen: 29
2a07:ebc0::/29 maxlen: 29
2a0a:2900::/29 maxlen: 29
2a0a:2907:ffff:1000::/64 maxlen: 64
2a0a:2907:ffff:1100::/64 maxlen: 64
2a0c:6340::/29 maxlen: 29
2a0c:a3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:d4:a6:59:55:98:5f:5b:6c:ea:31:3d:89:99:16:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jun 3 09:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b88da9fd2b7cc6eed9a53f064523de1da7283e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:78:13:7d:11:54:d8:39:d6:03:ac:cc:e7:
62:c1:17:b8:f9:31:11:54:f4:9e:bd:82:5d:17:19:
5a:9f:94:56:0c:6c:b9:98:36:ec:ce:e9:11:db:76:
39:59:af:91:52:29:44:0b:03:c0:e8:0e:b8:8f:f3:
4b:d3:ea:5b:dc:79:1a:28:81:d8:f6:e2:f4:2d:5d:
3a:67:28:ba:ad:47:e4:cf:48:4e:4c:85:6a:d8:97:
85:83:dc:4a:fd:b0:31:0d:9d:f6:d7:e4:ef:47:1c:
c0:d6:c6:55:f7:e3:75:99:c7:e3:10:03:1e:39:bf:
89:f1:85:3b:43:02:d4:59:59:55:96:18:a9:ab:b6:
d9:bf:c9:61:fb:63:45:1b:63:e1:74:58:a6:5a:1c:
6a:2c:4f:c2:b3:23:25:ea:50:53:bd:16:3a:cd:6e:
fd:f7:3e:92:d1:d4:fc:51:88:41:9a:38:b1:50:af:
da:75:dd:70:c6:d5:94:22:74:84:8a:8e:1a:fc:dd:
09:5f:7b:4e:62:f1:d6:e3:39:7d:57:66:e4:ba:14:
30:2d:3c:f1:da:c7:58:3b:71:fa:e4:60:cb:64:a3:
5f:d0:d0:31:cf:d1:46:cb:0e:2b:0a:51:8d:cb:40:
e7:b7:c2:cc:04:de:b5:5c:97:fe:d2:a9:d7:a2:39:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:A9:FD:2B:7C:C6:EE:D9:A5:3F:06:45:23:DE:1D:A7:28:3E:04
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/uI2p_St8xu7ZpT8GRSPeHacoPgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.8.0/21
37.75.128.0/21
78.40.104.0/22
185.46.176.0/22
185.81.92.0/22
185.168.224.0/22
188.227.192.0/22
193.176.212.0/22
IPv6:
2a01:88e0::/32
2a05:86c0::/29
2a07:ebc0::/29
2a0a:2900::/29
2a0c:6340::/29
2a0c:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:28:c6:93:2c:08:c6:b0:9b:e9:d3:9d:25:77:c0:10:b2:d7:
18:2b:e2:c9:bd:6f:98:f8:e2:60:ef:70:cf:9c:63:43:49:35:
e1:fe:1e:98:04:45:9a:20:3e:fe:01:81:13:d1:4b:9c:1a:42:
90:7e:fc:56:58:d7:81:9e:68:19:a7:91:25:22:be:fa:f5:4f:
bc:b6:a1:cb:05:aa:d8:ad:01:b2:11:9a:92:eb:f6:82:d0:81:
67:af:77:da:3d:4a:37:63:bb:d5:80:f1:c8:a7:cb:96:ee:17:
8d:8d:10:30:c3:ad:3b:6b:e4:28:94:a8:e6:e5:14:52:6a:c7:
16:db:19:29:02:b0:9d:7a:7d:23:9f:f7:21:bb:db:57:64:61:
30:57:b2:a6:9b:be:45:27:cc:d7:ad:b9:84:fe:da:20:34:4f:
2c:cd:dc:ca:78:f4:06:82:c3:7e:9b:f9:a0:2e:fc:67:23:dc:
00:52:2f:b1:a1:b6:b5:f8:50:4d:18:24:7f:88:c8:87:af:a5:
16:a4:41:86:9f:1a:38:0c:56:6b:19:52:75:db:c7:2b:49:bc:
bf:3b:d5:92:fe:79:08:c1:a7:1e:b7:0d:fa:46:b0:6f:dd:c0:
54:7f:0a:30:df:8a:7e:e2:99:47:5b:06:09:d0:c0:c4:ff:78:
c1:02:5d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:43:58 2026 by rpki-client