Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/uoY9uF43e11VaM8YCPzd7_naWuU.roa
File: uoY9uF43e11VaM8YCPzd7_naWuU.roa (raw, json)
Hash identifier: kjHA2f6LvepY6czsnt07Ep5rpNQx/VowRQqKg0fqHJE=
Subject key identifier: BA:86:3D:B8:5E:37:7B:5D:55:68:CF:18:08:FC:DD:EF:F9:DA:5A:E5
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 01A1B0A6DFF6131B3838567E941BBFD5A076
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/uoY9uF43e11VaM8YCPzd7_naWuU.roa
Signing time: Fri 06 Nov 2026 11:38:08 +0000
ROA not before: Fri 06 Nov 2026 11:38:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57829
IP address blocks: 31.12.84.0/22 maxlen: 24
31.132.56.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
37.153.138.0/23 maxlen: 24
37.153.172.0/23 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.121.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
45.114.123.0/24 maxlen: 24
46.254.8.0/21 maxlen: 24
46.254.10.0/23 maxlen: 24
46.254.12.0/24 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
77.81.6.0/23 maxlen: 24
77.81.188.0/23 maxlen: 24
86.107.48.0/23 maxlen: 24
86.107.49.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
89.36.90.0/23 maxlen: 24
89.40.216.0/23 maxlen: 24
89.42.140.0/23 maxlen: 24
89.45.226.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.46.80.0/21 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.86.0/24 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
103.81.140.0/22 maxlen: 24
116.206.168.0/22 maxlen: 24
141.255.184.0/21 maxlen: 24
185.2.152.0/22 maxlen: 24
185.16.84.0/22 maxlen: 24
185.52.156.0/22 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.207.0/24 maxlen: 24
185.103.48.0/22 maxlen: 24
185.103.48.0/23 maxlen: 24
185.103.51.0/24 maxlen: 24
188.95.224.0/21 maxlen: 24
188.212.108.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.240.92.0/22 maxlen: 24
188.240.222.0/23 maxlen: 24
188.241.198.0/23 maxlen: 24
188.241.198.0/24 maxlen: 24
2a00:16d8::/32 maxlen: 48
2a00:16d8:52::/48 maxlen: 48
2a03:b000::/32 maxlen: 32
2a03:b000:200::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:d7c0::/29 maxlen: 48
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:a6:df:f6:13:1b:38:38:56:7e:94:1b:bf:d5:a0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Nov 6 11:38:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba863db85e377b5d5568cf1808fcddeff9da5ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:08:72:ef:bc:07:93:8a:70:bb:9d:a6:a2:
0f:8e:20:aa:81:c5:05:7b:5f:d6:ad:31:23:7e:a0:
c2:f8:86:17:63:80:f4:bc:5b:78:f1:37:32:fe:5a:
cf:14:f2:3d:e0:5e:8d:9f:50:98:cc:38:44:33:7f:
e6:40:4c:17:23:6a:f3:8e:b0:8f:6c:f3:0e:f2:76:
b5:f1:e4:41:84:a6:85:3b:d9:52:3f:16:97:ee:d2:
ff:ea:e4:6e:63:f7:54:a3:f0:f8:c4:de:91:46:84:
3f:4b:ec:fa:3c:e2:92:61:63:fb:5e:08:84:a3:5e:
1b:60:1f:1c:a7:a6:36:cb:f7:15:c2:74:a0:48:b6:
19:a5:49:2f:65:dd:7e:c9:89:cd:74:cb:37:79:dd:
85:5e:88:53:c0:7a:73:02:69:ed:22:9c:fe:a5:03:
98:79:05:e6:db:66:73:4a:c2:24:a3:00:24:89:9c:
88:dc:ec:58:1f:83:09:41:42:ef:b8:59:41:34:1c:
9a:b0:8e:28:7b:4a:17:65:c0:fa:89:75:68:6e:df:
ef:f4:6c:42:71:cf:94:65:2d:09:2e:86:f5:ac:16:
72:27:a7:2d:3a:33:26:6d:51:a8:7c:11:b1:66:5c:
2a:55:01:81:ef:39:04:8f:f2:83:cc:a7:80:a5:46:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:86:3D:B8:5E:37:7B:5D:55:68:CF:18:08:FC:DD:EF:F9:DA:5A:E5
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/uoY9uF43e11VaM8YCPzd7_naWuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.56.0/22
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/21
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.140.0/22
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/22
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000::/32
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
29:1b:dd:81:35:12:a2:52:85:23:9a:48:23:74:af:8b:28:f5:
e6:8d:49:3b:ea:b2:d8:6b:a9:da:9d:d5:bc:4c:7a:04:85:e5:
f9:f1:6d:be:f4:49:75:af:ff:56:ea:2a:b2:06:5c:dd:4f:31:
61:8f:e3:2d:5b:d0:dd:ec:7c:f3:17:99:a0:54:7d:15:b2:77:
e8:c2:70:1c:be:d9:40:cd:3e:88:f4:fc:83:5e:2d:f0:2a:94:
42:42:4f:4a:e3:dd:9e:8a:3e:62:d9:a5:a7:48:3f:0b:7e:5e:
79:92:f0:1d:ac:00:e3:46:af:48:bb:76:e5:64:94:7a:34:42:
df:b6:cd:7d:76:1e:39:a6:61:eb:a0:84:42:e6:f7:02:4f:e9:
ca:20:cc:d8:c2:0b:e4:a8:d6:7e:0f:8d:cf:2e:da:0e:83:bc:
3e:d1:e0:73:63:9c:33:a9:32:d9:5c:a3:d2:dd:78:c9:fc:7c:
fb:09:c1:41:0e:f7:3b:b6:84:6f:39:76:e6:d1:39:a1:87:22:
31:ba:19:44:e3:34:eb:dc:06:39:58:25:cd:b4:0c:d3:e8:0b:
ed:80:15:2a:4e:cb:5c:81:8f:4c:0b:3a:b8:3e:a8:53:e1:47:
a8:c4:ee:97:8a:48:5b:15:8b:86:78:c6:db:0e:b9:37:6e:17:
29:10:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:45 2026 by rpki-client