Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/U2WmGIAgb9PeMpaAzUpEAyKLnI8.roa
File: U2WmGIAgb9PeMpaAzUpEAyKLnI8.roa (raw, json)
Hash identifier: q+0mBMo+BD/IvFMfdLj9/wTg662iL0Cl73T9GT+eNQQ=
Subject key identifier: 53:65:A6:18:80:20:6F:D3:DE:32:96:80:CD:4A:44:03:22:8B:9C:8F
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 019EDF6DFEBA1A88764F6CF1D97A820D8AE6
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/U2WmGIAgb9PeMpaAzUpEAyKLnI8.roa
Signing time: Fri 19 Jun 2026 10:29:48 +0000
ROA not before: Fri 19 Jun 2026 10:29:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8903
IP address blocks: 77.72.104.0/21 maxlen: 24
84.18.0.0/19 maxlen: 24
92.60.160.0/20 maxlen: 24
92.60.173.0/24 maxlen: 24
176.98.220.0/22 maxlen: 24
185.66.60.0/22 maxlen: 24
185.145.224.0/22 maxlen: 24
185.155.64.0/22 maxlen: 24
185.173.44.0/22 maxlen: 24
185.187.180.0/22 maxlen: 24
185.224.76.0/22 maxlen: 24
193.34.240.0/22 maxlen: 24
195.5.64.0/19 maxlen: 24
212.49.128.0/18 maxlen: 24
212.49.189.0/24 maxlen: 24
212.59.192.0/19 maxlen: 19
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 23
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 24
212.163.0.0/16 maxlen: 24
213.9.128.0/17 maxlen: 24
213.9.142.0/23 maxlen: 23
213.192.192.0/18 maxlen: 24
213.192.193.0/24 maxlen: 24
213.192.195.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.203.0/24 maxlen: 24
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.238.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.241.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.246.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.248.0/21 maxlen: 21
213.192.249.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.253.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
2001:ac0::/29 maxlen: 29
2001:ac0::/32 maxlen: 48
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
2a0d:59c0::/29 maxlen: 48
2a0d:59c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:6d:fe:ba:1a:88:76:4f:6c:f1:d9:7a:82:0d:8a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jun 19 10:29:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5365a61880206fd3de329680cd4a4403228b9c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5c:3c:3c:45:5b:6b:0f:23:b1:05:4e:2e:ca:
34:39:8c:de:1f:e7:2f:5c:d4:0c:8c:e7:40:d3:de:
bf:eb:4b:1f:a7:ef:ec:5c:d3:cc:c4:84:9e:c6:fd:
63:b7:3c:47:8c:cb:98:b7:52:9e:04:6f:3a:89:40:
7e:e8:4a:1d:cf:a9:e7:3d:c5:24:18:af:38:c8:3b:
e3:e6:10:d4:a9:aa:e2:59:98:6f:b8:ef:23:b2:09:
da:54:78:e4:4b:6b:2c:c8:b4:1a:4a:bd:b7:43:bb:
5a:c1:8e:4b:b5:d0:d4:c3:33:2d:ff:51:28:83:96:
06:1b:98:e7:1b:8a:91:bf:01:e6:8b:40:47:0a:68:
63:e0:27:ee:b4:c7:7c:1d:64:e4:90:27:f5:86:be:
22:10:78:0d:88:29:a8:ab:59:64:d1:eb:89:96:fe:
d5:ba:51:ee:3d:d0:c8:f4:06:a5:cd:16:21:c6:23:
d0:bd:43:f9:8e:ed:2a:f4:32:b1:ee:fe:0f:a4:50:
3f:14:fb:cc:12:3e:c7:99:09:36:b3:3d:e8:25:0b:
07:8a:4b:a2:d9:3e:28:b8:81:be:d9:4b:a8:44:24:
20:9b:76:83:94:19:47:15:ea:be:3d:71:fc:63:cf:
b7:79:70:b0:70:fe:02:1d:e9:e6:38:16:a1:ff:df:
c9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:A6:18:80:20:6F:D3:DE:32:96:80:CD:4A:44:03:22:8B:9C:8F
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/U2WmGIAgb9PeMpaAzUpEAyKLnI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.104.0/21
84.18.0.0/19
92.60.160.0/20
176.98.220.0/22
185.66.60.0/22
185.145.224.0/22
185.155.64.0/22
185.173.44.0/22
185.187.180.0/22
185.224.76.0/22
193.34.240.0/22
195.5.64.0/19
212.49.128.0/18
212.59.192.0/19
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
2a0d:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:d2:91:9e:ca:55:b2:26:8c:6b:98:68:2c:c8:a0:8a:98:de:
12:2e:9c:66:02:1e:f4:68:41:fa:b6:b8:91:3b:c9:5e:f5:69:
c5:ad:ae:d8:0d:95:cd:c2:ca:56:87:94:60:d6:44:b4:28:33:
e7:2a:10:14:d0:36:ae:14:54:fe:b5:94:57:c5:23:4e:5e:fa:
b5:c9:87:e8:73:eb:3a:bf:4b:df:10:21:06:9b:07:cb:d8:56:
81:cd:97:01:3a:a6:22:59:41:cd:a9:c6:f2:1e:a1:13:eb:d5:
e5:50:8a:38:f1:d1:f2:16:ec:63:d8:8a:3e:1d:d9:12:a5:56:
d5:39:b8:ea:8f:ba:e2:9b:cb:eb:27:c6:5e:04:4c:a4:5e:48:
8f:fd:df:07:55:34:4d:14:a5:89:fa:76:8b:8b:df:f0:64:aa:
33:a1:44:46:e1:7c:07:ce:5d:72:84:85:48:a4:8b:a3:ae:66:
92:0a:94:a8:1d:18:6a:b2:96:3d:02:b8:11:3d:bd:1e:9a:b1:
73:fe:77:68:d2:c6:e4:b8:cc:45:3f:57:9b:89:1a:22:9b:6e:
00:a5:fe:1c:7c:39:e8:e3:a5:e8:41:e7:a0:d0:fc:c9:2b:96:
0a:00:ee:72:87:a1:2c:18:9d:4f:48:50:3b:38:ed:56:0d:ef:
93:7a:0c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:44 2026 by rpki-client