Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/uzy5ON03IU9wd6PZFKTu3tg5QlQ.roa
File: uzy5ON03IU9wd6PZFKTu3tg5QlQ.roa (raw, json)
Hash identifier: nFl6ISPdsjq0amPdnAU/kaiJ9PY8FtmJRLYY7ckmz/E=
Subject key identifier: BB:3C:B9:38:DD:37:21:4F:70:77:A3:D9:14:A4:EE:DE:D8:39:42:54
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019DF9193569DD72D11E43ABC5758EA670F0
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/uzy5ON03IU9wd6PZFKTu3tg5QlQ.roa
Signing time: Tue 05 May 2026 17:04:32 +0000
ROA not before: Tue 05 May 2026 17:04:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48108
IP address blocks: 31.222.227.0/24 maxlen: 24
176.53.146.0/23 maxlen: 23
185.235.230.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
2a0a:2e80::/32 maxlen: 32
2a0a:2e81::/32 maxlen: 32
2a0a:2e81::/36 maxlen: 36
2a0a:2e82::/32 maxlen: 32
2a11:7e40::/48 maxlen: 48
2a11:7e40:1::/48 maxlen: 48
2a11:7e40:2::/48 maxlen: 48
2a11:7e40:3::/48 maxlen: 48
2a11:7e40:4::/48 maxlen: 48
2a11:7e46::/32 maxlen: 32
2a11:7e47:1000::/48 maxlen: 48
2a11:7e47:2000::/48 maxlen: 48
2a11:7e47:3000::/48 maxlen: 48
2a11:7e47:4000::/48 maxlen: 48
2a11:7e47:5000::/48 maxlen: 48
2a11:7e47:6000::/48 maxlen: 48
2a11:7e47:7000::/48 maxlen: 48
2a11:7e47:8000::/48 maxlen: 48
2a11:7e47:9000::/48 maxlen: 48
2a11:7e47:a000::/48 maxlen: 48
2a11:7e47:b000::/48 maxlen: 48
2a11:7e47:b002::/48 maxlen: 48
2a11:8480::/32 maxlen: 32
2a11:8481::/32 maxlen: 32
2a11:8482::/32 maxlen: 32
2a11:8485::/32 maxlen: 32
2a12:6702::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:19:35:69:dd:72:d1:1e:43:ab:c5:75:8e:a6:70:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: May 5 17:04:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb3cb938dd37214f7077a3d914a4eeded8394254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:9e:54:35:80:e2:60:9c:34:4c:fb:d6:73:
cb:d2:78:62:39:6d:22:6d:73:b6:c3:31:f0:49:dc:
48:95:18:17:23:b4:48:a6:b1:25:77:4c:d3:af:ee:
2d:9a:b6:f6:a6:83:da:1b:a0:96:d0:89:f4:ba:2f:
ef:35:05:09:1c:41:69:9f:2e:40:ea:be:e6:45:9f:
da:ba:d7:09:e5:6d:34:e5:a9:b3:8a:c1:98:3a:1c:
dd:ca:64:c6:8f:d4:97:b7:60:59:7f:3b:29:40:2c:
82:b0:93:cd:ae:88:a3:57:d2:3b:e3:7e:bc:7c:27:
a0:dd:06:b5:db:6e:cc:3c:94:63:dc:96:0f:e4:7f:
94:cb:33:ba:4a:ef:c0:49:0b:6a:a7:ee:d9:30:5c:
47:33:53:0d:b7:00:f5:95:f7:e0:35:4d:26:47:1a:
10:1b:55:b8:fc:32:da:ac:55:c9:75:b1:7c:2c:31:
e9:90:e5:0c:cd:b2:48:24:c5:56:3d:0d:ed:09:b4:
b1:df:95:ec:a2:41:55:06:d2:53:2f:3f:99:97:e1:
0c:e2:37:b4:c1:82:69:90:d9:79:14:b3:af:0f:70:
e3:b8:5d:79:8f:ec:7c:56:b6:d0:56:c0:c9:f0:a7:
fe:e0:15:2e:2a:ef:25:cf:bc:ba:9b:16:78:a8:8e:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3C:B9:38:DD:37:21:4F:70:77:A3:D9:14:A4:EE:DE:D8:39:42:54
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/uzy5ON03IU9wd6PZFKTu3tg5QlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
176.53.146.0/23
185.235.230.0/24
IPv6:
2001:678:e30::/48
2a0a:2e80::-2a0a:2e82:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e40::-2a11:7e40:4:ffff:ffff:ffff:ffff:ffff
2a11:7e46::/32
2a11:7e47:1000::/48
2a11:7e47:2000::/48
2a11:7e47:3000::/48
2a11:7e47:4000::/48
2a11:7e47:5000::/48
2a11:7e47:6000::/48
2a11:7e47:7000::/48
2a11:7e47:8000::/48
2a11:7e47:9000::/48
2a11:7e47:a000::/48
2a11:7e47:b000::/48
2a11:7e47:b002::/48
2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8485::/32
2a12:6702::/32
Signature Algorithm: sha256WithRSAEncryption
a5:51:7e:6a:b6:48:85:ec:35:e5:c3:a6:b8:1d:ca:32:fa:0c:
40:59:32:8c:c3:28:9c:52:e4:0d:40:1e:9e:c5:42:da:09:50:
52:f9:31:a5:e1:50:c4:20:de:39:a1:57:02:7b:ad:2d:44:61:
7c:6b:75:2e:e2:69:f0:dd:72:55:80:fc:2b:2d:88:c7:f0:40:
95:7a:96:7f:16:ef:0c:4c:e0:62:4c:a5:79:d6:46:1d:72:ad:
9c:f8:e5:fe:5b:bb:dc:70:22:55:f2:cc:4e:fa:2f:e2:8f:5b:
b6:56:7e:a0:95:79:4e:58:30:a0:e9:81:17:03:0b:a7:d1:2c:
c6:03:6d:46:e5:62:9c:8d:3d:73:ef:5f:01:96:ce:7a:af:e9:
79:fd:39:fd:98:f7:97:b3:04:27:ff:63:7a:8e:f9:fc:63:56:
97:b7:8b:be:8a:25:06:a9:33:45:f8:69:49:da:f5:63:b1:53:
20:f1:64:73:3d:7d:61:92:ba:28:0f:71:e9:38:6d:cb:d7:b4:
40:29:17:18:07:f0:68:ab:cd:c8:75:26:77:a9:10:12:e3:14:
57:ae:8f:51:a8:24:7f:be:63:23:20:c0:aa:93:52:1f:8e:33:
f1:31:ea:91:7f:1b:05:89:1d:96:49:93:65:38:92:bd:43:fc:
64:80:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:28 2026 by rpki-client