Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/UTooJzPNBNgr_W5Lcxca0dC7D-I.roa
File: UTooJzPNBNgr_W5Lcxca0dC7D-I.roa (raw, json)
Hash identifier: mUhkN0o9zEmpQ/72qgn1iXBTOF9eYGfXJ6iRHv/Xfdw=
Subject key identifier: 51:3A:28:27:33:CD:04:D8:2B:FD:6E:4B:73:17:1A:D1:D0:BB:0F:E2
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A18D2242A5F25651CAF0BD249CE4405E9C
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/UTooJzPNBNgr_W5Lcxca0dC7D-I.roa
Signing time: Fri 30 Oct 2026 14:06:35 +0000
ROA not before: Fri 30 Oct 2026 14:06:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 85.204.178.0/24 maxlen: 24
85.204.183.0/24 maxlen: 24
86.105.173.0/24 maxlen: 24
86.107.161.0/24 maxlen: 24
89.35.8.0/24 maxlen: 24
93.117.132.0/24 maxlen: 24
93.119.140.0/24 maxlen: 24
93.119.141.0/24 maxlen: 24
93.119.142.0/24 maxlen: 24
93.119.206.0/24 maxlen: 24
93.119.229.0/24 maxlen: 24
93.119.233.0/24 maxlen: 24
93.119.239.0/24 maxlen: 24
188.208.104.0/24 maxlen: 24
188.208.207.0/24 maxlen: 24
188.210.244.0/24 maxlen: 24
188.210.245.0/24 maxlen: 24
188.212.8.0/24 maxlen: 24
188.213.246.0/24 maxlen: 24
188.214.137.0/24 maxlen: 24
188.214.228.0/24 maxlen: 24
188.214.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:22:42:a5:f2:56:51:ca:f0:bd:24:9c:e4:40:5e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 30 14:06:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=513a282733cd04d82bfd6e4b73171ad1d0bb0fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:52:a0:c1:8f:23:d9:39:cb:ff:43:12:10:
19:f4:8e:9b:a1:4a:4f:02:28:d6:6a:43:1b:0d:42:
41:5e:bf:35:aa:27:51:91:7f:0d:bb:08:3b:f9:4d:
ef:82:bb:9d:89:83:9c:e9:74:f9:da:a0:a5:ed:30:
ff:a2:cf:e5:c4:91:cd:a4:ef:e5:21:4e:c3:de:a1:
1d:55:2f:c7:4c:dd:71:a9:61:c2:7e:3e:c6:d7:26:
6c:da:59:2d:e6:a3:91:33:5e:42:76:a9:a2:61:a8:
12:5b:59:b9:44:a4:60:2d:6a:d3:29:ff:72:11:c1:
8d:99:56:52:a6:4a:56:ad:ac:7f:22:e9:5f:f9:7e:
9c:35:f5:b7:b0:bf:2a:2c:3f:10:cd:92:85:35:4d:
64:14:b7:db:d3:a7:00:83:f0:cf:4b:9a:e9:ad:8e:
82:14:c7:4b:12:fe:f6:87:17:44:a5:d1:6d:63:4d:
01:47:af:2f:d6:78:74:8a:f0:28:d9:ce:2e:e6:61:
10:81:a4:26:b3:08:25:4b:03:5e:8d:87:51:2d:a1:
8a:13:45:1e:ee:18:bf:7a:38:52:98:88:4c:f3:5f:
99:de:0a:f2:9b:0e:03:27:33:27:5a:64:86:dd:61:
dc:85:ac:78:a2:2f:5a:d8:80:11:d5:e7:50:91:b9:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3A:28:27:33:CD:04:D8:2B:FD:6E:4B:73:17:1A:D1:D0:BB:0F:E2
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/UTooJzPNBNgr_W5Lcxca0dC7D-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.178.0/24
85.204.183.0/24
86.105.173.0/24
86.107.161.0/24
89.35.8.0/24
93.117.132.0/24
93.119.140.0-93.119.142.255
93.119.206.0/24
93.119.229.0/24
93.119.233.0/24
93.119.239.0/24
188.208.104.0/24
188.208.207.0/24
188.210.244.0/23
188.212.8.0/24
188.213.246.0/24
188.214.137.0/24
188.214.228.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:59:2a:f6:da:ae:8a:b5:b6:91:bd:4d:4b:b0:86:35:c1:08:
45:e3:71:db:33:8e:19:48:88:0d:d4:4b:24:84:4c:5f:f4:d1:
32:d3:ee:8d:66:89:4d:28:1e:7b:ab:25:ef:3e:3b:fd:55:2d:
21:37:92:71:24:70:52:8c:e1:9a:5a:6c:30:37:09:ca:e6:3a:
7b:f7:ec:b4:90:58:d8:cc:cc:ea:01:19:42:bb:a4:d0:45:b6:
63:48:55:d6:66:9e:ee:9e:3a:1e:75:59:56:7c:ab:bf:a3:4e:
db:dc:23:18:7b:2d:05:f5:d3:e3:f9:94:d8:dd:20:1f:8f:8a:
25:37:aa:f4:a8:d8:fb:b1:be:d9:78:5f:0a:c7:0c:8f:44:4f:
09:07:08:7b:73:9b:ab:dd:fb:6c:be:ec:49:22:3a:14:e6:c7:
e4:6a:04:06:5c:29:39:60:f5:0d:7a:c5:e3:eb:d8:fa:38:6e:
b7:0a:64:9a:e6:74:6f:22:16:94:48:b0:0a:15:ed:e2:9d:48:
f3:a0:a3:1b:c1:0f:18:66:7e:28:b6:90:4c:77:36:08:e9:21:
fc:54:fa:3f:3a:5b:90:1c:ec:b0:20:68:f4:b1:79:3e:6d:cc:
cc:24:83:f0:11:38:d2:47:70:7c:26:d3:63:57:6f:22:96:48:
bb:9e:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:16 2026 by rpki-client