Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ukDEtFfuirXS5fh8Z-nVFwCyOrQ.roa
File: ukDEtFfuirXS5fh8Z-nVFwCyOrQ.roa (raw, json)
Hash identifier: kcHIAEqcBHsSAmbg6nOAZ2AEl0M3DLfpZ6uw8bi3wYo=
Subject key identifier: BA:40:C4:B4:57:EE:8A:B5:D2:E5:F8:7C:67:E9:D5:17:00:B2:3A:B4
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0D86DDF5513242437239C75F87DCEB813
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ukDEtFfuirXS5fh8Z-nVFwCyOrQ.roa
Signing time: Fri 25 Sep 2026 11:57:54 +0000
ROA not before: Fri 25 Sep 2026 11:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.40.0/21 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 24
89.38.64.0/22 maxlen: 24
89.38.76.0/22 maxlen: 24
89.39.76.0/22 maxlen: 24
89.39.84.0/22 maxlen: 24
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 24
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 24
89.42.72.0/21 maxlen: 24
89.42.104.0/22 maxlen: 24
89.42.128.0/22 maxlen: 24
89.42.180.0/22 maxlen: 24
89.42.224.0/22 maxlen: 24
89.43.128.0/22 maxlen: 24
89.43.168.0/22 maxlen: 24
89.44.152.0/22 maxlen: 24
89.45.40.0/22 maxlen: 24
89.46.164.0/22 maxlen: 24
92.114.128.0/17 maxlen: 24
93.113.80.0/21 maxlen: 24
93.113.92.0/22 maxlen: 24
93.113.244.0/22 maxlen: 24
93.115.136.0/21 maxlen: 24
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 24
93.117.72.0/21 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 24
93.117.156.0/22 maxlen: 24
93.117.160.0/21 maxlen: 24
93.117.168.0/22 maxlen: 24
93.119.96.0/21 maxlen: 24
93.119.128.0/21 maxlen: 24
93.119.160.0/21 maxlen: 24
93.119.200.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/19 maxlen: 24
185.28.104.0/22 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 24
188.212.24.0/21 maxlen: 24
188.212.40.0/21 maxlen: 24
188.214.144.0/22 maxlen: 24
188.214.200.0/21 maxlen: 24
188.215.252.0/22 maxlen: 24
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:6d:df:55:13:24:24:37:23:9c:75:f8:7d:ce:b8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 25 11:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba40c4b457ee8ab5d2e5f87c67e9d51700b23ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:d9:b5:10:4a:67:35:d0:ac:95:e4:b1:92:
0a:6e:97:c3:a6:55:03:59:3b:a3:0a:60:82:26:65:
cf:97:11:28:6e:3f:be:40:dd:f4:59:19:03:d6:19:
b0:ae:bb:3c:da:b4:24:25:b3:2a:d1:88:a7:9a:97:
eb:af:cc:fc:cd:1f:11:a4:08:a3:6f:a9:da:4f:00:
2c:0d:34:1b:ef:95:8b:fc:70:c6:0a:da:f5:ce:9a:
c1:24:e9:25:7e:db:30:25:6a:d6:f7:c8:31:b6:47:
9d:bb:69:ff:d8:2a:15:85:57:67:5c:e5:80:dd:3e:
00:f4:fe:14:eb:55:e9:a9:83:67:dd:e3:fd:94:75:
ae:24:82:dc:01:c6:fc:a2:38:7b:94:32:21:73:87:
2c:4c:49:53:1c:04:c4:3e:73:28:1e:22:04:df:e7:
92:20:da:9c:14:ea:02:28:8e:f1:d2:d3:b8:3a:a2:
8b:dd:b1:38:cb:d5:4c:a7:7c:46:cc:fe:df:1a:e8:
d7:61:66:fe:16:27:95:42:9e:4b:f6:ff:fb:21:bb:
2e:0e:69:36:85:97:12:85:fa:d4:4d:4e:32:32:3c:
8e:d5:a3:14:99:5a:1f:e2:e9:7c:5f:bd:b7:08:21:
24:75:b2:89:78:73:95:e8:40:dc:1a:f1:ee:f4:40:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:40:C4:B4:57:EE:8A:B5:D2:E5:F8:7C:67:E9:D5:17:00:B2:3A:B4
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ukDEtFfuirXS5fh8Z-nVFwCyOrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0/17
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.160.0/21
93.119.200.0/21
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.159.255
185.28.104.0/22
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.144.0/22
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
26:1b:66:a4:d4:20:e8:d5:b6:b6:36:83:c7:8e:80:39:5a:19:
af:fc:0a:cd:d5:3e:8b:e6:0e:cd:bc:c6:18:74:09:cf:4f:3b:
7a:82:99:ae:56:66:92:74:1d:2a:4e:ef:b9:97:48:ec:23:56:
c4:a0:ac:bf:27:af:c5:d9:d7:24:7f:c1:09:48:d3:05:13:79:
cc:af:01:66:c3:78:74:7b:48:84:91:01:48:59:d6:df:6f:6b:
48:13:80:97:cf:31:73:bf:18:5f:f6:db:d1:bb:10:02:28:3c:
c4:41:09:aa:9e:a4:fc:57:b3:75:e8:e7:98:16:dd:b8:98:07:
be:af:c6:e9:46:6a:71:d1:56:60:a6:19:7c:bd:e8:6e:f9:d4:
68:5e:b4:09:25:51:27:be:2d:07:ad:c1:7a:da:77:a2:bc:f1:
02:e2:91:df:20:2e:e5:52:24:44:52:dc:d4:ee:1c:0c:31:6b:
48:e2:bc:5b:e5:aa:f1:00:7b:ff:0d:5b:90:28:87:74:0f:18:
3f:6f:a0:19:cb:f5:11:4f:f6:0a:c1:57:30:cc:3d:12:98:55:
d9:24:bf:e2:ac:06:70:7d:44:dc:9a:f5:d3:40:48:59:db:75:
0c:a8:1b:dc:c8:50:50:75:b3:50:26:f6:9a:e9:24:2e:e5:3f:
4d:a0:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:23:51 2026 by rpki-client