Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Ukp7cmdvPkEzNJphlYGregM89Lk.roa
File: Ukp7cmdvPkEzNJphlYGregM89Lk.roa (raw, json)
Hash identifier: i/553d2qnprRZJF1uWLSLfvvW3PBjVt5T9cb7fhLihg=
Subject key identifier: 52:4A:7B:72:67:6F:3E:41:33:34:9A:61:95:81:AB:7A:03:3C:F4:B9
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 019F7063AD73370267DF6BD4E731F1BDA3FD
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Ukp7cmdvPkEzNJphlYGregM89Lk.roa
Signing time: Fri 17 Jul 2026 14:03:28 +0000
ROA not before: Fri 17 Jul 2026 14:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.32.0/24 maxlen: 24
31.210.33.0/24 maxlen: 24
31.210.56.0/24 maxlen: 24
31.210.57.0/24 maxlen: 24
77.92.128.0/24 maxlen: 24
77.92.129.0/24 maxlen: 24
77.92.132.0/24 maxlen: 24
77.92.133.0/24 maxlen: 32
77.92.134.0/24 maxlen: 24
77.92.135.0/24 maxlen: 24
77.92.136.0/24 maxlen: 24
77.92.137.0/24 maxlen: 24
77.92.138.0/24 maxlen: 24
77.92.139.0/24 maxlen: 24
77.92.140.0/24 maxlen: 32
77.92.141.0/24 maxlen: 24
77.92.149.0/24 maxlen: 24
77.92.155.0/24 maxlen: 32
77.92.156.0/24 maxlen: 24
77.92.157.0/24 maxlen: 32
77.92.158.0/24 maxlen: 24
77.92.159.0/24 maxlen: 24
78.135.79.0/24 maxlen: 24
78.135.108.0/24 maxlen: 32
78.135.113.0/24 maxlen: 32
78.135.114.0/24 maxlen: 32
78.135.116.0/24 maxlen: 24
188.132.134.0/24 maxlen: 24
188.132.135.0/24 maxlen: 32
188.132.142.0/24 maxlen: 24
188.132.147.0/24 maxlen: 32
188.132.148.0/24 maxlen: 24
188.132.157.0/24 maxlen: 24
188.132.158.0/24 maxlen: 32
188.132.172.0/24 maxlen: 24
188.132.175.0/24 maxlen: 24
188.132.176.0/24 maxlen: 32
188.132.180.0/24 maxlen: 24
188.132.194.0/24 maxlen: 24
188.132.195.0/24 maxlen: 24
188.132.204.0/24 maxlen: 32
188.132.205.0/24 maxlen: 32
188.132.244.0/24 maxlen: 32
188.132.245.0/24 maxlen: 24
188.132.246.0/24 maxlen: 24
188.132.252.0/24 maxlen: 24
188.132.253.0/24 maxlen: 24
188.132.254.0/24 maxlen: 24
188.132.255.0/24 maxlen: 24
212.68.32.0/24 maxlen: 24
212.68.33.0/24 maxlen: 32
212.68.40.0/24 maxlen: 32
212.68.41.0/24 maxlen: 32
212.68.42.0/24 maxlen: 32
212.68.43.0/24 maxlen: 32
212.68.44.0/24 maxlen: 24
212.68.45.0/24 maxlen: 32
212.68.46.0/24 maxlen: 32
212.68.50.0/24 maxlen: 32
212.68.51.0/24 maxlen: 24
212.68.57.0/24 maxlen: 32
212.68.61.0/24 maxlen: 32
2a02:26b0::/32 maxlen: 32
2a02:26b0:8000::/48 maxlen: 48
2a02:26b0:8001::/48 maxlen: 48
2a02:26b0:800e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:63:ad:73:37:02:67:df:6b:d4:e7:31:f1:bd:a3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jul 17 14:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=524a7b72676f3e4133349a619581ab7a033cf4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:ea:25:b6:5d:1c:6e:19:07:e5:2e:f9:fc:
61:fc:56:4a:da:0e:d3:b8:4a:a5:76:d5:59:89:d7:
56:2a:f3:d1:60:0b:a7:fb:2b:e4:5f:04:75:50:8b:
cf:ac:2e:4a:52:34:c7:74:8a:b1:e3:51:4b:f4:9f:
a4:d5:48:de:76:de:b7:77:19:b0:72:c1:69:44:4a:
8a:cc:64:af:56:f2:25:36:a5:2f:d1:ff:b9:32:b0:
67:43:ba:a9:bf:db:06:6c:f1:eb:c5:1d:fc:75:88:
95:c4:b4:96:a8:94:41:8c:68:cf:7a:2d:5c:bd:eb:
b3:01:0c:55:35:12:28:f2:e1:d2:45:66:d9:a9:93:
61:70:67:5f:99:1c:8c:4f:35:31:72:b4:a3:dc:b5:
64:c5:37:e5:7e:c0:d7:4c:3f:5b:c1:94:47:cb:d7:
66:22:99:51:05:14:28:42:62:56:8e:42:82:8e:a0:
97:e1:d9:33:1d:b1:14:3f:b6:ae:65:38:b3:28:2f:
c6:ab:35:53:ac:6d:c7:3f:33:e7:5c:ec:dc:d6:d1:
f7:cb:e9:ff:09:1a:55:16:90:4c:5c:54:2c:4a:ce:
30:fc:69:0d:70:38:d1:48:67:18:14:0a:f2:41:2b:
fe:54:94:fa:39:11:eb:54:22:ac:8d:5d:98:89:32:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4A:7B:72:67:6F:3E:41:33:34:9A:61:95:81:AB:7A:03:3C:F4:B9
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Ukp7cmdvPkEzNJphlYGregM89Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.32.0/23
31.210.56.0/23
77.92.128.0/23
77.92.132.0-77.92.141.255
77.92.149.0/24
77.92.155.0-77.92.159.255
78.135.79.0/24
78.135.108.0/24
78.135.113.0-78.135.114.255
78.135.116.0/24
188.132.134.0/23
188.132.142.0/24
188.132.147.0-188.132.148.255
188.132.157.0-188.132.158.255
188.132.172.0/24
188.132.175.0-188.132.176.255
188.132.180.0/24
188.132.194.0/23
188.132.204.0/23
188.132.244.0-188.132.246.255
188.132.252.0/22
212.68.32.0/23
212.68.40.0-212.68.46.255
212.68.50.0/23
212.68.57.0/24
212.68.61.0/24
IPv6:
2a02:26b0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:71:2f:55:99:54:fa:9e:87:49:9b:eb:da:61:a3:b5:4a:17:
e5:60:9f:aa:71:4c:45:8f:c9:28:ee:67:2e:a3:34:95:e9:9e:
06:45:70:5b:b1:0f:80:9e:a4:1f:b5:9d:30:65:1b:b3:3d:ce:
1e:1c:43:30:72:e5:d5:96:f5:b2:a9:15:e5:9b:0c:1e:d3:56:
e8:8f:af:34:33:6b:81:8e:f1:8a:d9:ef:d2:f3:d6:21:aa:58:
68:c3:b9:d3:fa:3e:18:8e:a5:fd:61:48:f4:0a:12:6a:27:b7:
58:bb:57:3a:8f:c7:c6:55:90:e5:f6:91:2f:3a:5e:76:d0:35:
eb:f5:35:65:c6:79:c9:1f:bb:88:c7:01:cb:f2:9c:c6:1c:5b:
4f:4f:7d:fd:4d:13:0f:89:87:88:1b:ea:bc:c6:31:c4:3b:4a:
c6:e3:02:70:ed:85:ea:7a:4c:81:87:ad:1e:1f:43:0f:af:1a:
30:e5:32:6c:41:25:ab:65:be:1f:64:2f:2c:82:9b:d2:ae:b5:
4c:9d:a2:dd:0c:fa:b0:ec:de:20:e2:19:2e:59:ec:09:65:85:
7c:bc:e1:08:ea:87:af:e0:5a:d4:ce:33:3d:e4:d9:d7:7c:b5:
3a:8c:e5:9a:af:b4:a6:fd:0d:2f:50:fa:ab:1e:35:a5:d7:2d:
a8:41:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:26 2026 by rpki-client