Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/uXECziQ3smuaIMYTw8iWVQeVWdU.roa
File: uXECziQ3smuaIMYTw8iWVQeVWdU.roa (raw, json)
Hash identifier: VsTdkO/Hk7J0b6seMmQHukb+tc1WEEkh6Ku5TuQbcGQ=
Subject key identifier: B9:71:02:CE:24:37:B2:6B:9A:20:C6:13:C3:C8:96:55:07:95:59:D5
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 019DAB44A2C363CE19B16ECE4D67E4DF7C94
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/uXECziQ3smuaIMYTw8iWVQeVWdU.roa
Signing time: Mon 20 Apr 2026 14:21:35 +0000
ROA not before: Mon 20 Apr 2026 14:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25441
IP address blocks: 62.231.32.0/19 maxlen: 19
78.135.128.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
83.141.64.0/18 maxlen: 18
85.134.128.0/17 maxlen: 17
85.134.128.0/21 maxlen: 21
85.134.136.0/21 maxlen: 21
85.134.144.0/21 maxlen: 21
85.134.152.0/21 maxlen: 21
85.134.160.0/21 maxlen: 21
85.134.168.0/21 maxlen: 21
85.134.176.0/21 maxlen: 21
85.134.184.0/21 maxlen: 21
85.134.192.0/21 maxlen: 21
85.134.200.0/21 maxlen: 21
85.134.208.0/21 maxlen: 21
85.134.216.0/21 maxlen: 21
85.134.224.0/21 maxlen: 21
85.134.232.0/21 maxlen: 21
85.134.240.0/21 maxlen: 21
85.134.248.0/21 maxlen: 21
87.192.0.0/18 maxlen: 18
87.192.64.0/20 maxlen: 20
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.232.0.0/19 maxlen: 19
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
89.124.0.0/24 maxlen: 24
89.124.224.0/20 maxlen: 20
89.124.245.0/24 maxlen: 24
89.127.0.0/17 maxlen: 17
89.127.128.0/18 maxlen: 18
89.127.248.0/22 maxlen: 22
89.127.254.0/23 maxlen: 23
185.247.52.0/22 maxlen: 22
2001:4d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:44:a2:c3:63:ce:19:b1:6e:ce:4d:67:e4:df:7c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Apr 20 14:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b97102ce2437b26b9a20c613c3c89655079559d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:35:76:87:fe:ad:25:6f:9a:4a:ed:0a:b3:
20:09:db:d4:e3:cd:ee:f2:e3:bc:9f:7f:e6:6c:ff:
60:05:e4:ef:53:d0:91:f2:c3:e8:42:d3:48:f5:e7:
f6:37:cc:f6:6c:7f:75:0e:f5:78:57:bb:f2:1f:eb:
83:44:a5:a7:29:6a:1b:b4:ef:18:c4:48:6e:85:df:
f8:0e:41:71:4b:a3:72:2d:70:3b:0d:08:a2:09:fe:
6c:17:f2:09:a5:47:64:c2:d0:17:66:39:28:ae:0d:
0c:bb:c2:99:af:01:89:df:25:73:7d:50:fb:db:73:
90:d6:c4:3e:ad:01:d1:e3:6f:88:29:81:ee:6d:96:
0c:cb:03:71:a7:1b:10:92:3b:ec:22:04:2b:fd:ef:
36:61:9c:c7:45:b8:d2:2e:17:d0:71:3e:2f:b8:57:
b7:e0:eb:5e:1a:50:b3:ae:59:61:75:ce:cd:a2:60:
21:5e:49:cf:33:5f:40:87:17:b1:8e:e9:3d:0a:fa:
14:06:4e:9f:7d:18:c8:5f:58:b9:27:4d:ea:85:e5:
b3:56:ee:b3:cf:52:9d:ec:c3:0e:82:a1:2e:be:96:
13:15:c4:8d:73:28:c9:fd:70:ae:f5:e3:a0:4c:e5:
45:1d:fa:02:3b:0f:44:73:77:99:53:f0:41:f0:b9:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:71:02:CE:24:37:B2:6B:9A:20:C6:13:C3:C8:96:55:07:95:59:D5
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/uXECziQ3smuaIMYTw8iWVQeVWdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.64.0/18
85.134.128.0/17
87.192.0.0-87.192.79.255
87.192.82.0-87.192.87.255
87.192.216.0/22
87.192.222.0/23
87.232.0.0/19
87.232.192.0/24
87.232.194.0-87.232.199.255
87.232.225.0/24
87.232.228.0/22
89.124.0.0/24
89.124.224.0/20
89.124.245.0/24
89.127.0.0-89.127.191.255
89.127.248.0/22
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
38:30:ec:34:92:02:4c:d0:23:be:5f:00:41:01:9c:ad:b6:85:
a7:4b:f2:52:96:34:5c:9d:43:68:c3:fc:cc:9f:7d:e2:45:39:
08:0d:bb:fe:35:9d:9d:34:fd:e9:3f:6a:1f:56:ab:da:7d:d6:
39:f0:78:fa:a5:6c:c0:1f:92:aa:ae:0b:59:b0:f2:1a:cf:c1:
60:1a:ca:3a:5b:4b:87:c1:29:74:c7:8e:08:b6:cd:ca:53:29:
3a:06:71:9d:3d:a8:63:e9:26:2d:dc:95:89:37:49:e3:41:0e:
51:15:cc:bd:61:03:2b:a4:65:3c:ee:23:99:41:2d:24:af:dd:
f1:0f:f3:12:31:7f:4b:02:7b:a4:2f:5d:d8:8a:5a:42:69:84:
97:e5:7f:a1:bf:18:b8:f8:38:e5:f4:a6:d9:b3:2e:7d:9b:28:
3f:b1:fc:b4:32:fa:5c:c3:a4:30:35:71:25:14:4a:7c:d4:7f:
b9:cd:ee:44:5d:49:85:11:d9:81:02:89:48:d5:65:74:de:ea:
f1:61:5e:e2:21:62:ef:9c:82:55:ff:23:fc:cb:91:84:73:94:
26:1a:48:e7:ad:3f:3e:13:86:06:87:92:c5:d3:cb:d0:39:ab:
d8:5e:81:e8:e1:3d:de:08:b7:10:66:80:b8:05:19:40:25:da:
4a:42:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:05 2026 by rpki-client