Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/2UUE-Rf-2WGceuB-WkLEF7WoUTg.roa
File: 2UUE-Rf-2WGceuB-WkLEF7WoUTg.roa (raw, json)
Hash identifier: 4bgTyI2sRmPi6hIWWdFcnzZt2fLQPiRH1Jt4gV4iEG0=
Subject key identifier: D9:45:04:F9:17:FE:D9:61:9C:7A:E0:7E:5A:42:C4:17:B5:A8:51:38
Certificate issuer: /CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Certificate serial: 019F2368878FFCCC7187661E0D9B1B76B73B
Authority key identifier: 0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/2UUE-Rf-2WGceuB-WkLEF7WoUTg.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48781
IP address blocks: 91.107.0.0/18 maxlen: 19
95.128.240.0/21 maxlen: 23
185.33.244.0/24 maxlen: 24
185.33.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:8f:fc:cc:71:87:66:1e:0d:9b:1b:76:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d94504f917fed9619c7ae07e5a42c417b5a85138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:9d:73:03:6d:73:5b:5b:9d:31:11:da:79:
b9:91:fd:9d:56:8d:98:73:43:f3:18:f7:11:ac:93:
60:da:ac:e3:0d:39:15:0b:52:70:69:3e:43:dc:0d:
84:82:31:8e:03:1c:8f:e9:8f:0e:db:9e:97:15:f0:
0d:2e:66:9f:c5:8c:40:7b:9f:c8:34:43:32:9c:15:
d9:ae:3e:29:d1:8d:8a:6a:4a:45:96:86:0c:e9:5d:
15:a2:b7:48:fe:9b:f4:73:3e:6c:d4:21:78:d0:70:
e8:7d:e0:cb:20:f4:cc:28:52:50:ae:d0:4c:d3:07:
16:84:9b:cc:f2:9b:f2:e7:29:29:59:62:97:a0:ca:
43:53:91:10:8a:5e:1a:15:6e:b2:a9:65:b6:6a:1f:
4e:a8:9f:33:f1:64:8f:18:45:73:70:b3:8b:04:2b:
9d:66:cc:94:1c:27:09:c4:51:00:4d:8f:f4:d9:01:
94:65:79:3d:26:a3:8a:d8:a5:a1:52:c6:e0:5e:6f:
f8:7f:63:df:59:1a:c2:7d:d5:a5:27:c0:9a:18:d7:
3c:b2:03:b4:88:80:a5:a5:3b:84:aa:f9:ec:bf:a0:
93:79:12:0f:05:c5:ee:b6:12:28:9f:3d:0c:b6:18:
75:ee:c7:29:3d:5e:74:c2:f8:b8:e7:33:6d:ff:49:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:04:F9:17:FE:D9:61:9C:7A:E0:7E:5A:42:C4:17:B5:A8:51:38
X509v3 Authority Key Identifier:
keyid:0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/2UUE-Rf-2WGceuB-WkLEF7WoUTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.0.0/18
95.128.240.0/21
185.33.244.0/24
185.33.246.0/24
Signature Algorithm: sha256WithRSAEncryption
28:88:a7:b0:8e:8e:48:d4:e6:39:e2:d9:9c:9d:25:af:7c:a3:
99:78:0d:6d:d0:08:03:fb:d6:4d:c7:cc:b5:77:2e:85:70:e1:
58:e4:05:6f:10:2d:5d:55:b0:f3:93:cd:b6:7a:bc:1b:20:c1:
9b:4d:db:2c:ce:6a:44:f3:c1:22:1c:ee:8e:6a:a1:ab:1e:b7:
36:b9:3d:ab:5a:ab:4f:13:26:bb:38:f7:af:be:4a:8a:47:79:
67:9b:af:36:84:c1:7b:7b:17:54:be:65:82:32:75:0f:93:73:
d7:43:e3:91:b8:9c:2f:3a:7e:88:4b:eb:f6:87:ae:58:97:07:
40:3f:5d:65:51:90:57:e7:16:cb:45:45:27:47:13:86:75:5b:
c4:b4:e9:8a:5a:72:15:00:49:9c:4c:94:d3:a1:8a:e6:8e:9a:
c6:4b:03:41:0a:c9:25:88:c9:fe:cf:59:ac:b9:25:e8:6a:4c:
27:73:5f:15:7d:1d:20:53:e8:e7:5c:b3:72:3d:8f:ea:04:99:
a9:67:47:e1:46:df:00:e3:49:cf:a6:de:f1:e2:05:c5:9d:8a:
c6:f6:bf:d2:96:15:c8:b7:0e:10:c3:86:31:2c:c5:df:9e:04:
c0:fb:41:79:81:4a:93:33:74:81:a5:85:5c:ba:08:46:39:c0:
c3:5e:c6:77
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8jaIeP/Mxxh2YeDZsbdrc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYTdjN2Q4NjE3MjY3NWY3OGU5NTU0YWQ2NzM1NGNlYmYx
OGQyOTAwHhcNMjYwNzAyMTUxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTQ1MDRmOTE3ZmVkOTYxOWM3YWUwN2U1YTQyYzQxN2I1YTg1MTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoadcwNtc1tbnTER2nm5kf2dVo2Y
c0PzGPcRrJNg2qzjDTkVC1JwaT5D3A2EgjGOAxyP6Y8O256XFfANLmafxYxAe5/I
NEMynBXZrj4p0Y2KakpFloYM6V0VordI/pv0cz5s1CF40HDofeDLIPTMKFJQrtBM
0wcWhJvM8pvy5ykpWWKXoMpDU5EQil4aFW6yqWW2ah9OqJ8z8WSPGEVzcLOLBCud
ZsyUHCcJxFEATY/02QGUZXk9JqOK2KWhUsbgXm/4f2PfWRrCfdWlJ8CaGNc8sgO0
iIClpTuEqvnsv6CTeRIPBcXuthIonz0Mthh17scpPV50wvi45zNt/0kdHQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNlFBPkX/tlhnHrgflpCxBe1qFE4MB8GA1UdIwQY
MBaAFA+nx9hhcmdfeOlVStZzVM6/GNKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDZmSDJHRnlaMTk0NlZWSzFuTlV6cjhZMHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEt
N2Y5NmM5ZjA1ZjU0LzEvMlVVRS1SZi0yV0djZXVCLVdrTEVGN1dvVVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEtN2Y5NmM5ZjA1ZjU0
LzEvRDZmSDJHRnlaMTk0NlZWSzFuTlV6cjhZMHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGW2sAAwQD
X4DwAwQAuSH0AwQAuSH2MA0GCSqGSIb3DQEBCwUAA4IBAQAoiKewjo5I1OY54tmc
nSWvfKOZeA1t0AgD+9ZNx8y1dy6FcOFY5AVvEC1dVbDzk822erwbIMGbTdsszmpE
88EiHO6OaqGrHrc2uT2rWqtPEya7OPevvkqKR3lnm682hMF7exdUvmWCMnUPk3PX
Q+ORuJwvOn6IS+v2h65YlwdAP11lUZBX5xbLRUUnRxOGdVvEtOmKWnIVAEmcTJTT
oYrmjprGSwNBCskliMn+z1msuSXoakwnc18VfR0gU+jnXLNyPY/qBJmpZ0fhRt8A
40nPpt7x4gXFnYrG9r/SlhXItw4Qw4YxLMXfngTA+0F5gUqTM3SBpYVcughGOcDD
XsZ3
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:31 2026 by rpki-client