Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UNlitapxe8rzUq0mE2QmmGpbLDg.roa
File: UNlitapxe8rzUq0mE2QmmGpbLDg.roa (raw, json)
Hash identifier: 6ILyrKu8RShd9fj72r37JyuBReQneQ+wNWpCzRk5E1Q=
Subject key identifier: 50:D9:62:B5:AA:71:7B:CA:F3:52:AD:26:13:64:26:98:6A:5B:2C:38
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 019F22E72FCB886E1BCD2A977A6DF1790056
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UNlitapxe8rzUq0mE2QmmGpbLDg.roa
Signing time: Thu 02 Jul 2026 12:56:44 +0000
ROA not before: Thu 02 Jul 2026 12:56:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43205
IP address blocks: 46.40.64.0/18 maxlen: 18
46.40.75.0/24 maxlen: 24
46.47.64.0/18 maxlen: 24
46.237.64.0/18 maxlen: 18
91.139.128.0/17 maxlen: 17
91.139.248.0/24 maxlen: 24
109.121.192.0/18 maxlen: 18
178.169.128.0/17 maxlen: 17
185.4.80.0/22 maxlen: 24
188.254.128.0/17 maxlen: 17
2a02:6800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:e7:2f:cb:88:6e:1b:cd:2a:97:7a:6d:f1:79:00:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jul 2 12:56:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50d962b5aa717bcaf352ad26136426986a5b2c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:07:9f:af:e5:f5:f2:b9:89:9a:a7:21:ee:
67:e1:7b:3b:83:b3:7c:21:e1:df:53:8d:39:69:83:
11:30:7e:50:24:9e:ce:14:28:a3:1c:35:a2:47:c5:
a3:a1:0d:cc:ad:da:70:60:d6:44:8b:88:da:be:81:
40:08:e4:88:4a:4e:91:b4:14:22:48:3a:dd:5b:66:
61:b4:2f:8c:ac:45:e2:09:60:0e:83:21:1c:03:7b:
36:3d:5d:16:5d:53:f1:4c:26:e3:64:f5:9c:8b:00:
47:b9:d2:a3:49:df:3b:fc:11:26:08:cb:7d:f8:e9:
60:80:48:a6:4e:dc:52:28:65:18:1c:00:d7:6f:2a:
b9:57:1b:ba:97:59:8c:aa:c7:86:70:7e:22:9f:de:
1c:2d:07:dd:d2:7b:a8:3f:f7:53:5b:b6:50:6b:88:
21:53:64:23:7f:fb:25:4d:11:21:b2:61:ac:e3:22:
ef:9a:52:c3:8e:c2:3c:d0:24:88:1b:ed:a7:0e:72:
15:62:54:2b:40:c3:62:b9:8a:2d:05:51:ea:9c:3a:
80:ed:68:77:cf:1e:9a:b9:23:76:2a:65:b9:99:2a:
af:1f:c8:b6:e8:de:40:cc:38:a4:8a:03:8a:0d:a3:
a9:3f:35:19:a1:9d:7e:2a:7c:2e:de:ab:d5:0e:f9:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:62:B5:AA:71:7B:CA:F3:52:AD:26:13:64:26:98:6A:5B:2C:38
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UNlitapxe8rzUq0mE2QmmGpbLDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.40.64.0/18
46.47.64.0/18
46.237.64.0/18
91.139.128.0/17
109.121.192.0/18
178.169.128.0/17
185.4.80.0/22
188.254.128.0/17
IPv6:
2a02:6800::/32
Signature Algorithm: sha256WithRSAEncryption
50:c1:c6:b7:d5:31:65:f9:de:4b:33:31:85:fa:37:9c:11:f8:
45:42:1d:75:17:f4:01:d2:96:54:3d:2b:45:60:7d:df:ab:7f:
29:51:2c:13:d8:a1:02:e4:e1:5f:6a:3b:4e:4c:22:c1:5e:15:
97:6a:16:96:54:f9:50:f3:9b:3c:7e:fc:e8:a7:71:05:c0:a0:
26:40:50:b4:c1:48:23:ec:d7:9f:e3:dd:e9:09:d6:6a:a2:f4:
38:af:30:9f:b0:cd:58:93:d6:ea:e0:1f:f5:3e:f4:ff:77:a9:
fb:e5:c5:77:19:ad:00:02:e5:5d:84:c0:cb:99:97:4b:09:9f:
7f:21:1f:8b:7e:72:83:37:40:d7:b1:4e:39:9e:c6:77:d1:96:
7b:df:b9:80:b9:09:9f:cb:ef:f4:db:a8:95:71:3a:5d:fd:51:
3a:41:c9:34:34:8b:5b:6e:02:cd:e8:2d:0c:86:cc:0d:aa:0c:
9d:ae:30:f5:40:65:c0:74:ff:0c:cb:8a:81:5a:7a:42:4b:4b:
23:1c:70:82:5f:7d:24:59:a1:58:b9:b4:13:f5:1d:a6:39:df:
c9:a9:33:96:92:18:82:f4:b3:17:21:db:86:f7:0a:13:67:2a:
fe:c0:ae:74:b2:f6:db:8b:87:6f:15:fb:d8:40:f6:30:c4:20:
b3:8f:f3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:58 2026 by rpki-client