Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/ujd_58sugEeAoF5jMpUipoqtW4s.roa
File: ujd_58sugEeAoF5jMpUipoqtW4s.roa (raw, json)
Hash identifier: EUJlvM7IyZpw1wssBYGFhzm/HlXJCYuSLXzoCbLldiI=
Subject key identifier: BA:37:7F:E7:CB:2E:80:47:80:A0:5E:63:32:95:22:A6:8A:AD:5B:8B
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019E1655B8EC2A3B45D2B39055B308B9EDB4
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/ujd_58sugEeAoF5jMpUipoqtW4s.roa
Signing time: Mon 11 May 2026 09:19:37 +0000
ROA not before: Mon 11 May 2026 09:19:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33915
IP address blocks: 24.132.0.0/16 maxlen: 16
24.132.0.0/17 maxlen: 17
24.132.128.0/17 maxlen: 17
31.151.0.0/16 maxlen: 16
31.151.0.0/17 maxlen: 17
31.151.128.0/17 maxlen: 17
46.129.0.0/16 maxlen: 16
46.129.0.0/17 maxlen: 17
46.129.128.0/17 maxlen: 17
62.100.0.0/18 maxlen: 18
62.108.0.0/19 maxlen: 19
62.108.0.0/20 maxlen: 20
62.108.16.0/20 maxlen: 20
62.163.0.0/16 maxlen: 16
62.163.0.0/17 maxlen: 17
62.163.128.0/17 maxlen: 17
62.194.0.0/15 maxlen: 15
62.194.0.0/16 maxlen: 16
62.195.0.0/16 maxlen: 16
77.248.0.0/14 maxlen: 14
77.248.0.0/15 maxlen: 15
77.250.0.0/15 maxlen: 15
80.56.0.0/15 maxlen: 15
80.56.0.0/16 maxlen: 16
80.57.0.0/16 maxlen: 16
80.85.32.0/20 maxlen: 20
80.113.0.0/16 maxlen: 16
80.113.0.0/17 maxlen: 17
80.113.128.0/17 maxlen: 17
80.248.32.0/20 maxlen: 20
80.248.32.0/21 maxlen: 21
80.248.40.0/21 maxlen: 21
81.175.64.0/18 maxlen: 18
81.175.64.0/19 maxlen: 19
81.175.96.0/19 maxlen: 19
84.41.128.0/17 maxlen: 17
88.211.128.0/18 maxlen: 18
89.98.0.0/15 maxlen: 15
89.98.0.0/16 maxlen: 16
89.99.0.0/16 maxlen: 16
89.220.0.0/17 maxlen: 17
92.108.0.0/14 maxlen: 14
92.108.0.0/15 maxlen: 15
92.110.0.0/15 maxlen: 15
95.96.0.0/15 maxlen: 15
95.96.0.0/16 maxlen: 16
95.97.0.0/16 maxlen: 16
178.84.0.0/15 maxlen: 15
178.84.0.0/16 maxlen: 16
178.85.0.0/16 maxlen: 16
185.94.92.0/22 maxlen: 22
185.137.200.0/22 maxlen: 22
185.137.200.0/23 maxlen: 23
185.137.202.0/23 maxlen: 23
195.18.64.0/18 maxlen: 18
212.67.160.0/19 maxlen: 19
212.83.64.0/19 maxlen: 19
212.83.64.0/20 maxlen: 20
212.83.80.0/20 maxlen: 20
212.178.32.0/19 maxlen: 19
212.178.32.0/20 maxlen: 20
212.178.48.0/20 maxlen: 20
212.187.0.0/17 maxlen: 17
212.187.0.0/18 maxlen: 18
212.187.64.0/18 maxlen: 18
213.34.0.0/19 maxlen: 19
213.34.0.0/20 maxlen: 20
213.34.16.0/20 maxlen: 20
213.93.0.0/16 maxlen: 16
213.93.0.0/17 maxlen: 17
213.93.128.0/17 maxlen: 17
213.124.160.0/19 maxlen: 19
213.124.160.0/20 maxlen: 20
213.124.176.0/20 maxlen: 20
213.124.192.0/18 maxlen: 18
213.124.192.0/19 maxlen: 19
213.124.224.0/19 maxlen: 19
213.126.128.0/17 maxlen: 17
213.126.128.0/18 maxlen: 18
213.126.192.0/18 maxlen: 18
213.127.0.0/16 maxlen: 16
213.127.0.0/17 maxlen: 17
213.127.128.0/17 maxlen: 17
213.160.192.0/19 maxlen: 19
213.160.192.0/20 maxlen: 20
213.160.208.0/20 maxlen: 20
213.160.248.0/21 maxlen: 21
213.160.248.0/22 maxlen: 22
213.160.252.0/22 maxlen: 22
217.17.128.0/20 maxlen: 20
217.63.128.0/18 maxlen: 18
217.63.128.0/19 maxlen: 19
217.63.160.0/19 maxlen: 19
217.102.0.0/17 maxlen: 17
217.102.0.0/18 maxlen: 18
217.102.64.0/18 maxlen: 18
217.103.0.0/16 maxlen: 16
217.103.0.0/17 maxlen: 17
217.103.128.0/17 maxlen: 17
217.104.128.0/17 maxlen: 17
217.104.128.0/18 maxlen: 18
217.104.192.0/18 maxlen: 18
217.105.0.0/18 maxlen: 18
217.105.0.0/19 maxlen: 19
217.105.32.0/19 maxlen: 19
217.105.224.0/19 maxlen: 19
217.105.224.0/20 maxlen: 20
217.105.240.0/20 maxlen: 20
217.112.112.0/20 maxlen: 20
2a02:938::/29 maxlen: 29
2a02:a200::/27 maxlen: 27
2a02:a200::/28 maxlen: 28
2a02:a210::/28 maxlen: 28
2a03:4aa0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:55:b8:ec:2a:3b:45:d2:b3:90:55:b3:08:b9:ed:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: May 11 09:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba377fe7cb2e804780a05e63329522a68aad5b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:00:01:cb:4d:16:38:3b:dc:9e:d4:18:f3:
4e:e3:06:78:c4:ef:37:f3:22:6d:b7:4c:0f:a1:99:
de:97:51:c3:8d:9e:b5:fb:08:7f:97:4d:d1:a0:de:
cb:93:43:e2:de:a2:73:5d:2e:06:9b:2d:f2:e2:73:
4f:b2:41:68:06:a9:81:0e:67:5d:b9:44:4a:7b:97:
70:1c:c3:30:f3:48:18:1b:7e:4c:ec:51:c5:47:d4:
90:4b:b8:46:e1:ed:8a:e9:f7:f2:c6:78:67:01:ea:
73:c2:53:8f:f5:91:2a:2b:ba:ba:46:bd:e8:68:6f:
b5:98:27:e7:34:0a:33:a0:fa:04:b7:c9:4a:38:ea:
ad:7a:5b:42:3d:91:17:71:ac:76:46:9f:6e:be:81:
40:87:9a:04:b9:05:45:f5:22:4b:2c:9c:37:53:92:
f9:4d:3e:a2:b9:cb:65:a2:6d:4a:21:89:8a:e7:4d:
9f:bc:40:37:5b:ef:9a:e2:3d:59:be:84:9b:e5:20:
66:e8:72:40:ca:60:c5:0d:3a:37:c9:a8:ec:cd:bd:
6b:62:9b:97:90:ec:8a:fd:a1:d0:ce:9d:33:5b:5b:
14:ae:be:60:b5:ad:ab:63:f0:ef:d6:12:51:79:f4:
0c:9f:4e:19:26:e7:5d:5e:63:29:79:3e:6f:54:cf:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:37:7F:E7:CB:2E:80:47:80:A0:5E:63:32:95:22:A6:8A:AD:5B:8B
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/ujd_58sugEeAoF5jMpUipoqtW4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.132.0.0/16
31.151.0.0/16
46.129.0.0/16
62.100.0.0/18
62.108.0.0/19
62.163.0.0/16
62.194.0.0/15
77.248.0.0/14
80.56.0.0/15
80.85.32.0/20
80.113.0.0/16
80.248.32.0/20
81.175.64.0/18
84.41.128.0/17
88.211.128.0/18
89.98.0.0/15
89.220.0.0/17
92.108.0.0/14
95.96.0.0/15
178.84.0.0/15
185.94.92.0/22
185.137.200.0/22
195.18.64.0/18
212.67.160.0/19
212.83.64.0/19
212.178.32.0/19
212.187.0.0/17
213.34.0.0/19
213.93.0.0/16
213.124.160.0-213.124.255.255
213.126.128.0-213.127.255.255
213.160.192.0/19
213.160.248.0/21
217.17.128.0/20
217.63.128.0/18
217.102.0.0/17
217.103.0.0/16
217.104.128.0-217.105.63.255
217.105.224.0/19
217.112.112.0/20
IPv6:
2a02:938::/29
2a02:a200::/27
2a03:4aa0::/29
Signature Algorithm: sha256WithRSAEncryption
00:36:43:01:ea:f1:d2:3d:d7:f3:71:19:05:89:af:da:e6:68:
d7:48:d2:4e:40:4a:a9:52:88:96:aa:7f:e7:49:13:11:4f:0d:
4e:60:86:7c:df:e3:7c:e0:0e:d1:c1:d1:ee:e6:7a:2e:1c:6e:
c5:a4:6f:d2:ba:7d:81:62:13:2a:5f:a1:ae:e6:fe:d1:b0:be:
c1:af:5b:34:c7:18:2e:23:a0:70:4a:02:54:05:57:55:85:4a:
67:ea:b6:0b:70:57:19:c0:f7:04:93:ba:36:d2:6c:20:a3:d5:
23:d9:29:1a:19:77:06:15:39:0b:aa:2b:8b:0b:98:bf:0e:07:
7c:5b:95:29:29:12:08:25:de:69:e9:77:3b:d6:01:a3:0a:dc:
6f:7f:02:16:e7:6e:78:73:6c:4d:f6:cc:27:ed:5b:dc:98:37:
e6:94:8c:85:46:1f:b9:f7:4b:01:d3:45:fd:08:9d:68:40:0e:
ca:1b:8b:61:24:ef:2b:59:f5:d6:6e:18:ce:f7:ab:d8:63:f5:
8b:d7:a6:b4:37:4b:c6:d3:07:16:1a:41:d1:90:eb:85:ac:03:
a0:67:b5:be:30:be:be:d1:77:5c:3c:fe:51:51:b1:2b:d2:e5:
b3:ee:31:86:31:7e:5c:f4:84:99:95:c5:c7:2c:83:2d:60:f2:
3a:17:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:54 2026 by rpki-client