Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Uulh2C4n5nm63d6VgaWKJO6QoWc.roa
File: Uulh2C4n5nm63d6VgaWKJO6QoWc.roa (raw, json)
Hash identifier: Oo33PSvAKG5w3ZgneHNMFN0o3XVi+mbh2K2F9J+5QGA=
Subject key identifier: 52:E9:61:D8:2E:27:E6:79:BA:DD:DE:95:81:A5:8A:24:EE:90:A1:67
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D1B91E4CDDA49C737C9BBD5EEFB7446C3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Uulh2C4n5nm63d6VgaWKJO6QoWc.roa
Signing time: Mon 23 Mar 2026 16:40:39 +0000
ROA not before: Mon 23 Mar 2026 16:40:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 45.90.236.0/24 maxlen: 24
185.121.13.0/24 maxlen: 24
185.121.14.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.202.207.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.204.0/24 maxlen: 24
185.236.24.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
185.239.142.0/24 maxlen: 24
185.250.181.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/23 maxlen: 24
194.48.143.0/24 maxlen: 24
194.124.210.0/24 maxlen: 24
194.124.211.0/24 maxlen: 24
194.146.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:91:e4:cd:da:49:c7:37:c9:bb:d5:ee:fb:74:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 23 16:40:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52e961d82e27e679baddde9581a58a24ee90a167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:96:39:a6:8d:eb:bb:36:f3:30:ed:d3:58:
75:93:70:fa:e0:4e:83:79:cb:32:9a:2a:de:4d:3c:
74:52:64:66:a7:8e:7a:eb:90:12:9b:f8:27:92:f1:
7b:be:25:45:de:5e:11:06:86:71:f0:e3:32:9f:73:
6f:48:85:b5:97:94:05:85:ed:f8:69:02:06:69:cb:
ea:b5:be:9a:dd:5a:18:c4:44:50:aa:66:a7:56:02:
a0:58:74:6f:7b:e9:9f:98:06:f7:5e:a6:1c:44:ff:
28:3e:30:f0:58:46:71:4e:0c:91:b1:f3:41:4e:1e:
48:49:d6:6f:92:ae:c4:43:ec:66:f9:5f:f4:c6:3e:
63:ff:2a:bb:b9:10:4f:68:71:46:8b:a9:e8:79:36:
7b:f4:d6:f6:c7:48:8a:04:b1:b7:2d:6c:de:14:9c:
a5:23:a9:ac:a6:7f:ea:0c:47:5c:ea:d5:e7:9d:cc:
ed:b2:8b:1f:07:52:2a:34:af:53:db:94:44:79:d1:
dd:87:3d:04:d9:af:be:7a:fc:a0:ea:78:1c:df:d8:
f7:e7:83:18:a0:f6:3c:fb:85:36:49:a3:dc:8b:3e:
5f:9c:d4:ff:4d:31:e5:0f:eb:37:37:a4:f9:a4:df:
c2:14:17:f7:4f:48:a1:8d:1c:75:52:c8:f9:8a:b5:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E9:61:D8:2E:27:E6:79:BA:DD:DE:95:81:A5:8A:24:EE:90:A1:67
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Uulh2C4n5nm63d6VgaWKJO6QoWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/24
185.121.13.0-185.121.14.255
185.196.41.0/24
185.202.207.0/24
185.218.17.0/24
185.218.19.0/24
185.227.144.0/24
185.230.67.0/24
185.232.204.0/24
185.236.24.0/24
185.239.141.0-185.239.142.255
185.250.181.0/24
185.254.158.0/24
193.17.182.0/24
194.48.140.0/23
194.48.143.0/24
194.124.210.0/23
194.146.223.0/24
Signature Algorithm: sha256WithRSAEncryption
39:18:f6:e8:b0:da:53:85:84:5a:65:76:92:0a:63:82:8f:54:
dd:5f:e6:e2:da:09:d7:dc:ec:90:4d:91:58:e3:68:38:f9:70:
cb:33:61:b8:38:bd:64:27:b2:ec:99:f7:f9:e8:ec:b4:70:cf:
88:93:8e:4a:05:9a:00:be:50:41:63:b4:32:d4:5b:55:de:f2:
aa:e0:d8:03:e0:7b:89:6c:47:d6:55:9f:b8:39:50:05:ab:67:
a0:f0:1b:fb:9a:c4:44:44:3c:7d:a5:50:9e:92:2d:de:94:c6:
b4:69:d3:40:a4:5b:5b:bf:d3:e4:7b:2b:6c:ef:2c:ba:20:81:
0a:ff:7a:48:62:53:29:39:ed:24:f1:07:2f:c1:fd:b1:83:59:
e8:3e:43:94:91:0d:70:af:f3:dc:c3:e7:2d:da:4c:ed:a3:19:
f5:74:d5:e4:23:f9:4f:f7:4e:cd:ea:8f:30:46:d4:ac:b7:b3:
84:aa:b3:fb:6d:9b:00:fa:21:a7:5d:d8:e1:e0:bb:7d:03:17:
82:94:d2:40:91:1d:dc:14:1b:64:9e:d6:e9:62:ab:dd:91:dd:
c4:6d:b5:ce:91:6e:18:51:27:f9:aa:30:ae:93:f0:1f:27:9e:
af:2f:0a:21:c1:5a:4f:e3:63:1b:48:33:ec:db:37:76:19:a8:
de:10:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:15:28 2026 by rpki-client