Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/uhdCZBM6YTqjUjLBXnIpIR-OZBc.roa
File: uhdCZBM6YTqjUjLBXnIpIR-OZBc.roa (raw, json)
Hash identifier: xnmUIesa/su266lF+u7BctDrkkI/AWYCj+Ji+myJrrM=
Subject key identifier: BA:17:42:64:13:3A:61:3A:A3:52:32:C1:5E:72:29:21:1F:8E:64:17
Certificate issuer: /CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Certificate serial: 019F2369026F13143C43DA07F74FA850CCDA
Authority key identifier: F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/uhdCZBM6YTqjUjLBXnIpIR-OZBc.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50599
IP address blocks: 89.40.144.0/22 maxlen: 22
91.204.160.0/23 maxlen: 23
91.204.162.0/24 maxlen: 24
91.236.52.0/24 maxlen: 24
91.236.54.0/23 maxlen: 23
128.0.54.0/24 maxlen: 24
185.11.128.0/22 maxlen: 22
185.72.196.0/22 maxlen: 22
185.170.104.0/22 maxlen: 22
188.210.220.0/22 maxlen: 22
193.105.125.0/24 maxlen: 24
195.177.216.0/24 maxlen: 24
195.177.217.0/24 maxlen: 24
2a02:e7c0::/29 maxlen: 29
2a0b:5480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:02:6f:13:14:3c:43:da:07:f7:4f:a8:50:cc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba174264133a613aa35232c15e7229211f8e6417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:d4:ed:c6:dd:5e:7b:99:40:4e:58:c9:50:
f2:3a:a4:e5:73:f6:dc:b5:4a:93:65:de:4d:36:7b:
c1:98:5b:94:f8:17:d9:1f:41:db:ea:15:a1:53:06:
3d:2c:46:a1:3f:e4:95:5c:a7:34:c3:ec:10:30:80:
12:cc:83:29:f1:13:82:c6:77:dc:d4:98:ea:34:c5:
fd:a4:10:3c:53:98:c7:0d:50:5b:40:b0:c4:c1:5d:
d6:17:83:09:28:a9:63:8a:e4:7a:49:c0:0d:f9:df:
eb:ab:98:3b:51:89:67:1a:fd:bc:82:3d:15:a6:57:
7d:3a:49:97:e4:5d:96:ea:3a:7c:31:4b:cc:ff:e6:
c9:5f:3c:ef:cc:08:12:2a:cd:d8:a7:7a:74:ea:65:
3e:fc:8e:6b:23:54:ef:6d:ee:4e:6b:e9:f9:d7:c7:
15:2e:a2:e2:a6:f1:dc:9e:c9:5f:01:30:1f:76:a9:
b0:8d:84:ea:fb:b8:8a:5f:b9:92:38:ed:bb:54:9a:
54:4e:c6:ed:43:4e:c6:06:ae:68:23:5b:95:cb:0f:
b9:fa:2c:6e:87:aa:30:1d:b3:23:5f:90:75:b7:d1:
e2:30:a1:ee:a3:d7:52:8e:ac:e9:de:5c:22:35:0c:
2f:c0:c7:01:4b:37:89:70:71:af:8e:2e:f4:e6:25:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:42:64:13:3A:61:3A:A3:52:32:C1:5E:72:29:21:1F:8E:64:17
X509v3 Authority Key Identifier:
keyid:F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/uhdCZBM6YTqjUjLBXnIpIR-OZBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.144.0/22
91.204.160.0-91.204.162.255
91.236.52.0/24
91.236.54.0/23
128.0.54.0/24
185.11.128.0/22
185.72.196.0/22
185.170.104.0/22
188.210.220.0/22
193.105.125.0/24
195.177.216.0/23
IPv6:
2a02:e7c0::/29
2a0b:5480::/29
Signature Algorithm: sha256WithRSAEncryption
04:d5:13:25:ac:ac:64:2a:52:b0:bc:f8:a0:ec:e8:cb:44:e7:
de:65:e2:d6:ac:dc:74:45:fd:e3:9c:f3:dc:38:81:f5:73:af:
55:74:92:5b:f7:72:d3:dc:d1:b4:31:8c:ed:e7:d1:ac:f3:60:
db:a1:0e:1d:c6:d5:8d:4c:a8:85:12:36:e8:dd:f3:78:7e:35:
33:83:0f:73:73:ae:a9:0a:58:ba:bb:cd:7f:e9:88:bf:b9:37:
2e:f6:d3:e7:7e:a6:e4:b9:76:f5:59:44:33:e7:31:3f:d5:aa:
e1:73:27:e6:c9:46:78:97:c3:99:09:78:f9:6f:9e:a7:3c:eb:
da:cd:5a:bb:0e:64:bb:82:52:30:22:ae:b2:11:3a:d6:aa:84:
b0:96:70:f3:54:d7:e6:f6:69:14:30:28:02:2a:40:8f:2f:9e:
61:89:44:88:79:33:30:9d:97:0d:d9:d3:b7:84:e7:c4:1f:ca:
35:34:e7:b1:0f:b6:10:ae:d2:d2:a1:e0:d7:7c:1f:aa:a3:d9:
b6:ba:67:a7:1e:7d:07:a6:78:d4:a1:3f:ae:4b:51:3a:41:dd:
f7:5d:6f:24:87:3c:2f:c3:4e:0f:2e:25:53:9f:09:e2:37:bf:
86:dc:33:a1:d0:bd:16:55:9d:0a:4b:e1:b3:42:78:62:82:dc:
1e:e7:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:50 2026 by rpki-client