Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/UZiX8593i0HPiIgTe8YqLL1jEm8.roa
File: UZiX8593i0HPiIgTe8YqLL1jEm8.roa (raw, json)
Hash identifier: jgGRyvi/QoZtAhkdAK/g+W2pTGXs4y8WLBv9HdBj3Uw=
Subject key identifier: 51:98:97:F3:9F:77:8B:41:CF:88:88:13:7B:C6:2A:2C:BD:63:12:6F
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019F74BAE9972E56D8C9E9555BB53D7E0831
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/UZiX8593i0HPiIgTe8YqLL1jEm8.roa
Signing time: Sat 18 Jul 2026 10:17:14 +0000
ROA not before: Sat 18 Jul 2026 10:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6821
IP address blocks: 37.25.80.0/21 maxlen: 24
37.25.84.0/22 maxlen: 22
46.217.0.0/16 maxlen: 16
46.217.0.0/19 maxlen: 21
46.217.0.0/21 maxlen: 21
46.217.8.0/21 maxlen: 21
46.217.16.0/21 maxlen: 21
46.217.24.0/21 maxlen: 21
46.217.32.0/21 maxlen: 21
46.217.40.0/21 maxlen: 21
46.217.48.0/21 maxlen: 21
46.217.56.0/21 maxlen: 21
46.217.64.0/18 maxlen: 21
46.217.64.0/21 maxlen: 21
46.217.72.0/21 maxlen: 21
46.217.80.0/21 maxlen: 21
46.217.88.0/21 maxlen: 21
46.217.96.0/21 maxlen: 21
46.217.104.0/21 maxlen: 21
46.217.112.0/21 maxlen: 21
46.217.120.0/21 maxlen: 21
46.217.128.0/18 maxlen: 21
46.217.128.0/21 maxlen: 21
46.217.136.0/21 maxlen: 21
46.217.144.0/21 maxlen: 21
46.217.152.0/21 maxlen: 21
46.217.160.0/19 maxlen: 19
46.217.192.0/19 maxlen: 23
46.217.198.0/23 maxlen: 23
46.217.200.0/21 maxlen: 21
46.217.216.0/21 maxlen: 21
46.217.224.0/19 maxlen: 19
46.217.224.0/20 maxlen: 21
46.217.232.0/21 maxlen: 21
46.217.254.0/24 maxlen: 24
62.77.136.0/21 maxlen: 21
62.162.0.0/16 maxlen: 24
62.162.0.0/18 maxlen: 18
62.162.5.0/24 maxlen: 24
62.162.27.0/24 maxlen: 24
62.162.31.0/24 maxlen: 24
62.162.41.0/24 maxlen: 24
62.162.42.0/24 maxlen: 24
62.162.70.0/24 maxlen: 24
62.162.90.0/24 maxlen: 24
62.162.120.0/24 maxlen: 24
62.162.129.0/24 maxlen: 24
62.162.130.0/24 maxlen: 24
62.162.133.0/24 maxlen: 24
62.162.134.0/24 maxlen: 24
62.162.136.0/24 maxlen: 24
62.162.138.0/24 maxlen: 24
62.162.145.0/24 maxlen: 24
62.162.146.0/24 maxlen: 24
62.162.155.0/24 maxlen: 24
62.162.161.0/24 maxlen: 24
62.162.162.0/24 maxlen: 24
62.220.192.0/19 maxlen: 24
62.220.203.0/24 maxlen: 24
62.220.204.0/22 maxlen: 22
77.28.0.0/15 maxlen: 21
77.28.0.0/16 maxlen: 21
77.28.0.0/18 maxlen: 21
77.28.0.0/20 maxlen: 20
77.28.16.0/21 maxlen: 21
77.28.24.0/21 maxlen: 21
77.28.64.0/18 maxlen: 21
77.28.64.0/19 maxlen: 19
77.28.120.0/21 maxlen: 21
77.28.128.0/18 maxlen: 21
77.28.192.0/18 maxlen: 21
77.28.224.0/20 maxlen: 20
77.28.240.0/20 maxlen: 20
77.29.0.0/16 maxlen: 18
77.29.0.0/18 maxlen: 18
77.29.64.0/18 maxlen: 18
77.29.128.0/18 maxlen: 18
77.29.192.0/18 maxlen: 18
79.125.128.0/17 maxlen: 24
79.125.128.0/18 maxlen: 18
79.125.128.0/19 maxlen: 22
79.125.128.0/22 maxlen: 22
79.125.132.0/22 maxlen: 22
79.125.136.0/22 maxlen: 22
79.125.140.0/22 maxlen: 22
79.125.160.0/19 maxlen: 19
79.125.160.0/20 maxlen: 20
79.125.192.0/18 maxlen: 23
79.125.220.0/23 maxlen: 23
79.125.232.0/21 maxlen: 21
79.125.240.0/20 maxlen: 20
95.156.0.0/19 maxlen: 24
95.156.29.0/24 maxlen: 24
95.156.30.0/24 maxlen: 24
95.156.31.0/24 maxlen: 24
95.156.32.0/19 maxlen: 24
95.156.50.0/24 maxlen: 24
95.156.52.0/22 maxlen: 22
195.26.128.0/19 maxlen: 24
195.26.130.0/24 maxlen: 24
195.26.144.0/24 maxlen: 24
195.26.149.0/24 maxlen: 24
2a00:5c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:ba:e9:97:2e:56:d8:c9:e9:55:5b:b5:3d:7e:08:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Jul 18 10:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=519897f39f778b41cf8888137bc62a2cbd63126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4a:7a:82:bd:fb:b5:fa:15:bc:75:8a:ff:60:
26:e6:dc:8b:9c:1b:0e:03:0a:bf:a7:ad:95:98:41:
7e:7e:8c:d3:66:d2:4b:6a:e5:32:cb:67:33:a6:3b:
48:f6:aa:c3:db:8e:53:25:f5:71:b3:3c:9d:e1:23:
d5:55:fa:6a:12:4a:48:d0:e1:86:f8:9b:45:33:f7:
a5:48:ea:f8:3c:9b:9d:00:c0:61:84:78:a9:2b:1f:
0c:27:80:54:1f:34:c0:9d:6f:bc:82:bb:ed:ec:8e:
0a:56:26:88:6a:fa:3c:6f:e5:9f:9f:34:4b:04:78:
b9:59:f2:c1:eb:2f:76:0a:4b:58:22:03:4d:3d:5a:
8a:88:aa:d8:6d:49:7e:33:7a:17:20:0c:e5:87:e4:
78:a3:7d:4f:41:3e:5a:1e:d3:08:52:f2:b6:7c:55:
73:27:7f:b2:dd:25:6b:df:74:0a:31:af:e8:e9:2a:
f4:d1:ac:f2:16:99:5f:b6:44:b6:4a:d0:c7:2e:50:
68:96:e4:2e:88:13:a0:de:4a:02:84:f0:cf:e0:36:
20:9e:c6:9d:4a:44:63:9e:e6:09:de:68:10:c1:09:
a3:aa:f0:6f:78:4d:9b:cc:dc:df:f3:4a:7c:4f:d7:
b5:b9:f1:aa:20:a6:94:41:d6:54:7c:50:73:0a:2f:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:97:F3:9F:77:8B:41:CF:88:88:13:7B:C6:2A:2C:BD:63:12:6F
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/UZiX8593i0HPiIgTe8YqLL1jEm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.80.0/21
46.217.0.0/16
62.77.136.0/21
62.162.0.0/16
62.220.192.0/19
77.28.0.0/15
79.125.128.0/17
95.156.0.0/18
195.26.128.0/19
IPv6:
2a00:5c40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:e7:2c:f4:fb:b4:39:67:ab:af:57:a4:97:43:bd:0d:7b:d7:
58:80:cc:de:ca:91:f5:24:03:ee:6f:ef:2d:27:78:48:20:86:
f9:79:7a:50:9a:bf:4d:ea:8c:e5:4a:da:b3:33:03:33:b4:ce:
c3:6f:3d:08:49:82:3f:8f:2f:a7:4b:c7:da:8c:16:f9:77:cc:
01:b8:f0:fc:c8:d5:7f:c6:a6:0a:39:cc:c6:f4:eb:90:38:ea:
4b:7a:a0:72:bb:10:fe:45:1b:d9:50:f9:70:73:8c:d7:0d:d1:
2b:93:4a:83:7d:5a:f9:c5:d8:68:ca:73:96:6c:40:91:8b:63:
4f:3a:68:d6:0c:00:d9:bc:e1:b1:73:d7:30:0c:67:d1:17:e1:
bc:c0:66:28:3e:0f:d1:50:2d:ed:f9:31:0e:34:f9:18:ee:dc:
62:6a:94:88:23:3c:6d:b2:19:a6:d3:0a:6b:86:a2:72:a1:5f:
01:74:9a:dd:2b:ff:65:13:f6:b2:bf:6c:ff:f9:81:2b:1a:46:
35:cf:75:52:56:1d:a8:b3:7f:09:7c:ac:09:da:b5:33:12:0e:
4c:e8:ea:83:77:76:d7:3b:a8:6a:8f:42:8d:e9:b5:4a:ec:76:
37:b0:13:c6:73:86:78:cc:79:b8:d4:c6:e7:79:94:97:1f:44:
50:9f:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:41 2026 by rpki-client