Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa
File: u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa (raw, json)
Hash identifier: iB97I/PNWHuFo231JJX1gPfe7U6KqJLM6Q8cz9KMcfM=
Subject key identifier: BB:97:09:44:9F:70:06:93:2B:67:C8:61:2F:26:3D:5B:C4:02:BC:C6
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019D90818373BE8DED01954A9DBAE11B219D
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa
Signing time: Wed 15 Apr 2026 09:38:20 +0000
ROA not before: Wed 15 Apr 2026 09:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24875
IP address blocks: 2.58.21.0/24 maxlen: 24
46.182.108.0/24 maxlen: 24
80.89.224.0/20 maxlen: 24
80.89.236.0/23 maxlen: 23
89.105.192.0/19 maxlen: 19
89.105.192.0/20 maxlen: 20
89.105.208.0/20 maxlen: 20
185.80.232.0/22 maxlen: 22
185.80.232.0/23 maxlen: 23
185.80.234.0/23 maxlen: 23
185.147.12.0/22 maxlen: 24
2001:968::/29 maxlen: 29
2001:968::/32 maxlen: 32
2001:968:15::/48 maxlen: 48
2001:968:100::/48 maxlen: 48
2001:968:675::/48 maxlen: 48
2001:968:676::/48 maxlen: 48
2001:968:677::/48 maxlen: 48
2001:968:678::/48 maxlen: 48
2001:968:679::/48 maxlen: 48
2001:968:780::/48 maxlen: 48
2001:968:1007::/48 maxlen: 48
2001:968:1400::/48 maxlen: 48
2001:968:2001::/48 maxlen: 48
2001:968:2003::/48 maxlen: 48
2001:968:2004::/48 maxlen: 48
2001:968:2005::/48 maxlen: 48
2001:968:2006::/48 maxlen: 48
2001:968:2007::/48 maxlen: 48
2001:968:2008::/48 maxlen: 48
2001:968:2010::/48 maxlen: 48
2001:968:2013::/48 maxlen: 48
2001:968:2015::/48 maxlen: 48
2001:968:2016::/48 maxlen: 48
2001:968:2017::/48 maxlen: 48
2001:968:2019::/48 maxlen: 48
2001:968:2020::/48 maxlen: 48
2001:968:2021::/48 maxlen: 48
2001:968:2022::/48 maxlen: 48
2001:968:2023::/48 maxlen: 48
2001:968:2024::/48 maxlen: 48
2001:968:2025::/48 maxlen: 48
2001:968:2026::/48 maxlen: 48
2001:968:2027::/48 maxlen: 48
2001:968:2032::/48 maxlen: 48
2001:968:2035::/48 maxlen: 48
2001:968:2036::/48 maxlen: 48
2001:968:2037::/48 maxlen: 48
2001:968:2062::/48 maxlen: 48
2001:968:2101::/48 maxlen: 48
2001:968:2102::/48 maxlen: 48
2001:968:2103::/48 maxlen: 48
2001:968:2104::/48 maxlen: 48
2001:968:2106::/48 maxlen: 48
2001:968:2107::/48 maxlen: 48
2001:968:2108::/48 maxlen: 48
2001:968:2109::/48 maxlen: 48
2001:968:2110::/48 maxlen: 48
2001:968:2111::/48 maxlen: 48
2001:968:2112::/48 maxlen: 48
2001:968:2117::/48 maxlen: 48
2001:968:2118::/48 maxlen: 48
2001:968:2119::/48 maxlen: 48
2001:968:2127::/48 maxlen: 48
2001:968:2128::/48 maxlen: 48
2001:968:2129::/48 maxlen: 48
2001:968:2130::/48 maxlen: 48
2001:968:2131::/48 maxlen: 48
2001:968:2132::/48 maxlen: 48
2001:968:2133::/48 maxlen: 48
2001:968:2134::/48 maxlen: 48
2001:968:2135::/48 maxlen: 48
2001:968:2137::/48 maxlen: 48
2001:968:2138::/48 maxlen: 48
2001:968:2139::/48 maxlen: 48
2001:968:2140::/48 maxlen: 48
2001:968:2143::/48 maxlen: 48
2001:968:2144::/48 maxlen: 48
2001:968:2145::/48 maxlen: 48
2001:968:2146::/48 maxlen: 48
2001:968:2147::/48 maxlen: 48
2001:968:2148::/48 maxlen: 48
2001:968:2150::/48 maxlen: 48
2001:968:2151::/48 maxlen: 48
2001:968:2152::/48 maxlen: 48
2001:968:2153::/48 maxlen: 48
2001:968:2155::/48 maxlen: 48
2001:968:2158::/48 maxlen: 48
2001:968:2160::/48 maxlen: 48
2001:968:2162::/48 maxlen: 48
2001:968:2164::/48 maxlen: 48
2001:968:2171::/48 maxlen: 48
2001:968:2172::/48 maxlen: 48
2001:968:2173::/48 maxlen: 48
2001:968:2174::/48 maxlen: 48
2001:968:2177::/48 maxlen: 48
2001:968:2178::/48 maxlen: 48
2001:968:2179::/48 maxlen: 48
2001:968:2180::/48 maxlen: 48
2001:968:2181::/48 maxlen: 48
2001:968:2182::/48 maxlen: 48
2001:968:2184::/48 maxlen: 48
2001:968:2185::/48 maxlen: 48
2001:968:2186::/48 maxlen: 48
2001:968:2188::/48 maxlen: 48
2001:968:2189::/48 maxlen: 48
2001:968:2190::/48 maxlen: 48
2001:968:2191::/48 maxlen: 48
2001:968:2192::/48 maxlen: 48
2001:968:2193::/48 maxlen: 48
2001:968:2194::/48 maxlen: 48
2001:968:2195::/48 maxlen: 48
2001:968:2197::/48 maxlen: 48
2001:968:2198::/48 maxlen: 48
2001:968:2226::/48 maxlen: 48
2001:968:2227::/48 maxlen: 48
2001:968:2412::/48 maxlen: 48
2001:968:3295::/48 maxlen: 48
2a00:11f8::/29 maxlen: 29
2a00:11f8::/32 maxlen: 32
2a07:5440::/29 maxlen: 29
2a07:5440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:81:83:73:be:8d:ed:01:95:4a:9d:ba:e1:1b:21:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Apr 15 09:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb9709449f7006932b67c8612f263d5bc402bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:38:15:a2:f7:48:1b:c0:87:2d:4a:77:b6:
16:38:5e:2b:c7:28:38:d7:6f:9c:3e:60:ce:db:73:
6f:24:33:55:5f:4e:b9:6a:c3:23:79:75:52:46:90:
41:be:94:c5:bf:d4:44:40:60:b9:51:7c:65:2b:4b:
2b:58:b8:9a:c5:b2:18:c6:82:b8:ad:20:26:75:28:
10:c8:1c:b8:fc:24:d1:82:e6:4f:b2:d6:4e:c4:01:
86:ef:42:5b:dd:b0:ce:81:35:20:20:09:ad:17:b2:
55:43:f5:0c:f6:fd:7c:33:34:ab:b7:a2:26:4e:ed:
d3:70:20:21:3f:8e:fa:12:a5:0f:0d:c2:44:a2:ef:
c7:4f:d1:34:1e:4e:08:05:a9:e9:f7:c0:38:bb:49:
60:42:cd:f1:67:a7:73:86:d5:fa:bf:3c:48:74:d2:
7e:f6:0c:34:92:67:69:3f:0a:6b:e9:be:95:fd:c8:
2e:12:af:6b:51:3b:45:69:df:93:31:ed:ec:e1:6e:
58:39:eb:f6:6f:24:6a:1e:f6:fd:10:39:31:fa:6d:
f6:3c:d7:a4:2a:2d:51:e8:8b:7d:7e:9a:31:47:46:
4c:c1:ea:fa:20:63:0d:7c:65:ff:65:db:0b:8e:bf:
81:83:02:8b:43:c7:65:5e:f7:7f:1d:eb:cd:d9:1c:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:09:44:9F:70:06:93:2B:67:C8:61:2F:26:3D:5B:C4:02:BC:C6
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.21.0/24
46.182.108.0/24
80.89.224.0/20
89.105.192.0/19
185.80.232.0/22
185.147.12.0/22
IPv6:
2001:968::/29
2a00:11f8::/29
2a07:5440::/29
Signature Algorithm: sha256WithRSAEncryption
8d:58:db:87:ad:55:67:a7:87:9e:c2:3a:92:63:ea:79:58:77:
dc:82:c3:da:af:dd:3f:89:7e:d4:34:4a:bd:8f:1d:6f:cd:78:
51:de:a1:85:02:9c:68:32:36:5e:52:27:f9:36:13:71:fe:26:
58:5d:8e:0c:7d:1d:cd:7c:ba:09:de:f4:93:51:01:fd:9b:b3:
89:21:4b:65:f2:01:b3:bd:d1:a3:a8:df:59:5a:f0:a2:14:6e:
71:1f:67:98:4e:fa:97:9e:29:5b:b9:63:8e:ba:b1:1c:a7:2b:
45:b2:25:7d:90:bd:b2:41:7f:77:7f:49:37:a7:81:e3:ee:1d:
c7:21:87:9e:ef:04:c5:19:77:5c:34:24:2e:c5:f3:36:92:b1:
ce:00:94:c9:ab:ca:ea:a5:e7:d5:5c:90:6b:d6:2f:25:c3:51:
a4:ce:76:f2:e5:15:38:f7:ca:24:df:c6:98:9b:d1:76:c9:24:
df:68:29:06:93:1b:63:38:05:82:b5:ae:e8:32:4b:17:a3:ce:
47:b8:02:e0:2b:dd:9e:12:82:8a:61:5b:28:cd:55:8f:e6:2c:
47:b5:1e:fd:b4:8c:48:38:64:99:c7:52:5b:a4:53:1b:e2:89:
be:21:ca:2d:7d:a7:53:67:20:0b:e7:8a:79:ff:95:f9:f5:cc:
6b:e9:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:56 2026 by rpki-client