Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/uwgkfQ5JWANc_6IpWK1gE4l2_bQ.roa
File: uwgkfQ5JWANc_6IpWK1gE4l2_bQ.roa (raw, json)
Hash identifier: buHicSIfoUoK1BIsAz9Tgl12WNi/qMcKiqqL5QuEtnw=
Subject key identifier: BB:08:24:7D:0E:49:58:03:5C:FF:A2:29:58:AD:60:13:89:76:FD:B4
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019D95616065836047BB43EAB647320FBDD4
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/uwgkfQ5JWANc_6IpWK1gE4l2_bQ.roa
Signing time: Thu 16 Apr 2026 08:21:20 +0000
ROA not before: Thu 16 Apr 2026 08:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216416
IP address blocks: 145.11.16.0/21 maxlen: 21
157.173.16.0/21 maxlen: 21
157.173.25.0/24 maxlen: 24
157.173.26.0/24 maxlen: 24
157.173.27.0/24 maxlen: 24
185.207.136.0/24 maxlen: 24
185.207.137.0/24 maxlen: 24
185.207.138.0/24 maxlen: 24
185.207.139.0/24 maxlen: 24
188.137.152.0/24 maxlen: 24
188.137.153.0/24 maxlen: 24
188.137.154.0/24 maxlen: 24
188.137.155.0/24 maxlen: 24
188.137.156.0/24 maxlen: 24
188.137.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:61:60:65:83:60:47:bb:43:ea:b6:47:32:0f:bd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Apr 16 08:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb08247d0e4958035cffa22958ad60138976fdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:cd:41:96:c7:03:b9:c6:52:a7:ff:21:4e:
f5:fd:f0:10:f6:e5:04:96:db:d0:c8:c2:b4:5d:ea:
01:67:e2:8f:4e:24:a6:55:fa:a0:b7:b2:7f:a0:14:
4b:1b:68:6f:44:3d:9c:1d:07:47:85:7c:e9:39:82:
b5:f6:48:24:73:b1:25:87:e2:3c:9a:02:70:0d:21:
11:42:2d:e0:e6:5b:60:37:df:25:69:e5:5b:49:7b:
b2:4f:64:02:60:f0:5e:ec:0f:f9:8a:e7:29:a4:62:
71:6c:f9:5a:1c:7e:c0:0f:43:bd:7f:e6:6a:cd:f7:
3a:13:f5:6c:96:35:5f:e3:4e:72:d4:91:02:12:4f:
d7:a8:c7:fb:e0:d8:f3:a9:a9:52:b9:a0:0e:35:78:
da:ab:8b:d6:31:2b:5d:ce:10:9e:3e:f5:40:a9:23:
c9:16:38:94:c5:9a:3e:89:79:5b:55:8d:d7:4c:6d:
6f:f2:2f:15:be:94:53:89:9c:86:a2:91:a6:e8:24:
a8:24:17:5d:65:fe:67:22:de:fe:1b:78:c6:ed:04:
2f:78:1a:98:3b:a7:43:a8:da:74:f0:ae:e4:3e:1d:
7e:e8:0f:e0:fd:f3:13:cc:64:f6:84:4d:70:f3:cf:
f5:cf:7d:0f:32:c3:ac:87:be:fb:72:9e:2c:d3:d7:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:24:7D:0E:49:58:03:5C:FF:A2:29:58:AD:60:13:89:76:FD:B4
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/uwgkfQ5JWANc_6IpWK1gE4l2_bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.16.0/21
157.173.16.0/21
157.173.25.0-157.173.27.255
185.207.136.0/22
188.137.152.0-188.137.157.255
Signature Algorithm: sha256WithRSAEncryption
98:6a:35:f1:64:d8:4f:1a:06:fa:10:c7:70:c3:b7:8e:b6:d0:
65:0c:27:01:ff:9c:ff:80:51:43:83:fd:18:7d:69:49:04:93:
ce:fc:e3:4e:88:f7:fb:8f:b8:e0:2a:d5:1c:12:8b:53:b0:d8:
25:5f:78:8c:5b:8d:56:5b:fe:d9:5a:5b:96:03:f1:d3:56:c1:
c6:c9:93:ce:7d:e5:67:65:96:65:fe:01:ac:6e:e9:13:c9:e5:
6e:b7:6f:a5:f0:ca:b2:0c:9c:de:81:82:94:a9:e4:98:b1:77:
dd:1d:33:05:a7:2a:da:7d:73:de:c0:f0:dc:b5:a4:09:be:28:
fe:82:5d:63:92:09:28:24:6a:f1:c8:ac:d6:40:69:9a:4d:79:
44:aa:4c:24:58:31:ba:e9:ac:90:87:ed:6f:b5:3c:19:35:be:
89:f5:11:41:25:7b:d0:84:cf:b5:ef:4d:43:f7:b5:78:29:d7:
25:81:43:7d:8d:b5:29:52:1c:ff:8c:d6:14:d8:9d:5d:af:83:
d9:57:7e:74:87:a8:f9:3c:d5:30:3e:f8:cd:4b:a8:d3:be:06:
db:04:97:d6:66:1c:12:80:dc:4b:59:47:b6:37:42:74:dc:9c:
65:ec:6a:94:96:2a:34:43:87:b0:a5:a7:08:b3:8f:24:1a:4b:
f5:04:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:19 2026 by rpki-client