Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/Uo2JUXz0Y8I7Nu4buRlucZ0FrvI.roa
File: Uo2JUXz0Y8I7Nu4buRlucZ0FrvI.roa (raw, json)
Hash identifier: 8Dz/8lDFaqIlCZarVPCGW9YliPESIrMZ+zq0diY+lvw=
Subject key identifier: 52:8D:89:51:7C:F4:63:C2:3B:36:EE:1B:B9:19:6E:71:9D:05:AE:F2
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019EA7605A3702F4FFDF82EC3178BE6432D2
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/Uo2JUXz0Y8I7Nu4buRlucZ0FrvI.roa
Signing time: Mon 08 Jun 2026 13:16:09 +0000
ROA not before: Mon 08 Jun 2026 13:16:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8399
IP address blocks: 37.97.64.0/19 maxlen: 19
37.97.96.0/20 maxlen: 20
37.139.120.0/21 maxlen: 21
37.139.124.0/24 maxlen: 24
65.39.64.0/19 maxlen: 19
80.251.96.0/20 maxlen: 20
81.93.0.0/19 maxlen: 19
88.213.224.0/19 maxlen: 19
155.2.128.0/19 maxlen: 19
155.2.150.0/23 maxlen: 23
157.143.128.0/17 maxlen: 17
178.174.96.0/20 maxlen: 23
178.255.160.0/21 maxlen: 21
185.6.92.0/22 maxlen: 22
185.8.252.0/22 maxlen: 22
185.24.140.0/22 maxlen: 22
185.32.208.0/22 maxlen: 22
185.42.176.0/22 maxlen: 22
185.65.248.0/22 maxlen: 22
185.76.216.0/22 maxlen: 22
185.218.208.0/22 maxlen: 22
185.249.20.0/22 maxlen: 22
195.135.0.0/17 maxlen: 17
195.135.0.0/18 maxlen: 18
195.135.12.0/23 maxlen: 23
195.135.48.0/20 maxlen: 20
195.135.48.0/24 maxlen: 24
217.74.96.0/20 maxlen: 20
217.181.128.0/17 maxlen: 17
2a02:6e8::/32 maxlen: 32
2a02:c440::/29 maxlen: 29
2a05:5cc0::/29 maxlen: 29
2a0b:e3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:60:5a:37:02:f4:ff:df:82:ec:31:78:be:64:32:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jun 8 13:16:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=528d89517cf463c23b36ee1bb9196e719d05aef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:e2:d7:d0:fe:2c:30:58:e6:1a:51:7d:10:
02:9c:f3:d6:ed:a1:b2:ab:ad:ec:25:11:8d:99:1c:
ae:2a:5d:da:3a:85:12:9b:68:ec:de:0d:2b:50:e9:
9b:2e:a5:08:2b:c2:f2:b4:3f:33:50:e3:06:c9:6a:
7a:6d:0c:ce:9f:d4:6e:fc:8a:39:e4:71:36:38:89:
21:5f:3a:a8:7c:c0:5f:d1:da:c8:45:4f:67:9e:c2:
c1:ff:40:13:e8:f4:f0:74:98:4f:fd:98:87:ad:a6:
77:ab:00:a7:e8:30:ee:3f:b3:0f:0a:da:41:2e:27:
8c:4b:94:10:b4:e8:52:8c:dd:bc:c5:ec:22:7b:a0:
a5:85:19:73:98:59:e0:04:e1:11:9c:9b:43:b5:b2:
29:fc:b3:52:b3:76:e3:f2:17:9c:fc:68:62:5d:5a:
4d:b4:2e:99:a1:91:29:2d:22:5b:d0:d1:bc:cc:7f:
52:79:41:ae:a0:98:04:0a:4d:2a:b6:9d:47:a9:14:
01:44:0e:66:25:84:90:53:25:36:36:11:9d:aa:ee:
76:f5:b5:31:25:11:b1:a1:19:24:70:2b:40:30:8e:
36:35:76:2b:7e:1f:b9:a7:b2:9c:03:7f:b1:93:5f:
e4:7c:d2:25:b0:7f:5f:5e:0d:01:67:81:fe:0d:ae:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8D:89:51:7C:F4:63:C2:3B:36:EE:1B:B9:19:6E:71:9D:05:AE:F2
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/Uo2JUXz0Y8I7Nu4buRlucZ0FrvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.64.0-37.97.111.255
37.139.120.0/21
65.39.64.0/19
80.251.96.0/20
81.93.0.0/19
88.213.224.0/19
155.2.128.0/19
157.143.128.0/17
178.174.96.0/20
178.255.160.0/21
185.6.92.0/22
185.8.252.0/22
185.24.140.0/22
185.32.208.0/22
185.42.176.0/22
185.65.248.0/22
185.76.216.0/22
185.218.208.0/22
185.249.20.0/22
195.135.0.0/17
217.74.96.0/20
217.181.128.0/17
IPv6:
2a02:6e8::/32
2a02:c440::/29
2a05:5cc0::/29
2a0b:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
58:99:f9:4a:ea:44:d3:1b:54:35:72:b3:1e:35:89:ec:92:82:
2c:0e:c7:1e:94:fe:de:a1:b7:b5:06:64:a0:04:f1:70:83:4f:
26:ab:ad:e2:42:48:37:c3:80:88:11:35:cc:da:92:1c:da:33:
2c:3c:87:91:21:58:63:91:3b:96:63:9c:12:6c:4c:1d:e1:fe:
c7:c3:1f:5d:0e:70:c5:ab:09:81:81:5a:86:3d:28:80:e9:c2:
8f:71:b1:bc:bb:1a:43:f6:d4:37:c5:d4:35:31:17:b6:d1:98:
93:c8:d6:cf:68:6c:9a:a1:08:31:c2:b7:54:9d:47:ce:6e:1a:
cd:e4:9c:04:32:17:5e:8d:f0:b7:1b:62:b8:ad:7e:84:a1:03:
c7:57:3b:df:8e:5c:fd:d0:6b:c4:35:e7:1d:6b:af:53:86:3a:
a6:90:f8:14:3b:92:83:fc:b4:d8:ab:4c:ea:2c:0e:bf:5a:63:
bd:f6:55:7a:32:13:36:62:d8:1d:94:53:11:a8:08:ec:71:4b:
1b:4d:1e:03:0c:f2:fd:f6:2a:24:ff:5d:a5:94:b2:06:68:42:
c6:ca:e5:05:2f:ba:76:87:ae:b1:51:12:da:81:d4:8e:11:a6:
12:20:af:85:07:74:5b:97:d8:44:e8:1b:b2:56:ee:4e:03:b2:
4c:e0:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:50 2026 by rpki-client