Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/UJf4_P_HgJzabu0LnEclJumCjc8.roa
File: UJf4_P_HgJzabu0LnEclJumCjc8.roa (raw, json)
Hash identifier: VSvI1FeKgDQdCR70tOpSWEeSm4kYs6wd4/52sT1ucD8=
Subject key identifier: 50:97:F8:FC:FF:C7:80:9C:DA:6E:ED:0B:9C:47:25:26:E9:82:8D:CF
Certificate issuer: /CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Certificate serial: 019B7EA56C74A5CD6157BE7AE6E93ECE501E
Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/UJf4_P_HgJzabu0LnEclJumCjc8.roa
Signing time: Fri 02 Jan 2026 12:18:49 +0000
ROA not before: Fri 02 Jan 2026 12:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206672
IP address blocks: 185.179.60.0/22 maxlen: 22
185.179.60.0/24 maxlen: 24
185.179.61.0/24 maxlen: 24
185.179.62.0/24 maxlen: 24
185.179.63.0/24 maxlen: 24
2a0a:7c80::/32 maxlen: 32
2a0a:7c80::/38 maxlen: 38
2a0a:7c80:400::/38 maxlen: 38
2a0a:7c80:800::/38 maxlen: 38
2a0a:7c80:c00::/38 maxlen: 38
2a0a:7c80:1000::/38 maxlen: 38
2a0a:7c80:1400::/38 maxlen: 38
2a0a:7c80:1800::/38 maxlen: 38
2a0a:7c80:1c00::/38 maxlen: 38
2a0a:7c80:2000::/38 maxlen: 38
2a0a:7c80:2400::/38 maxlen: 38
2a0a:7c80:2800::/38 maxlen: 38
2a0a:7c80:2c00::/38 maxlen: 38
2a0a:7c80:3000::/38 maxlen: 38
2a0a:7c80:3400::/38 maxlen: 38
2a0a:7c80:3800::/38 maxlen: 38
2a0a:7c80:3c00::/38 maxlen: 38
2a0a:7c80:4000::/38 maxlen: 38
2a0a:7c80:4400::/38 maxlen: 38
2a0a:7c80:4800::/38 maxlen: 38
2a0a:7c80:4c00::/38 maxlen: 38
2a0a:7c80:5000::/38 maxlen: 38
2a0a:7c80:5400::/38 maxlen: 38
2a0a:7c80:5800::/38 maxlen: 38
2a0a:7c80:5c00::/38 maxlen: 38
2a0a:7c80:6000::/38 maxlen: 38
2a0a:7c80:6400::/38 maxlen: 38
2a0a:7c80:6800::/38 maxlen: 38
2a0a:7c80:6c00::/38 maxlen: 38
2a0a:7c80:7000::/38 maxlen: 38
2a0a:7c80:7400::/38 maxlen: 38
2a0a:7c80:7800::/38 maxlen: 38
2a0a:7c80:7c00::/38 maxlen: 38
2a0a:7c80:8000::/38 maxlen: 38
2a0a:7c80:8400::/38 maxlen: 38
2a0a:7c80:8800::/38 maxlen: 38
2a0a:7c80:8c00::/38 maxlen: 38
2a0a:7c80:9000::/38 maxlen: 38
2a0a:7c80:9400::/38 maxlen: 38
2a0a:7c80:9800::/38 maxlen: 38
2a0a:7c80:9c00::/38 maxlen: 38
2a0a:7c80:a000::/38 maxlen: 38
2a0a:7c80:a400::/38 maxlen: 38
2a0a:7c80:a800::/38 maxlen: 38
2a0a:7c80:ac00::/38 maxlen: 38
2a0a:7c80:b000::/38 maxlen: 38
2a0a:7c80:b400::/38 maxlen: 38
2a0a:7c80:b800::/38 maxlen: 38
2a0a:7c80:bc00::/38 maxlen: 38
2a0a:7c80:c000::/38 maxlen: 38
2a0a:7c80:c400::/38 maxlen: 38
2a0a:7c80:c800::/38 maxlen: 38
2a0a:7c80:cc00::/38 maxlen: 38
2a0a:7c80:d000::/38 maxlen: 38
2a0a:7c80:d400::/38 maxlen: 38
2a0a:7c80:d800::/38 maxlen: 38
2a0a:7c80:dc00::/38 maxlen: 38
2a0a:7c80:e000::/38 maxlen: 38
2a0a:7c80:e400::/38 maxlen: 38
2a0a:7c80:e800::/38 maxlen: 38
2a0a:7c80:ec00::/38 maxlen: 38
2a0a:7c80:f000::/38 maxlen: 38
2a0a:7c80:f400::/38 maxlen: 38
2a0a:7c80:f800::/38 maxlen: 38
2a0a:7c80:fc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:6c:74:a5:cd:61:57:be:7a:e6:e9:3e:ce:50:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Validity
Not Before: Jan 2 12:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5097f8fcffc7809cda6eed0b9c472526e9828dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:6b:0d:fa:3c:7a:45:12:73:c0:12:a8:cf:
36:84:63:3c:96:e2:3a:fb:6c:33:76:4f:4c:74:d5:
3d:e1:b5:7c:d2:3f:c3:c9:50:b6:83:a6:e4:4f:2d:
cc:98:59:ae:0e:57:5b:79:f2:7b:94:08:6f:b7:f0:
90:02:5c:c7:13:46:ba:5e:a2:32:b8:8f:e1:92:06:
bb:f3:61:55:91:ce:a3:99:99:84:87:79:a6:d8:5e:
e3:e5:cb:cf:9f:da:4e:a6:18:de:a7:6f:56:41:0f:
f2:32:ba:34:33:04:0f:1e:5f:9f:11:fd:64:91:bc:
a2:e6:3b:20:2f:21:14:22:0d:86:88:e6:32:f5:bb:
8a:42:fd:f6:2e:8c:87:54:94:85:5e:6e:cf:74:55:
3a:7a:f4:70:00:ec:77:44:e6:53:22:d3:6b:0a:bb:
21:31:04:bb:d1:be:90:88:7c:8a:c2:a6:7f:a8:b2:
2b:7e:cf:d3:61:2b:68:4e:d1:00:25:9c:b7:97:5f:
c3:68:f0:d8:f7:55:2e:a5:a9:fb:13:64:30:6e:ae:
eb:10:d9:1f:e8:cc:3f:20:7b:64:dd:c6:6f:c4:53:
e2:d4:2c:0d:fd:98:e2:eb:bf:81:51:6c:ab:b1:50:
fb:e7:46:12:6a:1c:b3:35:fa:d6:61:13:b6:48:92:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:97:F8:FC:FF:C7:80:9C:DA:6E:ED:0B:9C:47:25:26:E9:82:8D:CF
X509v3 Authority Key Identifier:
keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/UJf4_P_HgJzabu0LnEclJumCjc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.60.0/22
IPv6:
2a0a:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
c2:03:53:cc:f7:60:22:39:94:8a:cd:c3:c3:a1:cb:40:4c:5d:
ea:56:cc:03:0b:82:6c:2a:c6:92:5a:58:52:92:67:e0:4f:21:
c2:b8:e7:07:dc:72:d3:b2:d3:33:99:bb:cd:17:b2:ce:6b:40:
51:56:19:d4:70:0c:bd:bf:b4:db:46:69:04:53:e8:e3:1a:a4:
b7:be:dc:e2:f1:b1:c6:07:c6:88:06:6f:84:c9:76:ed:92:85:
f0:b7:fa:ec:2b:39:7d:89:31:7e:48:37:9e:fd:a0:b4:25:c7:
3d:2c:9c:c3:de:cc:df:2d:35:45:06:28:98:a0:6b:a0:8f:a1:
d2:64:c7:1f:17:f0:29:db:09:10:ee:c2:7a:1f:aa:47:ea:df:
e8:77:a7:3e:8a:f8:62:1a:66:79:db:2f:cb:71:54:d3:a3:80:
13:ad:27:a0:cf:ef:b2:ca:a6:b7:d4:b5:02:d5:7b:3c:c0:49:
c6:65:26:a3:89:74:a3:4c:00:1f:8a:0e:04:30:0a:44:b6:83:
f3:d8:70:c0:ca:b7:76:e4:6a:3c:c9:4a:00:e7:c7:5a:42:d8:
31:0a:4b:99:c4:f1:fe:a9:0c:b7:72:2c:8b:ee:fe:0e:bc:c3:
1c:6b:0c:20:02:9c:55:00:cc:22:5a:66:34:d5:90:2e:93:9a:
aa:6e:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:10:02 2026 by rpki-client