Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/uJBEE_V-XySNZJVnv9GLJuTx_2w.roa
File: uJBEE_V-XySNZJVnv9GLJuTx_2w.roa (raw, json)
Hash identifier: GOI6uEmzJlEjER1Fd4J3Pd/ZeUVtW95xl5189j/+/uI=
Subject key identifier: B8:90:44:13:F5:7E:5F:24:8D:64:95:67:BF:D1:8B:26:E4:F1:FF:6C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019C1E38E3F5AB720C3E954831F873016BE0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/uJBEE_V-XySNZJVnv9GLJuTx_2w.roa
Signing time: Mon 02 Feb 2026 11:59:30 +0000
ROA not before: Mon 02 Feb 2026 11:59:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31479
IP address blocks: 49.0.184.0/21 maxlen: 21
80.66.116.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
185.28.48.0/23 maxlen: 23
201.77.58.0/24 maxlen: 24
206.203.0.0/18 maxlen: 18
206.203.0.0/19 maxlen: 19
206.203.16.0/21 maxlen: 21
206.203.32.0/19 maxlen: 19
213.236.16.0/22 maxlen: 22
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:38:e3:f5:ab:72:0c:3e:95:48:31:f8:73:01:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 2 11:59:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8904413f57e5f248d649567bfd18b26e4f1ff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:31:a3:83:5c:96:b9:3d:32:ce:b3:f2:94:
20:b8:bd:5f:90:c1:ce:d9:e3:27:eb:87:82:31:83:
8b:8a:cf:cd:78:e5:c2:a6:1c:83:52:56:fe:b8:28:
e9:43:ef:9c:55:a5:e4:8e:c3:9c:f8:68:f2:b1:6a:
d0:5b:6b:97:06:21:0b:c1:f8:ce:8d:df:2a:9b:af:
2e:73:7e:cc:f4:22:d9:0e:0d:03:ff:d5:1d:c3:49:
33:af:0b:aa:67:0f:e2:27:ce:30:45:14:c2:34:14:
98:80:89:84:8a:39:a5:c8:17:68:db:aa:aa:6d:ed:
63:d2:03:4f:0d:05:c4:b0:de:35:43:2f:c6:2c:22:
6d:8c:49:bc:9e:d9:08:5e:b8:b5:1e:2c:35:7c:ce:
65:5c:0b:a8:d8:3c:3d:9c:0d:bd:79:1f:6e:3b:7a:
bd:be:ff:2f:da:ad:f4:b6:35:29:3f:ed:ed:0c:99:
1e:6d:31:cd:81:fa:93:a8:d8:d6:2a:01:86:ba:39:
07:9e:06:2a:31:49:b2:e7:c6:3a:96:81:16:49:6a:
d9:d7:b2:e1:30:74:6b:9c:aa:73:67:52:1e:47:c7:
9a:6f:a5:68:b8:05:d0:e3:fc:21:f3:4a:f4:60:9f:
1c:41:9b:63:77:17:68:01:42:db:3f:77:f4:1c:64:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:44:13:F5:7E:5F:24:8D:64:95:67:BF:D1:8B:26:E4:F1:FF:6C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/uJBEE_V-XySNZJVnv9GLJuTx_2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.0.184.0/21
80.66.116.0/24
94.198.46.0/24
178.19.32.0/23
185.28.48.0/23
201.77.58.0/24
206.203.0.0/18
213.236.16.0/22
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
a5:7e:4c:e4:da:9c:ea:38:21:80:ef:72:40:31:b5:31:72:3a:
67:81:c7:b4:8c:19:18:a1:13:90:49:1f:58:a4:fb:fe:c1:da:
85:ec:23:36:04:ba:2e:ff:5c:ac:b9:92:aa:a9:ea:7d:df:5d:
5d:9a:36:95:be:31:1c:c0:1d:d9:44:2b:9e:75:49:98:90:21:
e6:ff:5c:8d:8c:e0:1d:33:0f:31:c8:c5:7a:a1:79:a1:e5:51:
66:c6:48:e9:75:ea:82:18:b1:0f:38:25:e4:b5:3e:35:e5:31:
71:8c:60:02:0d:d2:9e:85:06:97:12:3b:87:2a:a0:07:4d:fd:
01:a6:65:60:8e:27:b6:6a:59:85:9e:3e:ef:24:f5:d0:8e:59:
76:4d:b1:c8:f3:62:34:81:07:60:8c:cc:0f:b9:c6:1d:a3:40:
7f:5c:5d:05:4f:28:10:02:60:ad:3f:97:8b:30:f7:84:cc:9b:
c4:09:cd:6d:b9:12:5b:bd:ba:7b:1c:7a:7a:18:dd:12:98:d2:
3d:7b:97:eb:7c:5f:f5:ce:d2:a4:de:32:63:d3:15:52:c3:a6:
fc:9e:46:82:ab:a0:22:8f:17:9e:3c:b6:92:f6:eb:a5:e5:eb:
de:5b:c9:40:3d:83:3f:f8:1d:fa:d1:09:68:98:ea:07:03:36:
3d:bc:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:03 2026 by rpki-client