Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/uq7KjFfupPB_i8cccfycTh05AaQ.roa
File: uq7KjFfupPB_i8cccfycTh05AaQ.roa (raw, json)
Hash identifier: q7ZkYvBa6WisIOhSf12hByjNMV7uSrIgT5csQL8UbvE=
Subject key identifier: BA:AE:CA:8C:57:EE:A4:F0:7F:8B:C7:1C:71:FC:9C:4E:1D:39:01:A4
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 019D6D153705DA03857EDD8CC0EC92D8C65A
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/uq7KjFfupPB_i8cccfycTh05AaQ.roa
Signing time: Wed 08 Apr 2026 12:33:20 +0000
ROA not before: Wed 08 Apr 2026 12:33:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61333
IP address blocks: 94.228.96.0/20 maxlen: 24
94.228.96.0/24 maxlen: 24
94.228.98.0/24 maxlen: 24
94.228.100.0/24 maxlen: 24
94.228.102.0/24 maxlen: 24
94.228.103.0/24 maxlen: 24
94.228.104.0/24 maxlen: 24
94.228.105.0/24 maxlen: 24
94.228.107.0/24 maxlen: 24
94.228.108.0/24 maxlen: 24
94.228.110.0/24 maxlen: 24
149.126.64.0/21 maxlen: 24
149.126.64.0/24 maxlen: 24
149.126.65.0/24 maxlen: 24
149.126.66.0/24 maxlen: 24
149.126.67.0/24 maxlen: 24
149.126.70.0/24 maxlen: 24
185.251.52.0/24 maxlen: 24
185.251.53.0/24 maxlen: 24
185.251.54.0/24 maxlen: 24
193.200.249.0/24 maxlen: 24
194.169.198.0/24 maxlen: 24
2a00:e30::/41 maxlen: 41
2a00:e30:64::/64 maxlen: 64
2a00:e30:80::/41 maxlen: 64
2a00:e30:280::/41 maxlen: 41
2a00:e30:a00::/40 maxlen: 48
2a00:e30:2100::/41 maxlen: 41
2a00:e30:3000::/41 maxlen: 41
2a00:e30:6900::/41 maxlen: 41
2a00:e30:ed00::/41 maxlen: 48
2a0c:15c0:b3::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:15:37:05:da:03:85:7e:dd:8c:c0:ec:92:d8:c6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Apr 8 12:33:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baaeca8c57eea4f07f8bc71c71fc9c4e1d3901a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:53:13:67:2b:16:fb:47:aa:84:ff:fa:24:
cc:09:7f:22:76:8b:d4:31:77:d4:51:87:03:b4:48:
4a:36:48:6f:a7:d2:a8:34:8b:48:62:12:9d:c0:e8:
19:b0:a2:d4:eb:ab:a3:ed:e8:f2:c5:f6:d7:e5:c6:
61:3b:84:85:d1:24:8a:94:2f:0e:04:d0:9b:7f:d7:
9d:af:fb:7d:a3:8d:dc:29:c7:2c:1b:b2:7f:20:be:
0e:5d:78:f4:37:cf:ce:0f:9f:73:3a:da:c2:55:b3:
34:86:79:57:91:71:81:19:8c:e0:2d:75:d7:81:2d:
dd:1a:6b:c7:58:dd:5f:73:43:7c:fb:6e:30:cb:a8:
bf:b1:2a:ba:a5:30:80:15:68:04:1c:c7:54:12:11:
75:14:19:75:5c:9d:36:cc:95:24:44:09:cd:56:b3:
da:8b:2f:d8:0a:33:63:8d:32:ce:1c:1c:16:4a:a0:
33:2f:e3:14:dc:0e:6f:ef:c1:19:1d:aa:4c:17:fb:
75:ee:ed:93:e2:e5:2f:2b:1a:ef:96:7f:3e:1f:64:
61:ff:a5:85:d0:41:f6:92:cc:66:e6:57:c0:8a:e9:
b4:52:44:1c:38:0c:14:4f:90:e4:ae:75:fe:ef:7b:
df:c5:f2:37:b0:f8:5e:6d:7f:15:5f:7b:63:7f:dd:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:CA:8C:57:EE:A4:F0:7F:8B:C7:1C:71:FC:9C:4E:1D:39:01:A4
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/uq7KjFfupPB_i8cccfycTh05AaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.96.0/20
149.126.64.0/21
185.251.52.0-185.251.54.255
193.200.249.0/24
194.169.198.0/24
IPv6:
2a00:e30::/40
2a00:e30:280::/41
2a00:e30:a00::/40
2a00:e30:2100::/41
2a00:e30:3000::/41
2a00:e30:6900::/41
2a00:e30:ed00::/41
2a0c:15c0:b3::/48
Signature Algorithm: sha256WithRSAEncryption
25:b6:2a:44:b1:cd:06:90:db:76:31:fb:0a:d6:db:be:11:45:
a3:e3:f3:bf:16:85:50:2c:a5:bb:13:1f:94:b9:5e:44:87:58:
8b:b1:49:70:17:08:48:1b:f8:0a:7a:d0:c8:f6:06:91:0a:d9:
c8:8d:9a:21:70:f6:c6:5a:9a:94:24:fe:6b:82:36:2e:5b:9f:
ad:35:c3:73:3b:ba:e2:a3:39:f9:ba:d5:ec:f0:47:27:9b:f0:
d2:b1:80:94:98:cb:43:53:d7:16:0e:fb:6c:b6:f2:fc:2c:84:
b8:cf:ee:8d:7b:a6:66:17:42:b6:31:b1:34:8c:7f:04:65:a3:
9e:0a:0d:31:14:bd:53:34:47:05:3f:4a:71:00:65:9b:df:73:
01:7c:b2:f7:70:4a:de:a5:dd:d1:02:47:76:7f:0e:0b:80:64:
36:2f:64:52:44:cf:f9:ce:07:94:22:67:11:7d:8c:90:c2:e1:
76:7e:97:01:f3:94:5e:67:72:f3:c0:0b:45:ed:84:a4:00:52:
8d:f4:e1:21:02:dd:e4:6a:8c:fc:4e:11:da:ae:aa:20:45:9d:
0e:9c:9e:16:f8:81:bd:dc:4b:c7:db:ab:92:f2:b3:f0:d0:e9:
af:cb:b1:00:f7:55:5d:bf:bf:c7:d2:13:4f:80:5a:7a:b2:bc:
0b:a9:f7:4b
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZ1tFTcF2gOFft2MwOyS2MZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh
YWNhN2IwHhcNMjYwNDA4MTIzMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWFlY2E4YzU3ZWVhNGYwN2Y4YmM3MWM3MWZjOWM0ZTFkMzkwMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BZTE2crFvtHqoT/+iTMCX8idovU
MXfUUYcDtEhKNkhvp9KoNItIYhKdwOgZsKLU66uj7ejyxfbX5cZhO4SF0SSKlC8O
BNCbf9edr/t9o43cKccsG7J/IL4OXXj0N8/OD59zOtrCVbM0hnlXkXGBGYzgLXXX
gS3dGmvHWN1fc0N8+24wy6i/sSq6pTCAFWgEHMdUEhF1FBl1XJ02zJUkRAnNVrPa
iy/YCjNjjTLOHBwWSqAzL+MU3A5v78EZHapMF/t17u2T4uUvKxrvln8+H2Rh/6WF
0EH2ksxm5lfAium0UkQcOAwUT5DkrnX+73vfxfI3sPhebX8VX3tjf91R0QIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFLquyoxX7qTwf4vHHHH8nE4dOQGkMB8GA1UdIwQY
MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt
ODFjOGNlNzUwMTI0LzEvdXE3S2pGZnVwUEJfaThjY2NmeWNUaDA1QWFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0
LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwLAQCAAEwJgMEBF7kYAME
A5V+QDAMAwQCufs0AwQAufs2AwQAwcj5AwQAwqnGMEwEAgACMEYDBgAqAA4wAAMH
ByoADjACgAMGACoADjAKAwcHKgAOMCEAAwcHKgAOMDAAAwcHKgAOMGkAAwcHKgAO
MO0AAwcAKgwVwACzMA0GCSqGSIb3DQEBCwUAA4IBAQAltipEsc0GkNt2MfsK1tu+
EUWj4/O/FoVQLKW7Ex+UuV5Eh1iLsUlwFwhIG/gKetDI9gaRCtnIjZohcPbGWpqU
JP5rgjYuW5+tNcNzO7riozn5utXs8Ecnm/DSsYCUmMtDU9cWDvtstvL8LIS4z+6N
e6ZmF0K2MbE0jH8EZaOeCg0xFL1TNEcFP0pxAGWb33MBfLL3cErepd3RAkd2fw4L
gGQ2L2RSRM/5zgeUImcRfYyQwuF2fpcB85ReZ3LzwAtF7YSkAFKN9OEhAt3kaoz8
ThHarqogRZ0OnJ4W+IG93EvH26uS8rPw0Omvy7EA91Vdv7/H0hNPgFp6srwLqfdL
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:16 2026 by rpki-client