Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/uMnJj4Kab9KmIMtIa8uhtAc_DQE.roa
File: uMnJj4Kab9KmIMtIa8uhtAc_DQE.roa (raw, json)
Hash identifier: bAuyBKfbvWqtTPfDZHAOIs7YLPDKAsuglDNhJoyryV0=
Subject key identifier: B8:C9:C9:8F:82:9A:6F:D2:A6:20:CB:48:6B:CB:A1:B4:07:3F:0D:01
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 01A09CC84BF9F9CA0ACB985540567B3D3764
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/uMnJj4Kab9KmIMtIa8uhtAc_DQE.roa
Signing time: Sun 13 Sep 2026 21:59:27 +0000
ROA not before: Sun 13 Sep 2026 21:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44901
IP address blocks: 85.137.18.0/24 maxlen: 24
85.137.19.0/24 maxlen: 24
85.217.170.0/24 maxlen: 24
85.217.171.0/24 maxlen: 24
88.80.145.0/24 maxlen: 24
88.80.146.0/24 maxlen: 24
88.80.147.0/24 maxlen: 24
88.80.148.0/24 maxlen: 24
88.80.149.0/24 maxlen: 24
88.80.150.0/24 maxlen: 24
88.80.151.0/24 maxlen: 24
91.92.108.0/24 maxlen: 24
91.92.111.0/24 maxlen: 24
91.92.120.0/24 maxlen: 24
91.92.128.0/24 maxlen: 24
91.92.136.0/24 maxlen: 24
91.92.137.0/24 maxlen: 24
91.92.144.0/24 maxlen: 24
94.156.35.0/24 maxlen: 24
94.156.144.0/24 maxlen: 24
94.156.189.0/24 maxlen: 24
103.197.149.0/24 maxlen: 24
103.197.151.0/24 maxlen: 24
185.141.61.0/24 maxlen: 24
185.141.62.0/24 maxlen: 24
185.141.63.0/24 maxlen: 24
185.203.116.0/24 maxlen: 24
185.203.117.0/24 maxlen: 24
185.203.118.0/24 maxlen: 24
185.203.119.0/24 maxlen: 24
185.205.209.0/24 maxlen: 24
185.205.210.0/24 maxlen: 24
185.206.144.0/24 maxlen: 24
185.206.145.0/24 maxlen: 24
185.206.146.0/24 maxlen: 24
185.206.147.0/24 maxlen: 24
193.37.212.0/24 maxlen: 24
193.37.213.0/24 maxlen: 24
193.37.214.0/24 maxlen: 24
193.37.215.0/24 maxlen: 24
212.73.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:c8:4b:f9:f9:ca:0a:cb:98:55:40:56:7b:3d:37:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Sep 13 21:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8c9c98f829a6fd2a620cb486bcba1b4073f0d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:b4:1a:ed:bd:c4:9b:06:82:8d:8e:a5:96:
2f:de:18:ac:b2:44:6e:4e:25:a2:6d:a8:3a:d2:46:
ea:0b:0d:53:96:93:ca:93:e0:27:63:e7:b4:53:a6:
71:b7:a4:27:cb:8e:af:f6:4a:5c:4c:92:f1:b2:40:
42:d6:58:04:43:69:c9:42:96:5f:7d:b0:7c:c0:4a:
a3:15:b0:53:cc:fb:90:7b:a7:9c:4f:57:8d:ea:97:
08:b1:a8:a9:35:53:ec:d4:4a:a0:9e:c3:82:0f:94:
22:8f:1b:d4:0f:cf:fe:f8:00:4e:87:14:4e:dd:ba:
0c:4a:2d:47:2e:80:ac:71:6d:c7:6c:1c:c8:52:73:
94:55:2a:61:cb:3e:e0:da:7d:36:f9:46:e9:c5:0c:
a0:97:28:62:c0:ea:98:b8:ef:7f:fb:0c:be:d2:76:
c5:aa:fc:54:83:8a:5a:ab:4f:9a:7b:5a:24:21:13:
b8:42:26:20:2b:d2:09:ee:64:aa:37:94:9e:ab:33:
0b:fa:ff:36:14:93:a4:d9:1e:71:5d:2d:2d:2d:7a:
71:f6:d5:0a:b0:25:2b:3c:a0:5d:28:c6:19:5d:d0:
04:9f:c4:9e:b1:9d:f6:d3:88:cb:fa:bd:02:c8:f4:
2b:03:64:08:12:6b:a3:c6:8f:28:ac:fe:5f:6b:ec:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C9:C9:8F:82:9A:6F:D2:A6:20:CB:48:6B:CB:A1:B4:07:3F:0D:01
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/uMnJj4Kab9KmIMtIa8uhtAc_DQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.18.0/23
85.217.170.0/23
88.80.145.0-88.80.151.255
91.92.108.0/24
91.92.111.0/24
91.92.120.0/24
91.92.128.0/24
91.92.136.0/23
91.92.144.0/24
94.156.35.0/24
94.156.144.0/24
94.156.189.0/24
103.197.149.0/24
103.197.151.0/24
185.141.61.0-185.141.63.255
185.203.116.0/22
185.205.209.0-185.205.210.255
185.206.144.0/22
193.37.212.0/22
212.73.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:04:1a:64:0e:a4:22:ad:e5:b1:e5:8a:65:2b:2d:09:93:4b:
6a:82:c5:0b:8b:89:fd:08:18:50:5d:51:7e:43:6f:17:bb:e4:
57:4e:6e:e3:81:32:d8:e9:63:4a:22:18:7e:01:5d:3b:d5:44:
f5:70:a8:a8:0d:65:26:c1:78:50:f6:08:24:a0:cd:60:0e:4f:
a5:54:cb:21:99:f9:e5:43:12:89:a4:07:c0:2a:c4:d2:68:00:
0c:98:d0:0c:e2:94:8b:a2:d0:ee:e7:6d:3e:58:6a:2c:11:83:
e3:a9:ac:9f:89:d0:8c:04:e3:79:e1:42:ff:f4:b3:19:da:e4:
19:ce:b2:ca:3d:43:64:da:7b:c9:71:3a:c0:6b:b7:cc:aa:b6:
7b:38:b6:16:50:f5:26:5d:68:4d:06:f2:14:20:c6:37:5b:0c:
e0:68:52:01:36:f7:69:62:db:46:73:fe:1c:f5:10:c3:8d:cc:
17:14:36:00:2c:f9:b8:b0:ee:d7:05:a9:f7:9b:10:e0:25:a8:
4a:5e:1d:73:15:32:23:b4:39:44:e2:2c:1b:70:92:2d:d9:3a:
96:0e:14:10:6e:f0:c2:48:05:ac:19:b7:33:aa:a5:5d:2f:34:
78:16:c4:e4:8a:89:a1:c3:3b:ae:49:bd:4b:af:7d:d8:98:5f:
15:7e:6b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:49 2026 by rpki-client