Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/ubR51Cds4Cu-cq4s4-SnRZtsMzk.roa
File: ubR51Cds4Cu-cq4s4-SnRZtsMzk.roa (raw, json)
Hash identifier: lQGmHvc7ptwlwlQV951AxPWOdv5pPFuaggIkamXjk7Y=
Subject key identifier: B9:B4:79:D4:27:6C:E0:2B:BE:72:AE:2C:E3:E4:A7:45:9B:6C:33:39
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 019B7E385166F2FF45250C25C989BC9149EA
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/ubR51Cds4Cu-cq4s4-SnRZtsMzk.roa
Signing time: Fri 02 Jan 2026 10:19:38 +0000
ROA not before: Fri 02 Jan 2026 10:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202617
IP address blocks: 84.247.18.0/24 maxlen: 24
93.113.103.0/24 maxlen: 24
93.113.109.0/24 maxlen: 24
104.249.12.0/22 maxlen: 24
185.159.0.0/22 maxlen: 22
185.159.0.0/24 maxlen: 24
185.159.1.0/24 maxlen: 24
185.159.2.0/24 maxlen: 24
185.216.12.0/24 maxlen: 24
185.254.65.0/24 maxlen: 24
2a07:b0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:51:66:f2:ff:45:25:0c:25:c9:89:bc:91:49:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Jan 2 10:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9b479d4276ce02bbe72ae2ce3e4a7459b6c3339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:82:a6:3a:2f:3d:9a:54:ca:12:47:10:e8:
ae:fe:80:cc:4e:3a:60:0d:7a:f1:ae:9a:e1:f3:8d:
89:7a:bc:ba:d3:9b:67:3f:9f:ce:39:6e:3d:cb:5b:
7e:0f:a6:65:94:27:83:b4:2d:fd:fa:b7:53:83:bf:
be:b5:58:06:37:91:00:06:af:cd:8f:2b:20:4e:13:
ea:f8:70:e8:e7:0c:62:f1:ba:93:ab:ee:66:c4:4f:
c6:98:4f:41:22:64:79:7e:6e:83:8d:08:e8:5f:77:
12:cb:95:d3:11:ee:41:b9:ba:99:d8:1e:2b:05:2b:
03:ba:e1:42:26:01:35:94:1c:68:9c:05:52:1b:1a:
a6:d7:34:45:b5:65:c8:23:cb:e5:69:ec:ab:69:24:
41:97:f7:9b:5b:a8:63:a0:8a:8e:2c:7b:20:d2:75:
ee:3b:e0:31:77:d4:fd:0c:27:f6:89:90:aa:bf:9d:
58:41:30:30:96:c1:f6:76:88:96:4e:83:5b:99:82:
56:f2:09:cd:9b:81:91:6a:5e:97:92:5a:54:20:3d:
f0:63:e3:66:e9:32:d6:e9:d1:a6:83:e3:b7:ed:7e:
f3:ad:2c:b3:09:5e:83:cd:3b:c9:7d:0f:53:06:c7:
e0:d1:4e:20:c8:55:a8:12:c8:2f:20:7b:64:ca:fa:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:79:D4:27:6C:E0:2B:BE:72:AE:2C:E3:E4:A7:45:9B:6C:33:39
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/ubR51Cds4Cu-cq4s4-SnRZtsMzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.18.0/24
93.113.103.0/24
93.113.109.0/24
104.249.12.0/22
185.159.0.0/22
185.216.12.0/24
185.254.65.0/24
IPv6:
2a07:b0c0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:a7:23:d4:13:02:97:9b:c9:cd:1b:0e:98:96:b4:d4:6d:a9:
f9:72:79:de:3b:d2:f8:a2:4b:cf:36:4f:40:ec:b1:4d:4b:61:
0e:46:a6:e6:b1:38:38:a1:b4:bb:2b:6e:37:79:1e:96:f6:26:
56:18:cf:97:2c:21:98:eb:c1:45:68:da:b1:94:d7:d0:57:02:
02:48:08:3d:85:f4:0a:dd:7b:34:44:ed:85:f3:07:f5:f9:1a:
bf:41:53:56:1f:9d:32:a5:b6:33:59:f8:f9:28:5c:1f:18:50:
55:11:f0:9b:50:c5:1c:09:e0:5a:81:cc:c1:6a:2b:01:cb:bd:
e8:28:c1:8d:81:f9:a2:f0:98:9b:f9:7c:d1:17:5b:9d:33:cf:
22:63:28:b2:16:16:08:3c:12:e2:7c:14:37:24:26:48:81:97:
19:cf:8c:0c:1e:a1:3a:08:a9:12:07:c6:63:53:2c:be:b6:73:
f0:81:f0:79:78:83:35:53:70:fe:0f:a4:08:d9:df:c3:b0:b5:
b6:1a:c0:13:cb:60:81:43:53:b9:e3:32:cc:a0:5b:0d:07:c5:
79:ff:e9:1f:13:59:18:af:b6:c0:7b:a0:9d:6c:78:d7:cc:fa:
e6:57:f2:7b:da:29:54:5a:19:98:0f:a8:6c:c2:ed:c2:c6:3f:
a7:68:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:34:51 2026 by rpki-client