Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/uKWnz8_LcW_aNSrzf71no4gpaHo.roa
File: uKWnz8_LcW_aNSrzf71no4gpaHo.roa (raw, json)
Hash identifier: J7oKnwSHKrSta4NBW2liWqaQzZeozN70ItapCRa9dC0=
Subject key identifier: B8:A5:A7:CF:CF:CB:71:6F:DA:35:2A:F3:7F:BD:67:A3:88:29:68:7A
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 01A08296FAA9CA8A42219EED341ABF63D9DC
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/uKWnz8_LcW_aNSrzf71no4gpaHo.roa
Signing time: Tue 08 Sep 2026 19:55:27 +0000
ROA not before: Tue 08 Sep 2026 19:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59395
IP address blocks: 5.133.16.0/21 maxlen: 21
46.31.80.0/21 maxlen: 21
46.31.168.0/21 maxlen: 21
46.231.64.0/21 maxlen: 21
82.144.224.0/19 maxlen: 19
82.215.0.0/18 maxlen: 18
87.238.216.0/21 maxlen: 21
89.105.0.0/19 maxlen: 19
89.105.25.0/24 maxlen: 24
109.235.120.0/21 maxlen: 21
109.235.127.0/24 maxlen: 24
185.7.188.0/22 maxlen: 22
185.36.248.0/22 maxlen: 22
185.45.24.0/22 maxlen: 22
185.63.80.0/22 maxlen: 22
185.65.24.0/22 maxlen: 22
185.74.232.0/21 maxlen: 21
185.74.232.0/22 maxlen: 22
185.74.236.0/22 maxlen: 22
185.109.104.0/22 maxlen: 22
185.109.106.0/24 maxlen: 24
185.109.107.0/24 maxlen: 24
185.159.216.0/22 maxlen: 22
185.175.112.0/22 maxlen: 22
217.119.128.0/24 maxlen: 24
217.119.137.0/24 maxlen: 24
2a00:11f0::/32 maxlen: 32
2a02:73c0::/32 maxlen: 32
2a05:4b80::/29 maxlen: 29
2a05:4bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:96:fa:a9:ca:8a:42:21:9e:ed:34:1a:bf:63:d9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Sep 8 19:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8a5a7cfcfcb716fda352af37fbd67a38829687a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:e8:07:33:71:3a:ac:87:1e:9f:5e:8e:21:
95:d4:ec:c8:31:ee:70:54:62:44:4e:20:62:b4:19:
1a:e6:16:2b:6e:a9:d7:10:40:9b:13:27:a2:1c:3b:
cc:e9:64:68:1f:59:6e:14:e4:1f:b1:7f:9f:8f:e8:
85:ea:fd:be:96:33:c0:20:fd:ba:15:89:06:bd:e2:
99:52:f1:20:8c:62:02:76:ac:8d:02:24:21:8a:7a:
9e:c6:d1:53:b4:a3:d6:ae:21:ed:95:f1:51:d4:ac:
c0:4d:50:09:55:b5:ad:43:62:ed:e5:8b:7c:e3:0e:
59:78:f4:d2:ad:a9:d9:da:b0:8b:f0:8c:7f:ee:58:
36:86:3b:78:a7:8f:d8:7f:68:0d:10:1e:0c:5c:27:
df:ce:82:5b:28:79:ae:db:00:20:e3:8e:19:6e:93:
c7:f8:96:ab:a6:cf:7a:f7:e5:f9:56:3c:8d:e6:a2:
2c:99:33:77:7f:65:d3:49:fb:46:11:07:dc:2c:82:
e8:f2:16:3f:5f:ac:58:b2:82:37:0e:2f:81:59:4d:
35:b5:ef:97:35:0c:9b:2d:e2:1e:f2:1c:22:b7:98:
94:bd:99:2d:f7:38:65:b5:bd:d5:a3:99:02:be:7c:
94:06:e0:44:61:af:be:2d:c3:9c:d8:5f:43:60:60:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A5:A7:CF:CF:CB:71:6F:DA:35:2A:F3:7F:BD:67:A3:88:29:68:7A
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/uKWnz8_LcW_aNSrzf71no4gpaHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.16.0/21
46.31.80.0/21
46.31.168.0/21
46.231.64.0/21
82.144.224.0/19
82.215.0.0/18
87.238.216.0/21
89.105.0.0/19
109.235.120.0/21
185.7.188.0/22
185.36.248.0/22
185.45.24.0/22
185.63.80.0/22
185.65.24.0/22
185.74.232.0/21
185.109.104.0/22
185.159.216.0/22
185.175.112.0/22
217.119.128.0/24
217.119.137.0/24
IPv6:
2a00:11f0::/32
2a02:73c0::/32
2a05:4b80::/29
2a05:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
87:60:32:7e:e3:79:41:89:8f:04:76:bb:cd:f6:9e:4d:c9:df:
88:b7:73:f6:88:c4:96:00:ff:66:16:1f:46:49:e4:4d:98:2f:
2e:76:cf:1e:8d:c9:88:3e:51:78:a5:02:3f:19:fb:e8:8e:75:
88:7c:b9:56:0c:78:2d:11:07:68:6a:78:cc:1b:6c:eb:ba:2a:
b8:35:ad:74:d1:57:f4:f9:ac:2d:55:a8:20:ce:07:3c:be:46:
43:01:ae:0d:ce:15:2a:7d:b8:a8:2c:54:74:de:06:e9:bc:c0:
bc:f2:e1:a4:90:a7:44:f2:ac:3d:41:6b:5a:84:51:0f:4c:0c:
62:0c:74:d2:6f:16:02:81:ac:60:5c:8e:a7:11:f2:53:61:9d:
1c:f9:31:5f:1e:13:7f:07:59:4d:3c:a0:6a:5c:ea:6c:52:48:
5e:90:fa:ee:d2:e0:47:e8:e2:13:bb:2a:15:6f:8c:5a:a8:91:
bb:ec:67:0c:47:59:67:9b:12:15:46:5d:a0:c6:8b:f0:92:79:
e5:10:c7:c2:e3:db:fe:90:54:33:d5:5f:c2:9d:8b:de:cb:e1:
ee:d8:c3:28:cc:28:d5:4d:de:c2:79:af:9c:c8:0c:3f:94:b1:
04:92:3a:1a:b5:45:39:24:6e:15:a6:68:43:e5:89:71:a7:ba:
11:cd:6e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:23 2026 by rpki-client