Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/wyVwViD6OFO9yJjbf0h1g5cFqQY.roa
File: wyVwViD6OFO9yJjbf0h1g5cFqQY.roa (raw, json)
Hash identifier: CrQ4iuhyJ0oAhIIFh/rkGOWZ0gSsnx159Ihl2XxcKi0=
Subject key identifier: C3:25:70:56:20:FA:38:53:BD:C8:98:DB:7F:48:75:83:97:05:A9:06
Certificate issuer: /CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Certificate serial: 019F2369200FC27200964E850DDD7FA7FC9E
Authority key identifier: A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/wyVwViD6OFO9yJjbf0h1g5cFqQY.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197308
IP address blocks: 5.179.112.0/21 maxlen: 21
31.216.32.0/21 maxlen: 21
81.91.0.0/20 maxlen: 20
176.57.88.0/22 maxlen: 22
185.21.144.0/22 maxlen: 22
185.27.240.0/22 maxlen: 22
193.108.0.0/21 maxlen: 21
193.108.0.0/24 maxlen: 24
193.108.1.0/24 maxlen: 24
193.108.2.0/23 maxlen: 23
193.108.4.0/24 maxlen: 24
193.108.5.0/24 maxlen: 24
193.108.6.0/24 maxlen: 24
213.180.64.0/19 maxlen: 19
2a00:5860::/32 maxlen: 32
2a03:2f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:20:0f:c2:72:00:96:4e:85:0d:dd:7f:a7:fc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c325705620fa3853bdc898db7f4875839705a906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:26:88:21:74:b3:bd:5b:ef:bb:51:51:63:
81:3e:a5:d3:c9:4e:6a:bd:fd:cf:ad:c2:15:b2:66:
3f:e1:82:22:54:15:81:39:c2:dc:3c:85:ab:9e:36:
b1:50:28:64:b7:bd:f5:d9:fe:74:88:1e:9c:b6:69:
a0:94:57:ff:c4:d9:8e:70:23:37:f5:1d:e0:2c:33:
66:83:07:da:f2:42:6b:a1:38:3a:1c:55:65:8d:90:
00:2f:d2:39:45:1e:23:ba:97:a0:09:f2:96:d2:12:
b2:b7:a2:68:cc:6a:c1:4a:f6:8a:1c:30:15:8a:5e:
34:be:5d:b6:8d:7c:51:34:84:9c:39:84:81:57:a6:
b7:58:7b:b7:57:c4:be:f7:ca:7f:0a:7e:67:8a:91:
7b:12:5b:75:bf:14:81:f2:ec:5d:4c:b4:48:1d:ad:
b0:76:23:bb:e6:cb:97:70:25:7a:37:5b:87:89:79:
fd:2d:4a:8a:ce:86:1d:07:94:1a:c5:83:f3:76:a4:
10:fa:d9:d3:56:cc:47:0e:19:9f:67:77:d0:b3:0a:
c3:21:8a:9d:ec:0a:ee:4e:a7:bf:5d:a6:eb:39:1b:
68:65:3c:e1:c8:a0:b4:62:8a:f6:0f:59:63:de:6b:
56:fd:08:4c:bb:d6:93:e0:a3:c2:ff:7b:bf:91:17:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:70:56:20:FA:38:53:BD:C8:98:DB:7F:48:75:83:97:05:A9:06
X509v3 Authority Key Identifier:
keyid:A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/wyVwViD6OFO9yJjbf0h1g5cFqQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.112.0/21
31.216.32.0/21
81.91.0.0/20
176.57.88.0/22
185.21.144.0/22
185.27.240.0/22
193.108.0.0/21
213.180.64.0/19
IPv6:
2a00:5860::/32
2a03:2f80::/32
Signature Algorithm: sha256WithRSAEncryption
0a:1e:85:39:79:b9:6b:59:14:fa:16:2d:63:fc:46:66:a7:e6:
2d:ed:8b:a5:4f:bd:91:f0:36:10:1c:47:82:45:15:52:c7:e6:
fa:a2:5c:eb:dc:28:99:e8:84:3b:37:b7:f9:26:3f:9e:55:e4:
ad:35:12:0c:9c:d2:02:c9:33:c2:b5:ef:8f:e1:8c:96:a7:64:
a9:b6:5f:61:4e:79:a3:3f:75:aa:76:c9:c6:5f:43:3b:f9:31:
dc:da:a8:a2:8e:03:b5:52:70:2e:64:28:3c:da:26:99:4b:42:
e9:e6:72:61:7c:64:ff:68:fa:4f:07:c8:08:27:a3:28:80:e6:
f3:a6:9f:a2:1d:74:61:e6:5d:1c:42:49:c5:b5:b9:17:ab:e9:
98:f2:f9:89:74:74:35:aa:19:73:08:cf:ca:76:eb:a6:8b:d6:
26:16:88:0b:d6:7e:ec:3c:a6:22:e2:9f:c4:cf:9c:39:2a:54:
86:9a:52:0b:9e:83:ad:e3:eb:fe:36:1e:ce:45:33:5d:54:1c:
66:9a:2a:f3:8e:7e:6f:ef:1b:b1:2d:e8:8f:4e:5d:c9:14:ce:
05:08:21:d3:48:1b:ce:55:d1:60:a8:2e:ea:3b:a2:a0:8e:23:
be:47:68:c2:fa:04:ff:66:15:97:2b:14:32:8c:a4:c2:7b:f7:
fc:ef:7e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:58 2026 by rpki-client