Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/wo2QncHAnFWiwgcHWd9f96fIAJQ.roa
File: wo2QncHAnFWiwgcHWd9f96fIAJQ.roa (raw, json)
Hash identifier: YufcsKB/8hirtC3U5PRwaqw+C8pdhA4f5x9AFnDM7Z0=
Subject key identifier: C2:8D:90:9D:C1:C0:9C:55:A2:C2:07:07:59:DF:5F:F7:A7:C8:00:94
Certificate issuer: /CN=e735de82c0afc3fd0487c300cf18a94ef1798631
Certificate serial: 019F236899B9A5B2396AA8F3B6770EEC1FBE
Authority key identifier: E7:35:DE:82:C0:AF:C3:FD:04:87:C3:00:CF:18:A9:4E:F1:79:86:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zXegsCvw_0Eh8MAzxipTvF5hjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/wo2QncHAnFWiwgcHWd9f96fIAJQ.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34779
IP address blocks: 46.248.64.0/19 maxlen: 19
84.255.192.0/18 maxlen: 18
84.255.209.0/24 maxlen: 24
84.255.210.0/24 maxlen: 24
89.212.0.0/18 maxlen: 18
89.212.23.160/27 maxlen: 27
89.212.64.0/18 maxlen: 18
89.212.128.0/18 maxlen: 18
89.212.192.0/18 maxlen: 18
89.233.112.0/20 maxlen: 20
91.246.224.0/19 maxlen: 19
93.103.0.0/19 maxlen: 19
93.103.32.0/19 maxlen: 19
93.103.64.0/19 maxlen: 19
93.103.96.0/19 maxlen: 19
93.103.128.0/19 maxlen: 19
93.103.160.0/19 maxlen: 19
93.103.192.0/19 maxlen: 19
93.103.224.0/19 maxlen: 19
119.12.128.0/20 maxlen: 20
185.49.116.0/22 maxlen: 22
185.179.48.0/22 maxlen: 22
188.159.224.0/19 maxlen: 19
188.230.128.0/19 maxlen: 19
188.230.160.0/19 maxlen: 19
188.230.192.0/19 maxlen: 19
188.230.224.0/19 maxlen: 19
193.138.32.0/19 maxlen: 24
194.28.108.0/22 maxlen: 22
2a01:260::/32 maxlen: 32
2a01:261::/32 maxlen: 32
2a01:262::/32 maxlen: 32
2a01:263::/32 maxlen: 32
2a01:264::/32 maxlen: 32
2a01:265::/32 maxlen: 32
2a01:266::/32 maxlen: 32
2a01:267::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zXegsCvw_0Eh8MAzxipTvF5hjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:b9:a5:b2:39:6a:a8:f3:b6:77:0e:ec:1f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e735de82c0afc3fd0487c300cf18a94ef1798631
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c28d909dc1c09c55a2c2070759df5ff7a7c80094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:c0:53:71:4c:d5:67:3e:99:52:27:f3:ae:
12:41:93:9d:07:02:b3:2b:cf:e4:75:50:bf:d5:73:
65:f1:4d:93:0a:20:7a:04:cf:95:a5:4a:a6:ef:d6:
6b:1f:01:11:1a:85:69:6c:af:9b:bc:75:5e:40:2f:
7b:ba:a0:d4:bf:c7:24:fe:23:c6:59:17:c4:db:1e:
2b:11:8a:50:26:df:05:1f:03:bc:45:bd:e3:b3:42:
d9:35:56:4b:4b:ff:3b:62:c2:22:e7:8c:47:65:5f:
2f:6e:9e:14:7c:46:e5:b4:86:28:9b:71:58:86:6c:
53:db:dd:fe:19:a1:75:3b:ff:ac:c0:2b:bf:82:ee:
b0:29:d7:44:65:db:06:8e:1a:5a:16:c2:6a:7c:f2:
56:07:3c:ad:cb:cb:a6:0e:71:d7:97:f7:45:9e:d7:
fe:df:d1:f1:d7:13:eb:83:d8:22:60:97:08:90:b0:
c5:51:4f:52:61:3f:a1:24:b4:e9:83:6e:0e:a5:89:
31:5a:de:d8:c1:61:60:e3:c9:14:9e:bb:c3:86:d2:
e2:6b:62:bd:c9:97:dc:e0:a3:52:4d:36:1e:41:7d:
c8:16:5e:0f:6c:04:3b:91:f2:39:90:9a:d7:1f:a1:
d2:2e:40:c2:18:48:38:83:e0:83:0e:f9:b8:ef:5e:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8D:90:9D:C1:C0:9C:55:A2:C2:07:07:59:DF:5F:F7:A7:C8:00:94
X509v3 Authority Key Identifier:
keyid:E7:35:DE:82:C0:AF:C3:FD:04:87:C3:00:CF:18:A9:4E:F1:79:86:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zXegsCvw_0Eh8MAzxipTvF5hjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/wo2QncHAnFWiwgcHWd9f96fIAJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
119.12.128.0/20
185.49.116.0/22
185.179.48.0/22
188.159.224.0/19
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
Signature Algorithm: sha256WithRSAEncryption
1f:74:49:ec:48:62:f3:f2:b1:9b:5f:64:15:07:6c:00:82:e4:
cf:00:26:fd:62:02:7c:4f:3c:39:b8:8a:96:30:8c:58:23:51:
ba:77:f4:22:08:c0:2a:4a:58:ee:7b:79:6f:c8:e8:14:3b:71:
b8:bd:c3:76:6c:28:5f:ea:d5:87:28:c6:2d:2c:60:8e:73:39:
92:04:93:73:af:ed:4e:ad:5d:7b:a0:67:5c:78:3f:3b:61:f4:
a2:4f:18:20:fc:1a:4c:35:d1:ad:c0:01:9b:51:14:7d:1f:5b:
dd:99:2a:af:49:18:b5:cf:2a:ef:8f:40:19:18:a4:73:37:85:
c3:ca:34:8c:56:45:e8:46:2d:73:3e:d5:23:76:50:4f:ba:39:
5c:c1:8c:a9:a0:cf:9a:19:e9:2b:ba:21:98:ea:af:17:ab:ab:
f7:1a:ce:52:25:4a:ff:4a:4c:20:25:7f:65:72:18:b3:fd:e3:
c1:36:b9:f0:5a:00:44:ee:d2:e7:3c:21:c9:5e:a9:54:00:d5:
63:96:01:a1:78:3c:ff:6f:65:e5:fb:52:0b:ce:fe:b8:0a:f8:
ab:a9:c8:df:bd:13:bb:aa:c4:b8:6f:e7:05:3a:5e:94:12:28:
3f:e1:24:b4:a5:d2:bf:58:60:87:cf:f7:4d:4b:af:ed:c5:d5:
6f:20:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:15 2026 by rpki-client