Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/wir8QwsRDFDVgN00yDkwTAda9pE.roa
File: wir8QwsRDFDVgN00yDkwTAda9pE.roa (raw, json)
Hash identifier: u76/KPkxy/ErYPDKvp+ysDEP3QBqgUTI+DJxB+LMTgE=
Subject key identifier: C2:2A:FC:43:0B:11:0C:50:D5:80:DD:34:C8:39:30:4C:07:5A:F6:91
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0CF321E23A3FD490CC2BC22ED764A4215
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/wir8QwsRDFDVgN00yDkwTAda9pE.roa
Signing time: Wed 23 Sep 2026 16:56:03 +0000
ROA not before: Wed 23 Sep 2026 16:56:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21100
IP address blocks: 5.34.180.0/23 maxlen: 23
5.34.182.0/24 maxlen: 24
46.28.65.0/24 maxlen: 24
46.28.66.0/24 maxlen: 24
46.28.68.0/24 maxlen: 24
46.28.69.0/24 maxlen: 24
82.118.16.0/24 maxlen: 24
82.118.19.0/24 maxlen: 24
185.14.28.0/22 maxlen: 22
193.238.152.0/24 maxlen: 24
195.123.216.0/21 maxlen: 21
195.123.236.0/24 maxlen: 24
195.123.237.0/24 maxlen: 24
217.12.200.0/23 maxlen: 23
217.12.208.0/23 maxlen: 23
217.12.215.0/24 maxlen: 24
217.12.218.0/24 maxlen: 24
217.12.219.0/24 maxlen: 24
217.12.220.0/24 maxlen: 24
2a02:27a9::/32 maxlen: 32
2a02:27ab::/32 maxlen: 32
2a02:27ae::/32 maxlen: 32
2a02:27af::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:32:1e:23:a3:fd:49:0c:c2:bc:22:ed:76:4a:42:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 23 16:56:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c22afc430b110c50d580dd34c839304c075af691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:de:c3:60:02:44:d4:65:7f:1b:b0:96:7c:
38:9c:e7:08:7c:91:18:24:b4:49:76:9f:1f:e7:0b:
fe:fc:28:0b:f1:0f:78:5f:9c:86:cc:c2:18:c0:27:
97:e7:d1:a1:29:d5:53:75:aa:bb:ee:80:4e:81:53:
99:f7:4f:37:6a:7d:0b:61:ed:0e:aa:e2:fe:b0:2d:
ac:11:d1:f4:df:21:c2:e6:8e:32:ec:22:ff:9e:4c:
22:d4:a2:c0:63:4d:21:1e:6d:67:cd:5f:5d:db:8b:
1d:e4:b9:55:ef:cf:47:cb:19:7d:95:4d:ba:be:67:
82:c9:1f:ce:e2:6b:a8:a9:06:9d:2a:e3:2f:d1:23:
35:fb:1f:6a:26:84:89:2e:3c:10:42:b9:b9:cf:da:
97:2a:d2:cd:8b:24:98:6f:93:85:f9:ce:99:9e:e4:
4f:a2:8a:f2:13:30:db:2e:98:d7:a3:6b:d3:05:9a:
7d:73:2d:53:2a:7e:41:e8:a7:8b:e7:56:da:df:ac:
b3:89:67:89:64:6e:7b:38:90:cf:e5:a6:83:0c:44:
10:6e:2b:70:34:07:43:d0:ef:5d:d3:fb:44:07:1b:
f4:2c:59:c2:83:21:2c:5e:2f:50:30:25:db:7b:2e:
53:75:cc:d4:09:27:f5:20:5a:dc:a6:b5:0e:12:6e:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:FC:43:0B:11:0C:50:D5:80:DD:34:C8:39:30:4C:07:5A:F6:91
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/wir8QwsRDFDVgN00yDkwTAda9pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.180.0-5.34.182.255
46.28.65.0-46.28.66.255
46.28.68.0/23
82.118.16.0/24
82.118.19.0/24
185.14.28.0/22
193.238.152.0/24
195.123.216.0/21
195.123.236.0/23
217.12.200.0/23
217.12.208.0/23
217.12.215.0/24
217.12.218.0-217.12.220.255
IPv6:
2a02:27a9::/32
2a02:27ab::/32
2a02:27ae::/31
Signature Algorithm: sha256WithRSAEncryption
48:e3:84:63:94:b2:86:80:f4:dc:3f:4d:c4:5d:72:ec:a6:5b:
97:f4:12:3a:f9:72:46:d9:5a:e8:a7:21:f2:ca:3b:d3:99:5a:
01:75:b0:a4:68:5d:2b:dc:72:f4:f3:10:7b:6a:74:00:6b:98:
df:b4:21:b7:9d:ba:0e:d5:22:a7:18:93:6b:97:81:a7:52:1f:
37:25:22:ff:9f:41:f6:39:30:91:81:79:4a:2a:2e:ad:c8:c9:
51:61:2b:5c:95:cb:ef:62:ab:28:e9:a2:d0:44:c4:6e:f3:81:
c7:c4:38:d9:3a:88:d1:d5:9e:b0:85:01:fc:44:85:a2:27:3d:
81:e4:15:1f:4b:97:a1:d3:66:97:9c:48:35:e7:5c:e8:77:f0:
a3:28:61:fb:02:7d:6c:7c:14:d6:3e:58:ed:b7:ec:2d:fb:11:
20:f8:f2:92:9c:e1:85:6d:a0:82:53:32:cf:ee:ce:a5:9a:26:
8f:aa:c7:23:e5:fb:d5:44:47:97:68:64:79:f0:2f:8e:1f:f2:
c6:fa:ac:a0:65:67:e9:21:54:47:f4:8e:26:58:83:0b:e1:a6:
e2:ab:80:2c:c0:10:92:11:75:65:ee:c7:bc:cd:f1:34:44:10:
23:0a:a7:68:61:7f:14:1b:fe:45:f2:fd:a4:16:13:35:79:9a:
74:46:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:20 2026 by rpki-client