Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/kNoTU_DDr3ySeIp3kzeqTRzy7WU.roa
File: kNoTU_DDr3ySeIp3kzeqTRzy7WU.roa (raw, json)
Hash identifier: wiygXWg117FYrb4QXRydtTU624Ret1FMbW/7q/ighUY=
Subject key identifier: 90:DA:13:53:F0:C3:AF:7C:92:78:8A:77:93:37:AA:4D:1C:F2:ED:65
Certificate issuer: /CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Certificate serial: 019CAEB52493FD064ABD5706AFC820E373BE
Authority key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/kNoTU_DDr3ySeIp3kzeqTRzy7WU.roa
Signing time: Mon 02 Mar 2026 13:20:32 +0000
ROA not before: Mon 02 Mar 2026 13:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8893
IP address blocks: 185.62.64.0/22 maxlen: 22
212.77.224.0/19 maxlen: 19
2a02:2800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:b5:24:93:fd:06:4a:bd:57:06:af:c8:20:e3:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Validity
Not Before: Mar 2 13:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90da1353f0c3af7c92788a779337aa4d1cf2ed65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:bb:18:bd:bd:49:8d:61:79:f2:29:cc:a2:
8d:54:f9:c8:fb:13:b5:2a:a1:21:9e:7c:d2:a9:d3:
54:c6:6f:29:83:70:dd:c6:ba:74:72:f2:eb:02:f5:
d0:ae:35:03:19:de:52:94:76:73:f8:d4:f7:95:b5:
ee:98:25:cf:ce:6a:bd:9f:ab:5b:0e:0d:ea:43:dc:
72:99:68:9d:e8:67:bf:f4:59:b1:1d:78:9c:33:c9:
60:67:7b:c8:7d:8b:4b:93:dd:bd:de:4b:8e:b2:5c:
8a:4c:8f:72:ee:89:87:01:98:7c:67:7d:ab:54:14:
66:29:8f:b4:c5:76:d2:60:3a:a4:8c:8f:f0:23:bf:
02:12:7c:80:11:19:e2:c3:69:21:ba:f3:6f:7b:75:
e9:c6:31:86:34:73:5f:13:69:97:ef:8c:51:15:e8:
2c:11:d3:7c:45:c3:65:50:f2:5c:6b:2a:12:ec:c8:
19:87:c9:da:c6:39:6c:3e:d9:da:ad:14:2d:16:79:
7d:bc:10:4e:f5:93:5b:92:b5:e5:c4:19:b1:95:6d:
8f:80:0a:65:53:92:15:05:16:cf:73:50:f8:dd:27:
81:5e:fa:c0:28:9f:4b:56:7f:82:64:bc:7f:89:2c:
fb:1c:f9:60:05:e5:76:4d:d6:65:7e:28:e8:95:5a:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DA:13:53:F0:C3:AF:7C:92:78:8A:77:93:37:AA:4D:1C:F2:ED:65
X509v3 Authority Key Identifier:
keyid:C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/kNoTU_DDr3ySeIp3kzeqTRzy7WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.64.0/22
212.77.224.0/19
IPv6:
2a02:2800::/29
Signature Algorithm: sha256WithRSAEncryption
92:1d:20:d1:da:9b:7c:3c:db:ef:58:2e:19:7f:b3:cc:04:cf:
df:c9:02:ba:a8:3a:fd:5e:ac:75:5b:9e:5a:9b:49:16:46:6d:
08:b3:02:f0:3b:08:30:c4:e9:94:b4:29:c5:73:22:12:da:01:
56:ec:6a:23:6e:0e:38:a0:6b:38:19:78:f1:8d:28:39:6e:8b:
97:93:1f:4a:97:b7:7c:0a:a7:9f:13:c8:ac:2c:8c:0c:db:5d:
b4:a3:53:e1:62:f8:fa:2f:e1:b8:ef:10:cb:11:10:b9:ae:4b:
45:df:f2:a8:15:16:d5:33:59:a9:ac:4d:d5:c4:d6:23:9e:d8:
bc:0c:dd:7b:a5:1d:c4:60:73:88:c8:8f:b1:dd:f4:ac:51:c6:
e6:2d:ca:9f:ba:5f:82:35:e4:a8:c1:2b:09:4e:b9:a5:fb:ae:
c9:8c:53:c0:7d:a6:bc:02:6b:f3:1b:35:5f:4d:f7:8d:34:66:
e2:1c:38:2f:9e:cf:ef:97:62:47:b6:24:f8:db:18:41:74:b7:
ff:2c:a0:d8:a9:b6:bd:d2:fb:ab:59:a8:4f:20:50:ed:35:aa:
41:df:d7:e9:39:f9:ac:52:00:4a:6c:38:85:81:c1:31:ab:1c:
b1:bb:1a:d2:78:90:18:e7:ee:21:4f:0b:ad:6b:bc:ce:15:72:
b3:98:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:39 2026 by rpki-client