Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/WBk7Na60wHxHk-VM6akyZtD9s1s.roa
File: WBk7Na60wHxHk-VM6akyZtD9s1s.roa (raw, json)
Hash identifier: b2ttBqFw9+7/WWlQ+7GOBl/vDcoZ0Tf3cO+FRNRCiVU=
Subject key identifier: 58:19:3B:35:AE:B4:C0:7C:47:93:E5:4C:E9:A9:32:66:D0:FD:B3:5B
Certificate issuer: /CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Certificate serial: 019EEE11557D3DFE5DDEDB482BAC218B5D6F
Authority key identifier: AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/WBk7Na60wHxHk-VM6akyZtD9s1s.roa
Signing time: Mon 22 Jun 2026 06:42:53 +0000
ROA not before: Mon 22 Jun 2026 06:42:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200165
IP address blocks: 181.224.166.0/24 maxlen: 24
185.79.128.0/24 maxlen: 24
185.79.129.0/24 maxlen: 24
185.79.130.0/24 maxlen: 24
185.79.131.0/24 maxlen: 24
190.123.0.0/24 maxlen: 24
190.123.1.0/24 maxlen: 24
2a05:7440:a5ac::/48 maxlen: 48
2a05:7440:c14b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:11:55:7d:3d:fe:5d:de:db:48:2b:ac:21:8b:5d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Validity
Not Before: Jun 22 06:42:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58193b35aeb4c07c4793e54ce9a93266d0fdb35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:5c:f4:51:11:38:77:fe:f3:b1:8f:d1:cd:
65:af:84:31:ac:3b:0a:98:a2:2f:86:87:ac:bb:06:
d7:b4:b5:1e:f4:86:ea:cb:ed:f7:b0:e5:e1:ac:72:
7a:a6:c9:10:d1:bd:f0:e6:41:7c:f0:a2:0b:f8:6e:
2f:30:a2:a5:da:bb:57:2d:5a:c2:bb:67:ad:14:4e:
16:10:9a:bd:02:bc:a5:76:4f:8d:66:f2:96:92:84:
8d:d8:7f:6c:9b:09:2b:3d:26:14:9e:e9:4d:c7:47:
92:2e:61:51:d6:fd:95:ff:39:59:e3:ec:28:1b:d7:
c7:c3:30:1e:9b:77:bb:5c:a2:9b:5a:2f:0e:90:87:
3a:08:31:e8:0b:1d:ec:1e:37:a5:52:6d:07:e1:da:
a7:27:bf:c7:09:75:f7:3d:44:98:27:58:de:79:fe:
ed:4e:ad:f3:72:d7:8d:86:c5:33:83:d7:9f:6f:a6:
5a:d1:25:61:f8:92:4a:ba:76:40:5f:f0:74:71:99:
a1:43:b4:d4:bc:21:18:65:d5:f8:f1:92:50:b8:81:
a9:f2:96:67:20:14:8e:7f:ee:e8:62:ab:83:81:ee:
e5:61:f6:2f:f9:b4:2f:2c:31:8d:ea:51:33:a3:d3:
2a:79:e7:fa:3a:94:2c:79:c6:b2:fa:d8:1c:00:43:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:19:3B:35:AE:B4:C0:7C:47:93:E5:4C:E9:A9:32:66:D0:FD:B3:5B
X509v3 Authority Key Identifier:
keyid:AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/WBk7Na60wHxHk-VM6akyZtD9s1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.166.0/24
185.79.128.0/22
190.123.0.0/23
IPv6:
2a05:7440:a5ac::/48
2a05:7440:c14b::/48
Signature Algorithm: sha256WithRSAEncryption
05:aa:87:b9:82:46:57:6b:ef:b3:e0:aa:9f:aa:15:62:b4:79:
19:ea:fa:bf:67:6e:87:eb:cf:fc:51:c1:fb:e9:47:47:b4:f6:
0b:ae:fb:4e:a4:2d:08:e8:73:38:ff:fd:2e:b0:9a:20:b5:21:
72:4f:ce:e1:ca:08:99:7a:ca:66:d3:af:bc:a8:0e:62:b0:1b:
9e:bc:7d:f8:57:be:c5:2f:85:18:93:29:7f:02:92:9e:7e:74:
32:2e:27:12:81:e9:ab:55:31:71:3e:a1:95:0b:10:b2:fb:be:
07:a6:f5:ee:45:c7:02:d3:0b:5a:03:35:82:b1:f5:58:66:2b:
78:e2:c2:72:4f:98:b0:80:1a:fc:36:a1:ac:59:bb:b6:b1:3d:
f3:f2:b2:e0:9c:41:d1:0e:13:15:a6:81:e9:65:d2:99:54:f8:
81:d1:af:cf:e0:0e:78:76:63:e8:42:78:a7:7c:38:0f:e6:1a:
e4:e2:36:fe:6b:1e:7a:46:33:c4:9a:03:a1:8e:d3:03:34:80:
41:66:36:46:c9:96:d8:62:0e:ac:80:f1:5c:e9:38:39:d1:5e:
77:fb:ea:16:69:e3:83:1f:68:e6:b1:4f:04:e4:81:c2:dc:66:
df:03:cf:11:24:08:b7:32:ad:24:e9:84:ad:8e:63:49:be:f8:
ff:99:89:04
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZ7uEVV9Pf5d3ttIK6whi11vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjM0ODJiOGVjMmU3NjA1ODc5Zjg1M2E0OGRiYWMwNjE0
NWUxYmIwHhcNMjYwNjIyMDY0MjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODE5M2IzNWFlYjRjMDdjNDc5M2U1NGNlOWE5MzI2NmQwZmRiMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR1c9FEROHf+87GP0c1lr4QxrDsK
mKIvhoesuwbXtLUe9Ibqy+33sOXhrHJ6pskQ0b3w5kF88KIL+G4vMKKl2rtXLVrC
u2etFE4WEJq9Aryldk+NZvKWkoSN2H9smwkrPSYUnulNx0eSLmFR1v2V/zlZ4+wo
G9fHwzAem3e7XKKbWi8OkIc6CDHoCx3sHjelUm0H4dqnJ7/HCXX3PUSYJ1jeef7t
Tq3zcteNhsUzg9efb6Za0SVh+JJKunZAX/B0cZmhQ7TUvCEYZdX48ZJQuIGp8pZn
IBSOf+7oYquDge7lYfYv+bQvLDGN6lEzo9Mqeef6OpQsecay+tgcAEMukQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFFgZOzWutMB8R5PlTOmpMmbQ/bNbMB8GA1UdIwQY
MBaAFK+zSCuOwudgWHn4U6SNusBhReG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdOSUs0N0M1MkJZZWZoVHBJMjZ3R0ZGNGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NzMxN2YtNWIyZi00MmRmLThlZjQt
ODExZDI1ZWNiN2QyLzEvV0JrN05hNjB3SHhIay1WTTZha3ladEQ5czFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NzMxN2YtNWIyZi00MmRmLThlZjQtODExZDI1ZWNiN2Qy
LzEvcjdOSUs0N0M1MkJZZWZoVHBJMjZ3R0ZGNGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAteCmAwQC
uU+AAwQBvnsAMBgEAgACMBIDBwAqBXRApawDBwAqBXRAwUswDQYJKoZIhvcNAQEL
BQADggEBAAWqh7mCRldr77Pgqp+qFWK0eRnq+r9nbofrz/xRwfvpR0e09guu+06k
LQjoczj//S6wmiC1IXJPzuHKCJl6ymbTr7yoDmKwG568ffhXvsUvhRiTKX8Ckp5+
dDIuJxKB6atVMXE+oZULELL7vgem9e5FxwLTC1oDNYKx9VhmK3jiwnJPmLCAGvw2
oaxZu7axPfPysuCcQdEOExWmgell0plU+IHRr8/gDnh2Y+hCeKd8OA/mGuTiNv5r
HnpGM8SaA6GO0wM0gEFmNkbJlthiDqyA8VzpODnRXnf76hZp44MfaOaxTwTkgcLc
Zt8DzxEkCLcyrSTphK2OY0m++P+ZiQQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:44 2026 by rpki-client