Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/WzQwsjeNlKGeNiyLIj7G2-n0QjU.roa
File: WzQwsjeNlKGeNiyLIj7G2-n0QjU.roa (raw, json)
Hash identifier: 98+A38a7VoBJstFyrt0O4RAHxmYS2icXfskW9cGDfKU=
Subject key identifier: 5B:34:30:B2:37:8D:94:A1:9E:36:2C:8B:22:3E:C6:DB:E9:F4:42:35
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 01A0CEF04ECF35E83C16A98EF5CE1605F5B0
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/WzQwsjeNlKGeNiyLIj7G2-n0QjU.roa
Signing time: Wed 23 Sep 2026 15:44:10 +0000
ROA not before: Wed 23 Sep 2026 15:44:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49318
IP address blocks: 46.28.248.0/21 maxlen: 21
46.28.248.0/23 maxlen: 23
46.28.248.0/24 maxlen: 24
46.28.249.0/24 maxlen: 24
46.28.250.0/23 maxlen: 23
46.28.250.0/24 maxlen: 24
46.28.251.0/24 maxlen: 24
46.28.252.0/23 maxlen: 23
46.28.252.0/24 maxlen: 24
46.28.253.0/24 maxlen: 24
46.28.254.0/23 maxlen: 23
46.28.254.0/24 maxlen: 24
46.28.255.0/24 maxlen: 24
188.93.176.0/21 maxlen: 21
188.93.176.0/23 maxlen: 23
188.93.176.0/24 maxlen: 24
188.93.177.0/24 maxlen: 24
188.93.178.0/23 maxlen: 23
188.93.178.0/24 maxlen: 24
188.93.179.0/24 maxlen: 24
188.93.180.0/23 maxlen: 23
188.93.180.0/24 maxlen: 24
188.93.181.0/24 maxlen: 24
188.93.182.0/23 maxlen: 23
188.93.182.0/24 maxlen: 24
188.93.183.0/24 maxlen: 24
194.110.124.0/23 maxlen: 23
194.110.124.0/24 maxlen: 24
194.110.125.0/24 maxlen: 24
194.110.130.0/23 maxlen: 23
194.110.130.0/24 maxlen: 24
194.110.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:f0:4e:cf:35:e8:3c:16:a9:8e:f5:ce:16:05:f5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Sep 23 15:44:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b3430b2378d94a19e362c8b223ec6dbe9f44235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:78:d7:f0:54:e1:99:88:0a:26:c3:26:f3:
e0:d6:7e:75:8e:94:91:71:05:53:34:80:49:8b:07:
85:4a:61:03:dd:8e:20:85:61:19:21:9d:49:c6:6b:
63:ec:e4:eb:e1:f9:20:ce:b2:85:0a:94:c8:64:27:
b8:f2:8c:07:28:83:d5:d1:3e:88:ee:da:4e:ca:18:
ee:43:e8:54:48:ae:92:4b:a2:e9:39:bd:4e:e0:fb:
7e:3e:1b:17:34:8a:83:e2:59:70:38:bc:dc:91:01:
10:d6:95:89:d5:d0:7d:24:c6:18:97:f1:3b:a8:89:
c7:f9:d2:fb:2a:e5:e5:3c:3e:e3:10:f9:7d:ae:ed:
7f:48:43:3a:9e:0e:22:df:48:f2:29:1f:27:bd:9a:
8c:8f:41:91:f2:33:f4:a4:b0:26:ce:c5:29:15:01:
76:c8:d0:3c:12:0e:33:cf:3d:0b:c0:f0:ad:06:4f:
eb:5e:f3:f4:8e:f5:ee:4f:5b:bd:8e:c4:d1:b6:12:
52:46:d3:81:69:1e:6c:eb:04:f7:4e:6f:03:a1:53:
ad:26:53:89:64:ee:5f:de:90:66:dd:bd:b7:c4:d8:
64:3d:76:f3:cb:ff:51:b6:0b:05:4a:9f:96:1c:6a:
76:f1:67:8a:49:e2:82:33:e8:8d:e6:e1:41:2e:04:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:34:30:B2:37:8D:94:A1:9E:36:2C:8B:22:3E:C6:DB:E9:F4:42:35
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/WzQwsjeNlKGeNiyLIj7G2-n0QjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.248.0/21
188.93.176.0/21
194.110.124.0/23
194.110.130.0/23
Signature Algorithm: sha256WithRSAEncryption
04:d4:e8:dd:96:3b:45:7b:53:38:ad:d9:10:87:5d:26:d9:94:
6f:f4:81:2b:2f:14:bd:cc:43:f6:3b:2d:ba:79:30:88:06:1e:
b8:2f:20:1d:f7:ed:2f:1f:e7:83:2c:83:a5:12:62:e6:fb:0a:
a4:dd:7d:f9:da:b4:f4:35:ea:52:be:6b:4f:40:60:6c:b5:38:
82:5c:a3:f3:50:30:9e:d9:48:aa:f2:12:52:9d:e5:a3:26:95:
73:64:f7:f9:bd:17:2d:e2:28:c6:1b:b4:72:9b:32:c5:85:6c:
3e:95:fc:83:66:22:db:a1:65:82:67:ac:55:8d:2e:a3:a2:2a:
87:e0:52:cf:da:4f:0a:28:e2:18:3a:87:7c:04:81:a3:1d:62:
b7:28:d7:5d:5d:27:16:39:da:32:dd:e1:8d:31:ae:98:9b:d8:
c2:7c:2f:38:26:16:a8:20:1f:d0:46:c1:a9:d1:5c:23:9f:f9:
66:5a:25:63:0b:f5:b1:d9:72:60:86:80:27:a5:98:d6:a2:82:
33:0f:1a:3a:1f:50:82:71:0d:4a:80:36:4e:a2:2d:74:a7:52:
9a:ec:10:a9:7b:35:88:c1:23:34:96:3c:d9:52:75:5d:7f:18:
2e:f0:34:df:eb:49:1a:2e:14:c3:4c:1d:67:db:51:af:94:bf:
86:e7:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 05:45:00 2026 by rpki-client