Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/aeNtIymZwUKQWOeTccyVT7TBHRo.roa
File: aeNtIymZwUKQWOeTccyVT7TBHRo.roa (raw, json)
Hash identifier: NRVVzMkO6SHCR3USmlXWQHKPaFtABXw2LsRv66QEVsc=
Subject key identifier: 69:E3:6D:23:29:99:C1:42:90:58:E7:93:71:CC:95:4F:B4:C1:1D:1A
Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial: 019DF50FD7F027C95981D388B48082E8B716
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/aeNtIymZwUKQWOeTccyVT7TBHRo.roa
Signing time: Mon 04 May 2026 22:15:49 +0000
ROA not before: Mon 04 May 2026 22:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197450
IP address blocks: 185.133.32.0/24 maxlen: 24
2a12:e680::/48 maxlen: 48
2a12:e680:1::/48 maxlen: 48
2a12:e680:2::/48 maxlen: 48
2a12:e680:3::/48 maxlen: 48
2a12:e680:4::/48 maxlen: 48
2a12:e680:5::/48 maxlen: 48
2a12:e680:6::/48 maxlen: 48
2a12:e680:7::/48 maxlen: 48
2a12:e680:8::/48 maxlen: 48
2a12:e680:9::/48 maxlen: 48
2a12:e681::/32 maxlen: 32
2a12:e682::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f5:0f:d7:f0:27:c9:59:81:d3:88:b4:80:82:e8:b7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Validity
Not Before: May 4 22:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e36d232999c1429058e79371cc954fb4c11d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:7a:94:55:66:da:f1:5a:50:27:cd:1f:e6:
a4:24:26:c7:46:16:a9:c2:d6:31:13:46:76:dc:25:
5f:f7:c1:31:5a:bc:02:a1:59:ef:e6:20:de:54:b4:
ad:c8:82:c4:2c:27:1b:70:9f:3d:49:c7:6c:9c:94:
f8:03:e8:c3:69:fb:df:da:f6:03:25:64:b9:fa:0f:
a2:06:39:03:7a:c6:c1:64:9c:0b:d4:7b:ea:a1:06:
c4:16:43:83:7b:5c:f8:62:ca:b9:72:ec:1e:48:e5:
ba:3e:c9:12:60:b9:34:81:f7:24:42:12:23:fd:aa:
af:df:6b:d8:fc:cc:83:7e:4b:75:a8:05:c4:79:60:
ac:75:66:25:aa:6b:01:1f:80:77:69:bd:01:d3:31:
e1:e8:94:51:81:75:c8:0e:ef:ee:83:5f:74:f8:52:
2d:90:f4:fe:9d:27:2a:bb:04:c8:5d:e6:e8:e5:80:
77:de:e6:f2:c0:9f:0f:50:83:4b:4a:66:c7:ef:e1:
50:b1:d4:f4:69:ae:66:b0:d0:2b:4b:3d:64:97:4e:
f9:8f:67:47:57:c2:f0:41:79:6c:3f:d9:b7:ff:a6:
16:d6:9d:1f:2b:8f:7b:47:9f:9e:d3:22:19:39:59:
84:34:01:c9:f5:ba:08:a1:df:d7:77:d1:87:92:e3:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:6D:23:29:99:C1:42:90:58:E7:93:71:CC:95:4F:B4:C1:1D:1A
X509v3 Authority Key Identifier:
keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/aeNtIymZwUKQWOeTccyVT7TBHRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.32.0/24
IPv6:
2a12:e680::-2a12:e680:9:ffff:ffff:ffff:ffff:ffff
2a12:e681::-2a12:e682:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b6:18:f1:86:1a:59:5e:55:9a:37:09:c8:2e:64:05:1f:a2:3c:
6e:4c:6a:0d:de:1e:af:af:08:57:b7:cc:65:7b:3a:c9:d4:30:
18:09:ae:70:d6:ae:04:55:11:e4:6a:d5:56:cf:19:ef:1f:2f:
4d:6c:92:39:12:00:9a:9c:1a:79:97:ab:d5:8a:77:ec:67:6c:
c9:dc:08:df:66:23:1d:61:be:c4:80:50:54:f4:3d:97:20:c2:
58:91:4f:a7:06:84:d3:e7:c4:0c:0b:43:1f:88:08:b8:b3:7e:
4d:86:65:8c:8e:ea:81:fc:69:bb:4e:33:1e:82:57:7f:ab:44:
7f:2d:f3:48:24:ce:56:f9:48:41:c3:a9:89:d2:1e:e3:e7:cf:
fc:88:67:30:4a:b7:20:df:a1:d9:f9:3a:3d:d1:cf:27:a1:ed:
b2:cd:02:0e:24:cc:ca:45:8a:1e:c6:4d:f2:95:d6:24:ec:fd:
e6:0b:e0:43:c2:87:d8:e6:2e:7e:1c:22:97:d1:ea:dd:0a:4b:
08:a5:15:0d:c1:10:45:39:d4:7b:a2:4a:57:46:19:86:64:06:
ce:f9:f8:41:44:8d:f7:f2:34:1c:b2:de:7e:ae:37:38:3d:6f:
7b:ba:04:a0:35:50:6f:76:35:1d:3f:7b:d6:7e:14:4d:d2:8a:
99:2d:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:24 2026 by rpki-client