Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/_W2MGLpzYLCcdM8MrYh-W5k4LpE.roa
File: _W2MGLpzYLCcdM8MrYh-W5k4LpE.roa (raw, json)
Hash identifier: 5AVtOSonCp0arcBUR0hK73/WbQu4O8oq5lfKGONGBLk=
Subject key identifier: FD:6D:8C:18:BA:73:60:B0:9C:74:CF:0C:AD:88:7E:5B:99:38:2E:91
Certificate issuer: /CN=9e315018e560000d94718d85ee4e1320c3a5e457
Certificate serial: 019F236923B139D4A573B8FFE944567D77EE
Authority key identifier: 9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/_W2MGLpzYLCcdM8MrYh-W5k4LpE.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42184
IP address blocks: 88.218.84.0/22 maxlen: 22
185.72.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:23:b1:39:d4:a5:73:b8:ff:e9:44:56:7d:77:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e315018e560000d94718d85ee4e1320c3a5e457
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd6d8c18ba7360b09c74cf0cad887e5b99382e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:fb:13:02:b7:25:fb:b7:37:7a:34:63:90:
fd:71:0f:67:e8:3e:0a:63:2f:6c:e1:6e:5c:eb:77:
11:8f:15:e3:8c:b7:f4:2a:96:5c:38:4f:91:80:39:
c3:63:b1:3d:cd:3e:88:e5:be:e6:e3:87:22:9f:02:
df:68:5d:e1:23:5d:84:a2:46:6e:cb:26:93:9a:50:
ec:55:1b:a6:33:d8:77:23:67:eb:da:3c:62:2f:81:
e2:dd:96:2d:0b:91:47:8f:9c:1a:ea:7f:57:48:2e:
fa:31:7d:78:af:d2:16:4d:13:0c:92:bc:a8:5d:3c:
ee:2f:5d:d3:fc:68:18:72:c9:33:f1:b2:fe:a5:e6:
70:82:62:bc:a0:f4:98:07:b7:33:34:aa:9d:72:26:
54:46:05:2b:7c:dc:53:f7:b7:5a:23:0b:f9:9d:3e:
1d:59:d4:6d:e0:54:9f:4d:94:d9:f8:81:a7:2e:a1:
a1:1f:d5:c6:14:05:dd:ce:ee:3b:fa:2b:ec:88:5b:
bf:cf:76:2d:18:9a:c7:e6:d9:d3:02:c5:69:64:9d:
38:1e:b4:31:2e:f2:0a:53:d7:1e:c3:d1:1d:ae:c6:
1d:e8:7f:7d:55:2e:6d:93:2c:e5:af:be:c7:60:98:
af:29:3e:20:89:c9:30:ca:ab:d1:ec:e5:37:be:79:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:8C:18:BA:73:60:B0:9C:74:CF:0C:AD:88:7E:5B:99:38:2E:91
X509v3 Authority Key Identifier:
keyid:9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/_W2MGLpzYLCcdM8MrYh-W5k4LpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.84.0/22
185.72.200.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b6:77:21:e5:86:76:80:ce:28:cd:df:20:2c:80:b7:66:bd:
45:5a:9c:21:fc:7f:f5:cb:d0:26:02:bc:78:fb:49:bf:1f:bc:
58:45:17:bc:f5:f7:c1:ea:70:e8:5c:28:12:e1:83:0a:f1:27:
dc:d1:2c:e4:b5:56:87:85:8e:f1:10:47:cb:72:d1:29:41:1d:
8e:82:e1:c6:d6:ab:ee:fb:46:5b:34:79:b9:49:55:7e:6b:13:
13:0d:03:9a:3a:5a:57:e5:64:33:c9:05:dc:c2:66:52:5f:10:
60:5a:a5:9b:67:bc:95:1d:2d:c5:03:1c:92:76:89:b3:cf:ab:
7e:f1:75:44:49:94:73:4c:1f:44:e7:56:5e:b3:b5:7e:7a:79:
c3:f4:60:03:69:2a:62:d8:34:ae:78:48:45:2f:fc:d8:26:e2:
54:1e:3d:f3:24:a7:e2:f6:53:4d:79:02:f8:83:36:c5:58:c1:
d0:c0:a7:86:5b:a6:66:ec:af:ea:90:3a:9f:6c:43:0c:bd:31:
b4:c6:ca:17:16:0d:4e:56:dc:b2:8f:b1:03:2c:d2:25:1f:6b:
e8:8b:45:a1:80:67:76:ae:73:e0:9f:50:9c:a2:ce:89:83:e4:
e8:4d:4b:44:94:07:b2:28:b4:08:7e:86:11:cd:7e:ad:85:ce:
43:96:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:05 2026 by rpki-client