Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/WONQ7npwfGt536jW_jiQ6ofmsbE.roa
File: WONQ7npwfGt536jW_jiQ6ofmsbE.roa (raw, json)
Hash identifier: wXrQD7008VodzAdmV5Adtb+RMKX/kAHGByf3aYplnok=
Subject key identifier: 58:E3:50:EE:7A:70:7C:6B:79:DF:A8:D6:FE:38:90:EA:87:E6:B1:B1
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019D0AC1072A4352C4D14762D941C2A11D33
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/WONQ7npwfGt536jW_jiQ6ofmsbE.roa
Signing time: Fri 20 Mar 2026 10:18:35 +0000
ROA not before: Fri 20 Mar 2026 10:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12392
IP address blocks: 62.197.64.0/18 maxlen: 18
62.197.64.0/20 maxlen: 20
62.197.80.0/20 maxlen: 20
62.197.96.0/20 maxlen: 20
62.197.112.0/20 maxlen: 20
78.129.0.0/17 maxlen: 17
78.129.0.0/20 maxlen: 20
78.129.16.0/20 maxlen: 20
78.129.32.0/20 maxlen: 20
78.129.48.0/20 maxlen: 20
78.129.64.0/20 maxlen: 20
78.129.80.0/20 maxlen: 20
78.129.96.0/20 maxlen: 20
78.129.112.0/20 maxlen: 20
82.212.128.0/18 maxlen: 18
82.212.128.0/20 maxlen: 20
82.212.144.0/20 maxlen: 20
82.212.160.0/20 maxlen: 20
82.212.176.0/20 maxlen: 20
85.26.0.0/17 maxlen: 17
85.26.0.0/20 maxlen: 20
85.26.16.0/20 maxlen: 20
85.26.32.0/20 maxlen: 20
85.26.48.0/20 maxlen: 20
85.26.64.0/20 maxlen: 20
85.26.80.0/20 maxlen: 20
85.26.96.0/20 maxlen: 20
85.26.112.0/20 maxlen: 20
85.27.0.0/17 maxlen: 17
85.27.32.0/20 maxlen: 20
85.27.48.0/20 maxlen: 20
85.201.0.0/16 maxlen: 16
85.201.0.0/20 maxlen: 20
85.201.16.0/20 maxlen: 20
85.201.32.0/20 maxlen: 20
85.201.48.0/20 maxlen: 20
85.201.64.0/20 maxlen: 20
85.201.80.0/20 maxlen: 20
85.201.96.0/20 maxlen: 20
85.201.112.0/20 maxlen: 20
85.201.128.0/20 maxlen: 20
85.201.144.0/20 maxlen: 20
85.201.160.0/20 maxlen: 20
85.201.176.0/20 maxlen: 20
85.201.192.0/20 maxlen: 20
85.201.208.0/20 maxlen: 20
85.201.224.0/20 maxlen: 20
85.201.240.0/20 maxlen: 20
95.182.128.0/17 maxlen: 17
95.182.128.0/20 maxlen: 20
95.182.144.0/20 maxlen: 20
95.182.192.0/20 maxlen: 20
95.182.208.0/20 maxlen: 20
95.182.224.0/20 maxlen: 20
95.182.240.0/20 maxlen: 20
109.88.0.0/15 maxlen: 15
109.88.0.0/20 maxlen: 20
109.88.16.0/20 maxlen: 20
109.88.32.0/20 maxlen: 20
109.88.48.0/20 maxlen: 20
109.88.64.0/20 maxlen: 20
109.88.80.0/20 maxlen: 20
109.88.96.0/19 maxlen: 19
109.88.128.0/19 maxlen: 19
109.88.160.0/20 maxlen: 20
109.88.176.0/20 maxlen: 20
109.88.192.0/20 maxlen: 20
109.88.208.0/20 maxlen: 20
109.88.224.0/20 maxlen: 20
109.88.240.0/20 maxlen: 20
109.89.0.0/20 maxlen: 20
109.89.16.0/20 maxlen: 20
109.89.32.0/20 maxlen: 20
109.89.48.0/20 maxlen: 20
109.89.64.0/20 maxlen: 20
109.89.80.0/20 maxlen: 20
109.89.96.0/20 maxlen: 20
109.89.112.0/20 maxlen: 20
109.89.128.0/20 maxlen: 20
109.89.144.0/20 maxlen: 20
109.89.160.0/20 maxlen: 20
109.89.176.0/20 maxlen: 20
109.89.192.0/20 maxlen: 20
109.89.208.0/20 maxlen: 20
109.89.224.0/20 maxlen: 20
109.89.240.0/20 maxlen: 20
149.154.192.0/18 maxlen: 18
185.3.160.0/22 maxlen: 22
212.68.192.0/18 maxlen: 18
212.68.192.0/20 maxlen: 20
212.68.208.0/20 maxlen: 20
212.68.224.0/20 maxlen: 20
212.68.240.0/20 maxlen: 20
213.189.160.0/19 maxlen: 19
213.189.160.0/20 maxlen: 20
213.189.176.0/20 maxlen: 20
213.213.192.0/18 maxlen: 18
213.213.192.0/20 maxlen: 20
213.213.208.0/20 maxlen: 20
213.213.224.0/20 maxlen: 20
213.213.240.0/20 maxlen: 20
217.15.224.0/20 maxlen: 20
2a02:2788::/32 maxlen: 32
2a02:2788::/40 maxlen: 40
2a02:2788:100::/40 maxlen: 40
2a02:2788:200::/40 maxlen: 40
2a02:2788:300::/40 maxlen: 40
2a02:2788:400::/40 maxlen: 40
2a02:2788:500::/40 maxlen: 40
2a02:2788:600::/40 maxlen: 40
2a02:2788:700::/40 maxlen: 40
2a02:2788:800::/40 maxlen: 40
2a02:2788:900::/40 maxlen: 40
2a02:2788:a00::/40 maxlen: 40
2a02:2788:b00::/40 maxlen: 40
2a02:2788:c00::/40 maxlen: 40
2a02:2788:d00::/40 maxlen: 40
2a02:2788:e00::/40 maxlen: 40
2a02:2788:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:c1:07:2a:43:52:c4:d1:47:62:d9:41:c2:a1:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Mar 20 10:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58e350ee7a707c6b79dfa8d6fe3890ea87e6b1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:26:27:3d:c2:73:73:c3:29:5d:c8:51:66:
0f:6e:c2:c2:10:03:a8:9a:39:85:68:74:66:f1:97:
b9:de:e3:6d:5a:37:1a:9f:b6:85:17:06:67:3d:c8:
2c:5a:09:84:27:7a:bd:4e:50:c7:c4:ec:8b:90:71:
08:05:f8:54:a9:87:a7:2c:a7:cd:f8:c3:c2:15:8c:
d9:1a:91:fc:d1:49:46:11:ab:eb:d7:54:78:79:f1:
5d:9c:d8:6b:26:f6:35:3f:a5:67:cb:2f:b0:dd:44:
c6:c7:ae:88:1a:01:7d:05:78:5b:ca:1c:7b:4e:b9:
29:17:e3:e2:7d:a9:02:2d:cf:6b:82:bc:6f:f4:0f:
68:66:cd:27:32:c2:d5:d6:aa:58:e1:95:22:3a:81:
a9:c0:fb:99:27:69:95:fc:11:44:fe:ab:fb:c4:30:
5b:ec:00:f4:71:e4:c3:85:10:09:70:04:bb:a6:7d:
dc:69:43:3f:e8:08:1e:c4:9e:d6:1b:bc:a6:c3:ee:
e6:ee:b3:1e:ae:b3:ac:4e:83:c1:d5:bc:e3:92:5f:
1f:ce:e4:80:9b:80:61:57:d7:cf:aa:5c:e7:55:18:
e0:9f:cc:7c:3b:e6:a9:87:2e:92:40:fb:60:1f:9f:
21:79:32:6e:fb:4a:a5:0e:5f:79:17:19:62:84:fe:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E3:50:EE:7A:70:7C:6B:79:DF:A8:D6:FE:38:90:EA:87:E6:B1:B1
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/WONQ7npwfGt536jW_jiQ6ofmsbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.64.0/18
78.129.0.0/17
82.212.128.0/18
85.26.0.0/17
85.27.0.0/17
85.201.0.0/16
95.182.128.0/17
109.88.0.0/15
149.154.192.0/18
185.3.160.0/22
212.68.192.0/18
213.189.160.0/19
213.213.192.0/18
217.15.224.0/20
IPv6:
2a02:2788::/32
Signature Algorithm: sha256WithRSAEncryption
1a:6b:6a:54:66:a6:2f:78:73:fe:b8:6e:21:f0:73:57:99:f5:
08:05:4f:77:66:1b:a8:20:f8:4b:95:b3:1f:af:e9:c9:61:4c:
db:03:b3:8f:da:3c:d1:f6:69:35:1e:33:ad:57:a1:72:6b:25:
05:af:20:ee:81:ee:4e:94:45:8e:19:09:17:5b:1e:18:76:ec:
ef:8b:c1:ac:99:63:9f:d3:bd:dd:04:55:32:58:90:6a:be:ac:
75:ba:12:e2:4c:34:a9:4e:12:46:6c:7c:54:a4:3f:06:19:ce:
b1:79:1a:9c:d6:25:c6:7c:6e:ab:10:ba:5c:40:05:25:dc:43:
d0:29:86:59:ba:9c:8a:f5:63:9e:53:23:97:34:03:e9:f6:e0:
b7:cf:40:fa:3b:ae:46:29:b7:4e:aa:0a:d2:2a:70:12:8c:71:
d1:97:23:ac:eb:46:8f:14:34:21:5e:ec:9a:86:66:8e:fb:b4:
15:33:1d:14:47:19:0c:43:3a:33:42:3a:e5:2e:a4:39:57:3d:
b7:bb:e1:f7:8c:fc:e1:55:44:17:3a:9d:9a:62:fb:7a:92:eb:
7d:b3:b1:e8:da:00:64:e8:f6:4d:01:08:69:70:83:29:2a:f1:
2c:b9:2e:1e:fc:9c:11:03:e8:99:bd:24:15:fe:e0:45:6e:12:
be:65:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:03 2026 by rpki-client