Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/w7z-BZ3rqNQrFmRHttbnDiZ4_pc.roa
File: w7z-BZ3rqNQrFmRHttbnDiZ4_pc.roa (raw, json)
Hash identifier: Oi5pXvAB+JPYM6z0KbwrvUVqx+IEISCt2YPJDDcKR6M=
Subject key identifier: C3:BC:FE:05:9D:EB:A8:D4:2B:16:64:47:B6:D6:E7:0E:26:78:FE:97
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019DFD24AC451249915D5F67A3CA107C9556
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/w7z-BZ3rqNQrFmRHttbnDiZ4_pc.roa
Signing time: Wed 06 May 2026 11:55:32 +0000
ROA not before: Wed 06 May 2026 11:55:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 72.63.88.0/22 maxlen: 22
72.63.248.0/22 maxlen: 22
189.81.6.0/23 maxlen: 23
189.81.70.0/23 maxlen: 23
189.81.108.0/23 maxlen: 23
189.81.142.0/23 maxlen: 23
189.81.196.0/23 maxlen: 23
189.81.206.0/23 maxlen: 23
189.81.234.0/23 maxlen: 23
189.104.6.0/23 maxlen: 23
189.104.36.0/23 maxlen: 23
189.104.54.0/23 maxlen: 23
189.104.68.0/23 maxlen: 23
189.104.80.0/23 maxlen: 23
189.104.104.0/23 maxlen: 23
189.104.118.0/23 maxlen: 23
189.104.134.0/23 maxlen: 23
189.104.148.0/23 maxlen: 23
189.104.158.0/23 maxlen: 23
189.104.164.0/23 maxlen: 23
189.104.174.0/23 maxlen: 23
189.104.204.0/23 maxlen: 23
189.104.210.0/23 maxlen: 23
189.104.234.0/23 maxlen: 23
205.188.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:24:ac:45:12:49:91:5d:5f:67:a3:ca:10:7c:95:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: May 6 11:55:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3bcfe059deba8d42b166447b6d6e70e2678fe97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:fa:8f:f8:ec:6f:2a:4c:7c:a8:7d:3d:76:
97:ae:ec:d5:48:d4:55:20:35:7f:85:b4:0f:8c:55:
41:c0:50:82:11:32:dc:5a:52:5b:00:75:5d:1c:a3:
54:97:57:00:12:47:40:e0:f3:9a:9e:ed:d3:c9:d0:
8c:69:87:b7:27:d4:83:63:d1:ab:78:a8:d5:fe:de:
25:87:7f:f1:c9:ec:52:f2:0e:45:29:aa:aa:de:56:
21:bc:69:ac:d4:0c:d5:8f:3f:fc:3f:04:67:0c:ff:
74:3b:b8:bd:ab:64:11:0f:9f:9e:6e:70:88:aa:30:
4e:66:26:4f:d4:17:f8:00:27:d4:b6:84:0c:22:25:
82:53:7d:40:01:da:5e:e4:23:1a:18:2e:9b:b7:47:
ec:f3:a3:8e:8f:be:a0:e5:00:56:03:58:37:bc:aa:
8a:fa:9d:06:d1:e0:63:19:64:c0:32:6b:06:14:03:
dc:9e:1c:e5:91:63:88:ef:3a:7e:19:dd:ae:20:25:
aa:1b:4b:a6:52:e2:77:ca:e8:c5:d1:9f:3a:11:ad:
5a:de:c9:c3:e3:4a:d4:03:60:d7:91:38:fe:f3:c3:
8a:d2:5a:2e:43:7e:07:fc:ba:3e:d2:29:c5:80:92:
91:fb:12:08:54:77:59:23:2f:dd:9d:ad:9f:47:d8:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:FE:05:9D:EB:A8:D4:2B:16:64:47:B6:D6:E7:0E:26:78:FE:97
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/w7z-BZ3rqNQrFmRHttbnDiZ4_pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.63.88.0/22
72.63.248.0/22
189.81.6.0/23
189.81.70.0/23
189.81.108.0/23
189.81.142.0/23
189.81.196.0/23
189.81.206.0/23
189.81.234.0/23
189.104.6.0/23
189.104.36.0/23
189.104.54.0/23
189.104.68.0/23
189.104.80.0/23
189.104.104.0/23
189.104.118.0/23
189.104.134.0/23
189.104.148.0/23
189.104.158.0/23
189.104.164.0/23
189.104.174.0/23
189.104.204.0/23
189.104.210.0/23
189.104.234.0/23
205.188.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:a2:1d:d7:2f:ce:53:5a:07:df:55:77:e7:b2:c2:1b:6e:2d:
60:d4:34:99:4b:de:8e:8c:5b:ab:82:2c:6c:5b:36:0d:24:b2:
a3:6b:2f:0b:95:f3:cb:cb:f5:da:80:8c:b8:c8:8b:4a:9e:58:
cd:50:a4:36:d7:ef:e6:b7:05:0b:c3:f6:2d:c0:e8:f1:29:48:
f8:ee:15:93:f3:72:5e:c4:d9:d3:50:28:0b:7a:1c:b2:66:b9:
43:35:f1:2a:47:35:1e:4d:9e:57:ff:54:ff:70:1c:05:ec:0f:
ec:b4:d0:73:ed:c4:48:a5:49:b3:7a:0b:0a:05:12:bb:88:1a:
6b:80:2a:6e:55:67:93:f7:a3:e7:fe:9f:49:f3:7c:6d:67:88:
47:35:38:90:e3:89:01:c2:6b:64:25:12:94:0e:18:da:8e:d8:
33:e5:6c:e8:db:34:0c:34:2c:ff:b8:57:b9:3f:a2:28:7a:7b:
96:ca:be:80:8d:16:16:b8:ae:83:c5:f0:e9:e3:ce:f3:44:4a:
a0:ca:d3:af:22:f1:67:bf:b7:a3:cb:b6:a5:7d:1d:3d:ec:49:
d5:79:7b:05:84:c5:0a:49:b8:49:ef:5a:e3:cf:8b:81:c2:22:
2c:27:dd:87:83:69:0d:5b:1f:bc:0d:84:c6:80:09:4a:43:d8:
da:53:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:36 2026 by rpki-client