Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa
File: wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa (raw, json)
Hash identifier: ZL2vdyzUMFgXdeQX7SoEVRhlmRe5DGgXTTYIM/pvEm0=
Subject key identifier: C1:70:21:0F:EA:D8:83:8A:73:63:C5:96:EA:97:7D:54:CB:46:62:68
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019CBE7D4671ACB58B2312B74605960D70FE
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa
Signing time: Thu 05 Mar 2026 14:53:26 +0000
ROA not before: Thu 05 Mar 2026 14:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213646
IP address blocks: 185.137.220.0/24 maxlen: 24
2a0a:a500::/32 maxlen: 32
2a0a:a506::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:7d:46:71:ac:b5:8b:23:12:b7:46:05:96:0d:70:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Mar 5 14:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c170210fead8838a7363c596ea977d54cb466268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:ed:d4:fa:2e:78:11:62:96:fe:5d:ad:c1:
62:69:0a:62:7a:65:84:6f:82:ed:cc:44:fa:df:46:
0a:ab:f0:03:6d:01:67:45:f2:ea:16:34:7e:8e:d5:
24:bc:16:37:42:ca:78:87:50:5a:df:c7:41:88:22:
f8:3b:38:03:83:f6:a1:41:63:d9:21:37:dd:9c:0d:
70:fe:34:ce:3d:70:4a:6c:a1:e8:13:3a:c4:1c:2b:
9e:37:f3:49:ac:f6:27:fb:b2:e6:4f:a5:d9:bb:b1:
bf:8d:69:99:f9:30:2e:b2:2d:ca:83:f5:96:a0:5a:
93:30:32:81:77:ab:d9:ed:fa:96:b6:e5:16:4c:87:
01:51:b8:e8:41:f1:bc:fa:20:3d:19:98:cf:01:c3:
86:2b:32:02:25:b7:27:cd:07:1d:28:15:d5:f7:8c:
ea:1f:30:4d:28:76:de:6e:78:54:03:c8:a8:df:c9:
5b:90:58:f3:d3:c6:d8:66:43:33:06:da:e6:4b:56:
eb:55:de:df:56:d9:9f:98:87:26:c4:b9:ff:f7:92:
65:75:4f:7e:3b:b8:3c:d8:e1:eb:94:55:51:bf:aa:
a7:5c:66:d2:80:d0:bc:c3:d4:62:ce:99:7f:a5:45:
23:7e:26:df:18:f9:4e:e5:0c:55:d1:71:40:03:92:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:70:21:0F:EA:D8:83:8A:73:63:C5:96:EA:97:7D:54:CB:46:62:68
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/wXAhD-rYg4pzY8WW6pd9VMtGYmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.220.0/24
IPv6:
2a0a:a500::/32
2a0a:a506::/32
Signature Algorithm: sha256WithRSAEncryption
7a:8b:89:1b:cb:35:4b:f8:e3:e1:5f:70:8e:eb:41:db:06:ee:
a1:0d:ba:f9:74:13:fc:fc:f3:11:62:e8:49:6c:a0:5e:13:f1:
25:75:05:72:a7:98:87:64:09:80:c7:91:b9:7a:48:af:e8:1f:
c3:b3:96:70:8b:d8:e1:bc:63:c5:c9:d7:35:96:f2:32:16:80:
ba:fd:71:3e:30:2e:15:88:b0:cc:5f:f7:85:f9:70:f9:3c:86:
46:0c:29:53:c7:e5:60:b7:bd:13:f9:ca:a7:dd:43:d3:eb:dd:
4b:2e:ea:5f:82:de:0d:12:94:81:09:16:d5:5d:66:4a:14:6b:
4d:c3:3b:c9:9e:8c:e4:15:2b:1e:21:e8:d8:f5:a2:7c:c2:1b:
e6:99:7c:e3:7b:83:6c:a4:99:b9:f7:b6:33:a4:17:c6:5b:2b:
b7:ad:32:47:4f:eb:02:86:78:e4:80:fc:4b:4f:05:77:6c:b8:
06:41:5b:94:79:82:eb:ad:1b:5c:f4:a2:29:e1:04:ef:c7:9e:
4a:9d:03:97:80:5a:24:19:60:7c:c2:05:00:3b:22:37:bf:a8:
eb:f1:4e:1f:24:4b:d7:8e:45:17:aa:a3:5b:7c:28:e8:f6:5d:
54:34:29:51:00:bf:b3:06:e4:59:95:90:f5:29:73:a1:bf:be:
5c:0b:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:49:37 2026 by rpki-client