Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wCy430g2CJl1rVT2dNGf5olvQgQ.roa
File: wCy430g2CJl1rVT2dNGf5olvQgQ.roa (raw, json)
Hash identifier: Fyt1DDnYD1lrvfkCIlY9Lv19peqFskQ2YuV9BM0D81I=
Subject key identifier: C0:2C:B8:DF:48:36:08:99:75:AD:54:F6:74:D1:9F:E6:89:6F:42:04
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0D2466581D63C8CFD143A9772C69468F3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wCy430g2CJl1rVT2dNGf5olvQgQ.roa
Signing time: Thu 24 Sep 2026 07:17:03 +0000
ROA not before: Thu 24 Sep 2026 07:17:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 9.247.5.0/24 maxlen: 24
9.247.8.0/24 maxlen: 24
9.247.9.0/24 maxlen: 24
9.247.11.0/24 maxlen: 24
9.247.16.0/24 maxlen: 24
9.247.24.0/24 maxlen: 24
9.247.28.0/24 maxlen: 24
9.247.34.0/24 maxlen: 24
9.247.88.0/24 maxlen: 24
9.247.107.0/24 maxlen: 24
9.247.143.0/24 maxlen: 24
9.247.160.0/24 maxlen: 24
9.247.241.0/24 maxlen: 24
9.247.247.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
72.35.240.0/24 maxlen: 24
72.35.241.0/24 maxlen: 24
72.35.243.0/24 maxlen: 24
72.35.244.0/24 maxlen: 24
78.17.20.0/24 maxlen: 24
78.17.21.0/24 maxlen: 24
78.17.23.0/24 maxlen: 24
78.17.30.0/24 maxlen: 24
78.17.31.0/24 maxlen: 24
78.17.58.0/24 maxlen: 24
78.17.61.0/24 maxlen: 24
78.17.81.0/24 maxlen: 24
78.17.168.0/24 maxlen: 24
78.17.229.0/24 maxlen: 24
89.125.223.0/24 maxlen: 24
89.125.242.0/24 maxlen: 24
89.125.245.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
104.143.194.0/24 maxlen: 24
104.143.195.0/24 maxlen: 24
104.143.200.0/24 maxlen: 24
140.225.196.0/24 maxlen: 24
140.225.205.0/24 maxlen: 24
153.76.192.0/24 maxlen: 24
153.76.197.0/24 maxlen: 24
153.76.201.0/24 maxlen: 24
153.76.206.0/24 maxlen: 24
153.76.207.0/24 maxlen: 24
153.76.209.0/24 maxlen: 24
153.76.210.0/24 maxlen: 24
153.76.219.0/24 maxlen: 24
153.76.220.0/24 maxlen: 24
153.76.222.0/24 maxlen: 24
153.76.223.0/24 maxlen: 24
162.35.227.0/24 maxlen: 24
206.245.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:46:65:81:d6:3c:8c:fd:14:3a:97:72:c6:94:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 24 07:17:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c02cb8df4836089975ad54f674d19fe6896f4204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:08:cd:56:3a:4f:ba:10:d5:61:ab:7f:58:
e7:e9:d0:39:ef:b7:9b:32:98:19:7f:dd:62:a7:5e:
4e:f9:f4:da:95:15:ff:72:01:a9:4d:39:81:08:ff:
1a:86:23:c2:aa:c5:10:61:d3:e5:74:ef:45:70:1e:
0c:e1:b4:97:37:4c:3f:87:69:84:c9:77:03:70:1e:
1b:91:c2:19:e0:f9:44:b2:01:a1:75:a0:7c:43:95:
fb:3f:94:47:d8:bf:2a:d1:14:e2:df:20:cf:56:b2:
45:c3:c9:bb:ca:75:e9:52:e0:e4:e5:00:05:8b:2a:
60:73:84:e1:24:1c:b0:45:a5:1d:e9:4c:a6:90:0c:
45:c0:28:97:63:e2:ec:94:27:bc:89:fd:79:1b:d2:
69:4f:ac:aa:19:8c:37:6a:4b:a3:57:b5:a0:2d:43:
dd:37:1f:a4:57:41:27:df:af:11:f0:bc:5e:ab:c9:
79:17:1d:bd:6d:4a:0b:e5:5d:36:0c:69:ff:09:de:
a8:4e:0c:fa:9a:77:5e:54:e2:b6:6c:e4:59:66:6f:
59:2b:91:f2:1b:f8:d0:ce:24:db:f4:2b:35:4f:e6:
d8:d5:7b:92:e4:e5:7b:f5:82:b1:b1:90:1b:fc:95:
70:bc:fd:65:05:4c:cc:7f:ff:8d:d4:a5:52:dd:6d:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2C:B8:DF:48:36:08:99:75:AD:54:F6:74:D1:9F:E6:89:6F:42:04
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wCy430g2CJl1rVT2dNGf5olvQgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.5.0/24
9.247.8.0/23
9.247.11.0/24
9.247.16.0/24
9.247.24.0/24
9.247.28.0/24
9.247.34.0/24
9.247.88.0/24
9.247.107.0/24
9.247.143.0/24
9.247.160.0/24
9.247.241.0/24
9.247.247.0/24
46.102.237.0/24
72.35.240.0/23
72.35.243.0-72.35.244.255
78.17.20.0/23
78.17.23.0/24
78.17.30.0/23
78.17.58.0/24
78.17.61.0/24
78.17.81.0/24
78.17.168.0/24
78.17.229.0/24
89.125.223.0/24
89.125.242.0/24
89.125.245.0/24
103.245.228.0/24
104.143.194.0/23
104.143.200.0/24
140.225.196.0/24
140.225.205.0/24
153.76.192.0/24
153.76.197.0/24
153.76.201.0/24
153.76.206.0/23
153.76.209.0-153.76.210.255
153.76.219.0-153.76.220.255
153.76.222.0/23
162.35.227.0/24
206.245.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:90:d9:cb:cd:1e:c6:7a:5c:14:bc:08:af:69:3b:d5:85:12:
cc:be:6b:55:a4:43:1e:17:43:ec:1b:d8:7e:9c:e4:60:57:8e:
e3:ea:57:4e:32:3a:24:6b:e7:ff:c0:d2:8d:31:b5:1f:41:cd:
02:d9:f0:6a:91:4b:43:6f:0c:a3:76:2a:33:ce:20:f7:47:ec:
72:a3:39:e0:1e:ae:07:03:90:35:d4:8e:50:da:65:11:74:5d:
01:8e:5c:45:f6:98:e0:e2:a8:a3:a1:e3:31:31:41:89:41:c2:
af:eb:2c:47:42:3c:b1:d2:6f:d9:db:ea:50:ad:bd:34:85:a7:
ff:d4:49:a8:f2:a9:15:b5:16:02:e9:e6:6e:92:16:8f:d8:73:
ad:f7:94:bf:98:58:1a:51:58:22:17:b4:36:60:87:68:3f:83:
ad:49:c9:99:7b:8a:c3:d0:ee:8f:76:8c:4e:55:c7:f5:6e:97:
92:95:4c:97:df:79:16:11:57:fd:b3:aa:2c:04:a3:36:3e:99:
67:7e:ae:1a:fd:2b:41:4d:02:dd:0d:c9:46:63:aa:b6:ca:54:
31:c8:3b:e0:bf:ee:64:0d:46:08:f7:df:05:3d:c5:d6:d0:82:
2f:13:df:e2:15:f2:98:c3:48:6e:c4:1c:f8:3f:82:ee:73:76:
40:d4:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:28:33 2026 by rpki-client