Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/widNuqNyVEJ8Lz_BjYS_apjsWsM.roa
File: widNuqNyVEJ8Lz_BjYS_apjsWsM.roa (raw, json)
Hash identifier: Lalbh+4huEMmUd+DnIxuBmOBVKnW3pxAwGgp5DkTv1A=
Subject key identifier: C2:27:4D:BA:A3:72:54:42:7C:2F:3F:C1:8D:84:BF:6A:98:EC:5A:C3
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019F1D4D778C98D514CB17ACC5B15EADEEBC
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/widNuqNyVEJ8Lz_BjYS_apjsWsM.roa
Signing time: Wed 01 Jul 2026 10:50:43 +0000
ROA not before: Wed 01 Jul 2026 10:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 94.16.30.0/23 maxlen: 23
94.16.30.128/25 maxlen: 25
94.16.104.0/22 maxlen: 24
94.16.108.0/22 maxlen: 24
94.16.112.0/21 maxlen: 24
94.16.120.0/22 maxlen: 24
185.216.176.0/22 maxlen: 22
185.232.68.0/22 maxlen: 22
188.172.228.0/23 maxlen: 24
193.26.156.0/22 maxlen: 22
194.36.144.0/22 maxlen: 22
2a00:11c0:5d::/48 maxlen: 48
2a00:11c0:5f::/48 maxlen: 48
2a00:11c0:60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:4d:77:8c:98:d5:14:cb:17:ac:c5:b1:5e:ad:ee:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jul 1 10:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2274dbaa37254427c2f3fc18d84bf6a98ec5ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:7f:23:7a:c2:e9:4e:58:77:8a:4f:75:be:
cc:90:02:7e:45:78:47:01:ea:f7:61:32:97:ae:eb:
fa:dd:d0:89:41:43:40:6d:95:8c:09:63:71:29:a4:
92:3f:ff:68:d4:a8:2e:5b:a1:17:93:87:a6:a4:21:
f5:19:1e:eb:7c:5f:ff:7c:6f:1f:a2:21:5b:ef:26:
41:57:62:f4:7f:d5:a4:17:b6:bb:c4:86:c7:6e:0e:
86:8a:eb:0a:a4:05:3e:dd:29:f3:14:c1:86:f2:0f:
7f:a4:f8:36:1d:be:a5:ae:0c:41:82:f2:92:50:89:
eb:3c:17:f5:88:48:bd:a7:05:d8:68:de:70:b2:0b:
e6:2f:91:e3:b4:92:ee:b9:85:a6:d4:61:a7:7b:fa:
2a:fb:94:10:36:c3:4a:35:88:87:39:77:d0:bf:23:
ec:f9:3f:2b:d1:93:b3:33:b5:74:b1:dc:23:8a:d1:
9d:02:88:bc:a2:3a:5a:7c:be:bd:6b:76:d8:f2:1d:
7a:e9:1f:0f:5b:93:ea:2f:17:8a:9b:9d:fd:a6:d3:
45:c5:a4:7a:78:81:6b:07:f6:9a:90:ae:5d:7c:22:
47:65:60:9f:00:e8:61:f8:0d:f1:44:a9:be:c2:d8:
09:50:bf:34:74:65:d9:3b:17:18:ad:79:f8:2c:39:
63:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:27:4D:BA:A3:72:54:42:7C:2F:3F:C1:8D:84:BF:6A:98:EC:5A:C3
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/widNuqNyVEJ8Lz_BjYS_apjsWsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.16.30.0/23
94.16.104.0-94.16.123.255
185.216.176.0/22
185.232.68.0/22
188.172.228.0/23
193.26.156.0/22
194.36.144.0/22
IPv6:
2a00:11c0:5d::/48
2a00:11c0:5f::-2a00:11c0:60:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5a:5c:bb:0b:24:0c:d8:76:e3:9c:99:49:6f:f0:c4:67:92:47:
81:5b:a7:6a:c8:dd:81:13:b9:ee:24:96:cc:ba:67:10:45:09:
68:57:0d:42:30:82:26:2b:1e:5a:65:5d:e3:7c:78:d4:99:ef:
c5:9f:21:1b:8d:fe:80:8e:af:62:8a:b5:0f:97:24:98:9c:1f:
78:84:ad:0b:66:90:b6:3a:e4:64:d1:89:19:fc:fe:25:3f:f8:
ef:ad:90:51:ae:45:b3:e1:14:91:fb:cc:9e:76:c5:d0:51:b1:
87:61:e5:c7:2c:4a:bd:53:71:3f:65:e5:a0:1c:ef:ed:aa:66:
22:39:e9:f0:4e:c1:b5:ed:0f:4c:92:19:a4:c0:1c:f2:df:8c:
ca:8e:09:b2:c7:b8:c2:5d:03:3b:1a:dc:d0:7b:d9:f7:d7:5f:
b5:ac:66:17:bd:6b:2f:67:8d:c7:17:cd:29:f1:7e:29:4c:03:
3b:5c:9a:72:cb:10:9d:63:af:77:58:e8:29:db:c2:76:43:ff:
a3:56:fb:71:85:cd:f2:e1:13:78:7b:92:1b:4a:d2:4a:b2:a8:
71:8f:82:2a:bb:df:00:02:cf:38:a1:ae:b6:ef:a9:08:de:3c:
0c:98:d0:48:dd:b0:07:3d:36:99:61:dd:88:78:5d:5c:58:71:
37:ed:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:52 2026 by rpki-client