Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/WYkunCsYhA2teRxLAg2Szm4t8hg.roa
File: WYkunCsYhA2teRxLAg2Szm4t8hg.roa (raw, json)
Hash identifier: qVG+UMRzYieYY8QAWvVzEcBUYsd1eqpIARZQP14+D/Y=
Subject key identifier: 59:89:2E:9C:2B:18:84:0D:AD:79:1C:4B:02:0D:92:CE:6E:2D:F2:18
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 01A038DB8D2BE8490501AAF45701E6DD028C
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/WYkunCsYhA2teRxLAg2Szm4t8hg.roa
Signing time: Tue 25 Aug 2026 12:18:27 +0000
ROA not before: Tue 25 Aug 2026 12:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49467
IP address blocks: 37.152.72.0/21 maxlen: 21
37.152.72.0/24 maxlen: 24
37.152.73.0/24 maxlen: 24
37.152.74.0/24 maxlen: 24
37.152.75.0/24 maxlen: 24
37.152.76.0/24 maxlen: 24
37.152.77.0/24 maxlen: 24
37.152.78.0/24 maxlen: 24
37.152.79.0/24 maxlen: 24
85.95.224.0/24 maxlen: 24
85.95.225.0/24 maxlen: 24
85.95.226.0/24 maxlen: 24
85.95.227.0/24 maxlen: 24
85.95.228.0/24 maxlen: 24
85.95.229.0/24 maxlen: 24
85.95.230.0/24 maxlen: 24
85.95.231.0/24 maxlen: 24
85.95.232.0/24 maxlen: 24
85.95.233.0/24 maxlen: 24
85.95.234.0/24 maxlen: 24
85.95.235.0/24 maxlen: 24
85.95.236.0/24 maxlen: 24
85.95.245.0/24 maxlen: 24
85.95.246.0/24 maxlen: 24
85.95.247.0/24 maxlen: 24
85.95.248.0/24 maxlen: 24
85.95.249.0/24 maxlen: 24
85.95.250.0/24 maxlen: 24
85.95.251.0/24 maxlen: 24
85.95.252.0/24 maxlen: 24
85.95.253.0/24 maxlen: 24
85.95.254.0/24 maxlen: 24
92.42.32.0/24 maxlen: 24
92.42.33.0/24 maxlen: 24
92.42.34.0/24 maxlen: 24
92.42.35.0/24 maxlen: 24
92.42.36.0/24 maxlen: 24
92.42.37.0/24 maxlen: 24
92.42.38.0/24 maxlen: 24
92.42.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:db:8d:2b:e8:49:05:01:aa:f4:57:01:e6:dd:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Aug 25 12:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59892e9c2b18840dad791c4b020d92ce6e2df218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:ac:3b:74:3d:ff:18:e5:20:2b:28:fd:f2:
7c:0f:f2:f4:2b:4b:9d:4b:84:ad:a9:f4:e9:05:72:
60:79:1e:b3:b0:d3:2e:7a:6e:46:01:2e:44:d4:d6:
dd:e6:7e:13:c9:11:6a:3b:a0:14:9b:07:52:e0:ea:
82:63:d9:a8:6f:a0:6d:32:5f:5b:52:7c:a6:92:0a:
16:d5:88:3d:ce:45:94:e2:20:31:50:97:c1:e3:d8:
b4:6a:6d:b0:f7:25:d9:8a:a4:89:53:0f:e2:ff:e9:
c1:f6:20:04:96:21:60:78:10:9e:54:c0:2a:61:1f:
a6:33:e4:fb:af:4c:34:62:fe:24:2f:f8:f4:95:3f:
4b:5c:33:cb:62:7d:7f:f1:de:c4:d2:60:b5:51:58:
b1:6a:f8:f7:31:cf:5e:8e:40:89:8a:38:46:b8:4f:
3b:17:9b:2d:f1:be:10:75:7b:7d:7c:2c:da:5d:3e:
d5:5b:ff:55:3d:49:5c:c9:4c:05:59:f5:f3:ac:b4:
9a:b4:96:5f:d2:cb:19:b6:62:21:fc:07:48:e7:c4:
21:17:2f:4a:d5:ae:93:8c:08:49:8e:04:6d:da:49:
c5:31:ce:48:3a:80:a5:a7:33:81:0e:bd:ce:29:0e:
eb:9f:40:29:ee:2a:89:22:c0:d9:38:4a:05:51:60:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:2E:9C:2B:18:84:0D:AD:79:1C:4B:02:0D:92:CE:6E:2D:F2:18
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/WYkunCsYhA2teRxLAg2Szm4t8hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.72.0/21
85.95.224.0-85.95.236.255
85.95.245.0-85.95.254.255
92.42.32.0/21
Signature Algorithm: sha256WithRSAEncryption
70:7f:15:cb:31:2f:50:db:af:3c:c9:6b:ae:45:90:ec:17:e5:
3e:1d:ce:14:7c:fc:bd:c3:2e:7c:a4:3e:40:56:2d:20:62:dd:
4c:b9:75:90:24:89:9d:b9:6f:90:0e:80:d3:42:91:32:76:9c:
34:f7:ff:a1:c0:07:ab:77:8b:04:14:ed:be:ac:e2:62:d7:d8:
6d:76:da:47:51:2a:5b:4c:15:31:b8:5e:50:1c:e7:f7:25:27:
92:a8:e3:67:4f:fc:90:24:82:62:d5:01:07:ec:ea:ae:1f:f3:
dc:ab:16:4b:4b:09:72:b6:ff:2a:80:68:1e:2c:11:cf:1f:86:
d1:1a:cd:1a:9c:c0:bb:eb:62:6d:9e:00:5c:e5:47:8b:ce:2a:
d9:90:9b:4a:d9:cc:1b:2d:c3:5e:d1:7b:8b:c4:35:ee:3b:90:
da:36:b9:6d:ea:45:07:05:e5:8f:72:02:9a:4f:69:7a:ed:aa:
25:73:8d:38:12:cc:45:0b:18:81:f5:ab:53:bc:d9:f3:62:d1:
45:0f:be:05:b9:55:0d:cf:2e:d7:c9:f8:6f:e8:d4:a2:c9:c5:
1f:72:bb:b1:c9:b5:7a:91:46:61:78:a3:e5:b6:ba:01:83:0e:
9a:e6:47:74:35:91:3c:ba:b6:f1:9a:8a:93:9e:2b:af:64:99:
24:07:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:10:22 2026 by rpki-client