Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/wZV2DNFNambXoVMNzBEjjCDyXgw.roa
File: wZV2DNFNambXoVMNzBEjjCDyXgw.roa (raw, json)
Hash identifier: 20MPlsEAM9nTwfm7TDpcbG/62azqb9TG4P6lpGVaVPQ=
Subject key identifier: C1:95:76:0C:D1:4D:6A:66:D7:A1:53:0D:CC:11:23:8C:20:F2:5E:0C
Certificate issuer: /CN=8cef146d85c09aa59687fd6315b13271c1c292ad
Certificate serial: 019DD5A7ADB06AB47817324B4371785FB2BF
Authority key identifier: 8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/wZV2DNFNambXoVMNzBEjjCDyXgw.roa
Signing time: Tue 28 Apr 2026 19:53:49 +0000
ROA not before: Tue 28 Apr 2026 19:53:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205809
IP address blocks: 66.203.126.0/23 maxlen: 23
94.24.36.0/24 maxlen: 24
94.24.37.0/24 maxlen: 24
162.208.16.0/24 maxlen: 24
185.206.24.0/24 maxlen: 24
185.206.25.0/24 maxlen: 24
185.206.26.0/24 maxlen: 24
185.206.27.0/24 maxlen: 24
2a0b:e40:1::/48 maxlen: 48
2a0b:e40:2::/48 maxlen: 48
2a0b:e40:3::/48 maxlen: 48
2a0b:e41:1::/48 maxlen: 48
2a0b:e41:2::/48 maxlen: 48
2a0b:e42:1::/48 maxlen: 48
2a0b:e43::/40 maxlen: 40
2a0b:e43:1::/48 maxlen: 48
2a0b:e44::/40 maxlen: 40
2a0b:e45:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:a7:ad:b0:6a:b4:78:17:32:4b:43:71:78:5f:b2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cef146d85c09aa59687fd6315b13271c1c292ad
Validity
Not Before: Apr 28 19:53:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c195760cd14d6a66d7a1530dcc11238c20f25e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:81:33:0e:8d:b5:1a:d1:e4:32:bd:97:1f:
96:72:2f:fe:33:5e:5e:52:d2:20:f7:f1:2f:d1:1b:
13:3c:30:6f:65:13:05:f3:7d:1d:74:27:0c:cd:8b:
37:09:6e:dd:cd:fb:e5:3b:18:09:e2:73:31:85:d2:
51:c1:37:eb:1a:93:23:c1:2d:ec:21:35:40:68:f3:
f9:f8:7e:27:c5:91:b4:2b:b8:9d:63:f5:fa:1d:93:
79:2e:bc:3f:e1:85:d4:8a:fc:fa:ab:dd:0a:9d:1c:
25:d1:f4:81:b5:fb:65:af:be:cb:c0:c3:e4:ff:cd:
22:fe:16:42:3d:b9:0c:01:0b:b2:9d:50:5b:e1:3f:
03:2e:8a:b0:a3:f1:1b:ca:c0:7d:44:e1:08:7f:52:
a2:79:0b:ac:a1:c3:dc:af:56:6e:f8:28:8a:75:8e:
3a:89:7b:e8:a7:34:bd:4f:ff:70:7e:89:b2:f8:3f:
19:bf:84:35:cc:8c:ae:1e:a4:71:5f:4c:2d:d7:6a:
a3:d6:91:0c:27:67:5e:d4:05:71:d8:cb:3f:bd:68:
8b:7f:40:12:98:14:90:60:4f:5d:5e:00:0f:b0:6e:
d7:21:09:3f:0a:25:16:02:82:90:bb:55:dd:df:bf:
71:8c:f2:02:8a:11:0d:98:c8:63:0e:f1:a5:ad:08:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:95:76:0C:D1:4D:6A:66:D7:A1:53:0D:CC:11:23:8C:20:F2:5E:0C
X509v3 Authority Key Identifier:
keyid:8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/wZV2DNFNambXoVMNzBEjjCDyXgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.203.126.0/23
94.24.36.0/23
162.208.16.0/24
185.206.24.0/22
IPv6:
2a0b:e40:1::-2a0b:e40:3:ffff:ffff:ffff:ffff:ffff
2a0b:e41:1::-2a0b:e41:2:ffff:ffff:ffff:ffff:ffff
2a0b:e42:1::/48
2a0b:e43::/40
2a0b:e44::/40
2a0b:e45:1::/48
Signature Algorithm: sha256WithRSAEncryption
13:63:1d:9d:f5:10:0a:11:25:29:37:d4:cd:8c:cd:eb:5c:e0:
a9:e0:2c:8d:7d:67:d9:28:3b:30:fb:f0:b4:02:94:8a:56:47:
de:f8:fb:ff:8b:15:96:ae:df:4d:f5:fd:3a:5f:fa:a4:11:f7:
ca:a9:23:4f:cb:7e:06:0f:10:9c:f0:16:9f:19:56:91:43:50:
c4:b5:8d:f9:a3:73:ae:6a:51:32:4e:84:a9:5b:33:68:16:9a:
51:b5:80:da:43:94:e1:d5:03:2f:23:33:80:d5:05:8b:d0:a3:
ae:b8:55:57:e0:e9:73:50:f3:fe:52:a2:6e:ce:dd:ba:d5:05:
4f:f1:ad:1c:e2:34:d3:38:9f:16:b3:3b:86:7e:96:83:6d:52:
90:79:d5:09:1d:ec:04:7e:15:3f:b3:92:71:ef:cc:7c:ee:e0:
41:34:77:7e:88:5d:8f:d8:9a:e7:11:02:86:78:87:86:03:32:
cc:7f:b3:cd:e9:97:05:29:ae:eb:1d:22:cf:dc:d5:e5:24:5a:
8c:d3:3f:8e:4c:db:22:7e:9a:4a:82:8f:a8:57:11:54:5b:86:
d2:cf:b3:e7:d8:f9:b8:fb:b4:8d:90:ae:f7:ec:c5:e8:b7:56:
ef:dc:fe:d1:a0:fe:7e:5e:db:cd:84:c0:e8:4b:cf:30:10:6c:
7d:ed:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:57 2026 by rpki-client