Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/Wx_2U5YHWOAuQ0HnQMwRO-YsXnc.roa
File: Wx_2U5YHWOAuQ0HnQMwRO-YsXnc.roa (raw, json)
Hash identifier: DTCh6633L81Y1AcPDXl3SKo6F0jOzTDrdevGbyr19Xc=
Subject key identifier: 5B:1F:F6:53:96:07:58:E0:2E:43:41:E7:40:CC:11:3B:E6:2C:5E:77
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 01A0D2A565FC2751B0637E144769C8777770
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/Wx_2U5YHWOAuQ0HnQMwRO-YsXnc.roa
Signing time: Thu 24 Sep 2026 09:00:49 +0000
ROA not before: Thu 24 Sep 2026 09:00:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35625
IP address blocks: 37.16.78.0/24 maxlen: 24
37.235.88.0/21 maxlen: 24
45.15.204.0/22 maxlen: 24
45.88.140.0/22 maxlen: 24
45.138.192.0/22 maxlen: 24
46.29.120.0/21 maxlen: 24
85.208.216.0/22 maxlen: 24
89.21.88.0/21 maxlen: 21
91.212.236.0/24 maxlen: 24
91.229.136.0/24 maxlen: 24
94.158.180.0/22 maxlen: 24
109.71.136.0/21 maxlen: 24
109.197.240.0/21 maxlen: 24
109.205.0.0/21 maxlen: 24
185.31.148.0/22 maxlen: 24
185.39.168.0/22 maxlen: 24
185.71.148.0/22 maxlen: 24
185.75.140.0/22 maxlen: 24
185.117.18.0/23 maxlen: 24
185.161.44.0/22 maxlen: 24
185.167.76.0/24 maxlen: 24
185.181.4.0/22 maxlen: 24
185.218.212.0/22 maxlen: 24
185.220.72.0/22 maxlen: 24
185.227.0.0/22 maxlen: 24
185.230.96.0/22 maxlen: 24
185.246.26.0/24 maxlen: 24
185.246.96.0/22 maxlen: 24
185.252.156.0/22 maxlen: 24
193.176.64.0/22 maxlen: 24
194.88.112.0/21 maxlen: 24
194.126.178.0/24 maxlen: 24
195.90.116.0/22 maxlen: 24
195.190.27.0/24 maxlen: 24
2a00:ba60::/32 maxlen: 32
2a00:ba61::/32 maxlen: 32
2a00:ba62::/32 maxlen: 32
2a00:ba67::/32 maxlen: 32
2a01:6600:2e00::/40 maxlen: 40
2a01:6603::/32 maxlen: 32
2a01:6604::/32 maxlen: 32
2a01:6605::/32 maxlen: 32
2a02:21c8::/32 maxlen: 32
2a09:8c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:65:fc:27:51:b0:63:7e:14:47:69:c8:77:77:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Sep 24 09:00:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b1ff653960758e02e4341e740cc113be62c5e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:40:3a:31:39:34:9d:5d:3f:ef:11:c6:b6:
6a:f1:52:73:59:93:a9:14:d7:85:94:4b:cb:bf:30:
ef:c4:de:76:5a:73:63:b3:ad:66:29:ec:ce:f1:a8:
e2:6b:8c:79:43:60:2c:c9:ab:4b:2e:91:b6:24:d7:
a5:4b:3f:b0:df:ec:76:20:1d:58:26:e1:de:18:ed:
76:a9:e8:89:0e:a9:22:30:a2:94:88:40:83:43:86:
39:4d:86:11:ad:ef:54:93:37:8c:5b:05:96:d4:2b:
d3:2c:f1:3e:af:b7:2c:dc:d4:4d:58:16:4b:73:b2:
dc:74:68:cd:26:7b:a1:7d:c4:bf:2e:76:79:04:6a:
70:a4:6b:e9:4e:9f:25:49:60:d2:7a:45:49:e7:ee:
b7:85:24:e9:4b:ca:6f:6c:e2:a7:ee:a2:b3:c5:8a:
d2:1b:0d:0a:27:5d:0b:ee:f6:06:36:88:0a:6b:68:
fc:3a:d7:da:ea:33:65:b9:81:c0:19:65:08:45:d5:
49:98:f4:76:a4:39:2b:e0:ad:dd:38:fa:68:20:7d:
87:05:ed:d0:91:49:17:78:f6:f7:55:65:bf:b1:02:
bc:80:c2:1d:4d:e0:d1:15:04:37:ba:59:d2:06:83:
91:f4:e2:ee:52:93:28:11:01:3b:72:15:f6:7b:81:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:F6:53:96:07:58:E0:2E:43:41:E7:40:CC:11:3B:E6:2C:5E:77
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/Wx_2U5YHWOAuQ0HnQMwRO-YsXnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.78.0/24
37.235.88.0/21
45.15.204.0/22
45.88.140.0/22
45.138.192.0/22
46.29.120.0/21
85.208.216.0/22
89.21.88.0/21
91.212.236.0/24
91.229.136.0/24
94.158.180.0/22
109.71.136.0/21
109.197.240.0/21
109.205.0.0/21
185.31.148.0/22
185.39.168.0/22
185.71.148.0/22
185.75.140.0/22
185.117.18.0/23
185.161.44.0/22
185.167.76.0/24
185.181.4.0/22
185.218.212.0/22
185.220.72.0/22
185.227.0.0/22
185.230.96.0/22
185.246.26.0/24
185.246.96.0/22
185.252.156.0/22
193.176.64.0/22
194.88.112.0/21
194.126.178.0/24
195.90.116.0/22
195.190.27.0/24
IPv6:
2a00:ba60::-2a00:ba62:ffff:ffff:ffff:ffff:ffff:ffff
2a00:ba67::/32
2a01:6600:2e00::/40
2a01:6603::-2a01:6605:ffff:ffff:ffff:ffff:ffff:ffff
2a02:21c8::/32
2a09:8c40::/29
Signature Algorithm: sha256WithRSAEncryption
34:be:44:80:a9:c3:b1:6a:b8:b2:2a:7d:46:20:38:83:1e:b5:
08:c7:5a:ec:3c:a5:90:84:ec:9f:cf:3f:05:c5:d2:3c:9f:4e:
69:d8:9b:2e:78:86:f2:a0:fc:f0:68:96:54:69:24:45:5a:b1:
d9:70:c5:56:19:81:fd:cf:90:7a:35:32:e8:c9:8f:8c:5a:0b:
79:ca:9c:cd:58:22:73:05:d4:a0:bf:be:61:7f:f2:da:60:71:
58:1e:8a:25:35:46:4b:b0:90:66:e2:89:fc:8b:6a:be:e9:dd:
7b:9d:ae:be:0a:0d:66:92:e8:ba:1a:39:45:a5:e7:c5:e1:b8:
8e:6c:05:28:36:33:36:e1:d7:00:05:e7:38:a6:ea:55:00:de:
f4:60:8a:85:c1:4a:37:e4:69:fd:a8:27:b7:97:37:a9:e0:c9:
0d:a1:99:29:b6:a4:8d:99:85:1c:d5:a7:cf:eb:93:cb:d7:7a:
5d:d7:52:52:59:a9:c5:33:ec:ac:fc:e9:f7:d4:53:6b:e0:aa:
6f:8e:48:af:d2:1d:3c:f7:92:3c:d9:b8:9c:4a:ab:62:69:7f:
61:0e:6f:99:d3:a8:5c:a1:e8:d0:6b:73:c0:ae:28:da:4f:e5:
4b:1f:d5:dc:e6:29:a5:08:39:af:2e:df:3a:cf:e6:8f:8a:b7:
60:33:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:31:04 2026 by rpki-client