Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/wlVV2u9sUSOJOs56SpuPP7Lkc08.roa
File: wlVV2u9sUSOJOs56SpuPP7Lkc08.roa (raw, json)
Hash identifier: bhHShV1dfOm2e+wPjw+yX3ITGGkTo9UL4krgTRrzuCg=
Subject key identifier: C2:55:55:DA:EF:6C:51:23:89:3A:CE:7A:4A:9B:8F:3F:B2:E4:73:4F
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 01A1C14B0CBEA0D774660770EC56872A0AC1
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/wlVV2u9sUSOJOs56SpuPP7Lkc08.roa
Signing time: Mon 09 Nov 2026 17:11:23 +0000
ROA not before: Mon 09 Nov 2026 17:11:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 46.149.208.0/20 maxlen: 24
185.12.20.0/22 maxlen: 24
185.237.162.0/23 maxlen: 24
2a02:ea80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:4b:0c:be:a0:d7:74:66:07:70:ec:56:87:2a:0a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Nov 9 17:11:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c25555daef6c5123893ace7a4a9b8f3fb2e4734f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:43:29:e6:97:ef:88:e3:b6:eb:95:88:06:
36:2f:a0:2e:53:ef:00:dd:17:3d:cb:bc:1b:82:c6:
ae:d5:c5:f9:70:f7:b9:5b:d3:5f:f2:64:c3:5a:9d:
05:90:30:48:79:2b:90:4a:e4:8f:f2:37:28:72:ce:
57:94:47:a9:00:62:bb:13:c9:93:9f:6e:23:11:ab:
6e:2c:07:31:2f:8b:35:e6:88:93:3a:57:bd:4f:eb:
ad:0d:27:e5:5e:45:34:9d:f1:65:89:89:eb:e8:fa:
2b:0f:20:03:25:dd:86:cb:36:49:1d:14:aa:37:85:
04:23:db:26:f4:56:56:0c:d6:f0:1a:9f:8b:a3:8c:
dc:47:da:79:b7:bd:27:3c:c1:5c:82:63:93:33:59:
1e:90:94:14:f9:6e:97:e8:95:74:04:b7:21:0d:a4:
fc:a8:46:6b:19:fa:b5:06:ae:cc:93:41:c8:bb:64:
23:7b:49:84:94:c6:6e:4a:56:aa:52:3f:fe:e0:05:
34:f6:23:9d:00:dd:09:8d:ae:20:5c:34:7b:1c:75:
a8:b5:f9:16:d0:28:40:49:a1:cc:4e:49:6d:52:9e:
7a:a1:34:61:77:55:a2:73:53:76:1e:bb:d7:0b:f8:
52:d1:cc:b4:f4:4b:d7:8c:19:fb:54:c1:6e:fc:f7:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:55:DA:EF:6C:51:23:89:3A:CE:7A:4A:9B:8F:3F:B2:E4:73:4F
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/wlVV2u9sUSOJOs56SpuPP7Lkc08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.208.0/20
185.12.20.0/22
185.237.162.0/23
IPv6:
2a02:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
08:5f:c4:3e:bd:83:32:b3:db:48:0a:7d:13:a8:61:49:97:27:
38:2e:40:1a:c1:34:d5:37:3b:77:90:73:6c:43:e6:39:a4:c8:
02:3c:e9:70:10:d0:46:9d:00:fa:01:87:d1:d7:df:fc:76:4e:
dd:f2:5b:6f:a2:3d:5c:78:14:e9:6f:a3:48:be:99:28:da:8a:
50:f8:3c:b1:e3:34:78:87:f1:74:7d:7a:bd:6d:3c:66:c8:a7:
c8:3e:44:9d:f7:41:cc:c0:c7:ea:60:60:b3:3b:59:92:b2:b1:
37:33:99:03:e1:df:cd:14:7f:fc:bf:2a:f8:a1:e4:d2:29:56:
2e:f9:db:00:69:62:df:5e:e4:94:59:65:15:5f:a8:c8:11:7e:
17:f8:8f:ac:f6:3a:ae:e6:a3:ca:5d:7c:c0:f4:0e:d0:f2:32:
35:91:a0:29:a5:24:90:3f:e6:cb:91:f5:e5:7c:c3:df:41:14:
0c:7f:69:44:3d:3c:e4:37:ce:e4:a3:11:51:a9:b8:2b:d7:59:
d9:d5:f0:9a:39:6a:cf:8a:64:f9:e9:6d:83:84:44:cf:8b:31:
36:e4:d1:1b:9d:d0:a9:93:32:e2:1a:96:54:ce:c9:bc:97:e3:
10:ae:c9:9d:91:8d:e2:cf:88:29:3a:68:f2:8f:4d:14:ed:b2:
19:2b:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:45 2026 by rpki-client