Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/PrWnje5pwuyLLung5cAWo-Sdq5o.roa
File: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (raw, json)
Hash identifier: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=
Subject key identifier: 3E:B5:A7:8D:EE:69:C2:EC:8B:2E:E9:E0:E5:C0:16:A3:E4:9D:AB:9A
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019CB8A2CFD567DB6413FF219C236E58CD08
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/PrWnje5pwuyLLung5cAWo-Sdq5o.roa
Signing time: Wed 04 Mar 2026 11:36:43 +0000
ROA not before: Wed 04 Mar 2026 11:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41937
IP address blocks: 91.185.96.0/19 maxlen: 19
91.204.52.0/22 maxlen: 22
178.237.216.0/22 maxlen: 22
178.237.216.0/23 maxlen: 23
178.237.216.0/24 maxlen: 24
178.237.217.0/24 maxlen: 24
178.237.218.0/23 maxlen: 23
178.237.218.0/24 maxlen: 24
178.237.219.0/24 maxlen: 24
178.237.220.0/22 maxlen: 22
178.237.220.0/23 maxlen: 23
178.237.220.0/24 maxlen: 24
178.237.221.0/24 maxlen: 24
178.237.222.0/23 maxlen: 23
178.237.222.0/24 maxlen: 24
178.237.223.0/24 maxlen: 24
2a00:cf00::/32 maxlen: 48
2a06:63c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:a2:cf:d5:67:db:64:13:ff:21:9c:23:6e:58:cd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Mar 4 11:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3eb5a78dee69c2ec8b2ee9e0e5c016a3e49dab9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:7a:7d:a0:5b:62:e3:75:b7:6c:8c:42:a6:
4b:d3:90:61:70:d1:9b:eb:e4:eb:8d:db:42:88:b9:
24:eb:af:4b:0c:1c:9f:eb:ea:61:9d:ad:6e:32:bb:
97:6c:a7:74:41:2b:5f:e5:3b:0f:22:88:34:43:90:
44:26:f4:03:d1:ae:5d:59:8b:bc:b4:fc:79:98:69:
a9:d9:d0:e5:e4:0a:e0:96:95:9e:fe:94:61:79:52:
09:25:f5:c4:b1:02:5b:e3:94:98:12:38:36:62:af:
89:c2:90:d9:21:e5:8d:7d:32:ce:48:f1:e6:12:01:
11:aa:1c:fa:dd:f6:4e:0b:98:02:a6:1f:dd:bb:ae:
94:ee:99:9d:e6:3b:a3:32:d1:aa:06:0f:73:2e:71:
26:9a:e1:a9:b2:16:0e:96:af:2d:c3:83:c5:f1:14:
84:25:63:a2:3c:bf:1a:51:44:9b:18:15:01:28:a9:
cb:eb:4c:c7:54:c5:8f:45:af:16:c9:5d:74:95:06:
e8:f8:69:3f:0a:38:b5:b7:58:a9:dc:13:c0:a4:5c:
3a:7a:bf:71:f6:0f:18:b5:ad:d9:ab:18:88:14:e3:
3c:42:80:fc:24:eb:6d:2c:e6:36:62:36:8a:e2:38:
cb:f9:0b:d2:b5:f1:55:52:f6:c9:1b:fc:82:1c:c6:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:A7:8D:EE:69:C2:EC:8B:2E:E9:E0:E5:C0:16:A3:E4:9D:AB:9A
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/PrWnje5pwuyLLung5cAWo-Sdq5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.185.96.0/19
91.204.52.0/22
178.237.216.0/21
IPv6:
2a00:cf00::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:b8:37:33:ce:92:67:c3:bf:54:66:d8:ff:fd:a0:19:9b:64:
16:88:a6:3b:7d:29:b9:95:92:12:e3:12:ea:85:10:c0:f9:62:
87:48:ce:73:da:95:5e:b6:18:e4:2d:0d:ca:f4:e4:3c:3d:36:
8d:3b:34:c5:54:9d:68:bd:0c:5c:33:9c:e7:d3:38:d0:e3:05:
cf:1c:ad:59:68:42:ca:90:77:00:28:77:af:75:66:d4:8d:52:
4e:75:92:81:a1:8d:d6:ba:4c:06:d6:83:51:32:3f:67:f0:6b:
9c:6a:fb:0e:3f:66:43:84:d9:0a:08:b2:2e:aa:5b:7a:96:98:
e5:e7:a6:32:60:5f:8d:38:69:d6:0b:cd:64:81:f2:92:75:f8:
e4:5b:e8:3c:28:4b:30:eb:50:7d:51:d9:30:32:cb:06:b7:03:
f3:77:f7:b0:58:5b:41:bd:01:db:df:78:3d:3d:58:ec:e5:80:
da:b0:4b:7f:6f:19:92:f7:6c:ce:df:64:ba:63:33:c7:a4:b5:
6d:02:67:0e:db:85:1e:18:0d:ad:e6:7e:bd:0d:0c:71:80:d4:
12:39:ed:87:9f:40:62:d7:2f:4f:7f:a6:94:32:73:5c:36:15:
2a:a7:a1:70:5e:fa:de:c5:c6:06:a7:50:ff:04:98:37:45:3a:
4f:fc:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:18:02 2026 by rpki-client