Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/1Wz0uIUX1fDdGJE0ZqfHw7BeoCI.roa
File: 1Wz0uIUX1fDdGJE0ZqfHw7BeoCI.roa (raw, json)
Hash identifier: +SK+LX86a3X0Hhc7GgJVj7ezM5OBSwhETdhy1G7fcFc=
Subject key identifier: D5:6C:F4:B8:85:17:D5:F0:DD:18:91:34:66:A7:C7:C3:B0:5E:A0:22
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 019F808392E0AED88472F3A3566242C9E082
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/1Wz0uIUX1fDdGJE0ZqfHw7BeoCI.roa
Signing time: Mon 20 Jul 2026 17:12:14 +0000
ROA not before: Mon 20 Jul 2026 17:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42237
IP address blocks: 91.236.116.0/24 maxlen: 24
185.217.0.0/24 maxlen: 24
185.217.1.0/24 maxlen: 24
185.246.128.0/24 maxlen: 24
185.246.129.0/24 maxlen: 24
185.246.130.0/24 maxlen: 24
185.255.122.0/24 maxlen: 24
193.105.134.0/24 maxlen: 24
2a0b:c040::/32 maxlen: 32
2a0b:c041::/32 maxlen: 32
2a0d:8980::/32 maxlen: 32
2a0d:8981::/32 maxlen: 32
2a0d:8982::/32 maxlen: 32
2a0d:8983::/32 maxlen: 32
2a0d:8984::/32 maxlen: 32
2a0d:8985::/32 maxlen: 32
2a0d:8986::/32 maxlen: 32
2a0d:8987::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:83:92:e0:ae:d8:84:72:f3:a3:56:62:42:c9:e0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jul 20 17:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d56cf4b88517d5f0dd18913466a7c7c3b05ea022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:05:06:7c:be:53:c0:52:a2:08:fd:cd:41:
58:78:e2:0d:b3:25:19:3a:23:75:6c:df:f7:e7:15:
cf:40:19:ac:4b:5d:c1:fe:5c:cb:43:9f:a4:62:97:
17:b8:25:aa:1a:7f:3a:6c:1d:0b:01:12:6d:9a:e9:
cc:32:09:de:3e:d0:bd:4b:80:64:1c:f0:a2:a0:e3:
25:b9:6e:82:0b:84:50:7e:20:e6:24:35:4c:e1:e9:
e0:aa:4c:ed:4b:d7:33:dd:8d:f0:72:50:f8:46:46:
5d:33:e4:ab:25:ec:ac:94:68:56:89:06:a3:bb:0f:
33:d7:43:7e:1e:61:f5:c0:4d:8a:76:fa:0c:21:f9:
65:3e:d6:90:8e:d5:bb:a9:b0:84:2a:17:d8:ba:54:
d0:23:bb:a0:98:94:c3:a2:06:5c:aa:be:98:ce:53:
0f:e5:2b:ec:65:28:08:d7:d9:1f:69:8a:0d:ff:a2:
8c:da:6c:e0:fe:a1:e3:06:40:28:84:23:4b:e0:79:
46:b9:8f:3a:31:1d:5f:13:8b:20:2d:ce:c3:97:7b:
d4:6a:da:95:d8:61:17:28:94:11:69:a7:52:c1:04:
5e:ce:83:37:06:1c:0d:71:5c:4d:32:f9:ae:29:15:
b7:cd:82:8e:63:f0:91:2d:a0:9e:d8:41:c9:2a:b3:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:F4:B8:85:17:D5:F0:DD:18:91:34:66:A7:C7:C3:B0:5E:A0:22
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/1Wz0uIUX1fDdGJE0ZqfHw7BeoCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.116.0/24
185.217.0.0/23
185.246.128.0-185.246.130.255
185.255.122.0/24
193.105.134.0/24
IPv6:
2a0b:c040::/31
2a0d:8980::/29
Signature Algorithm: sha256WithRSAEncryption
01:9b:fd:7d:08:79:a5:ce:92:aa:9f:40:59:bf:c0:f6:84:af:
8f:aa:67:87:5f:da:2c:42:1a:26:7f:ef:17:29:36:c0:4a:3d:
ec:d4:ff:43:d4:33:c5:ea:f6:c3:02:7d:ec:80:94:3c:cf:ea:
a7:58:ea:8d:11:32:ac:51:eb:df:91:c4:b6:e1:4a:b0:df:7f:
a4:68:b0:5a:53:6b:9b:b3:b9:22:4c:72:0c:80:96:71:94:66:
45:0d:ab:c3:86:45:8c:75:62:c1:84:46:ad:1a:83:b3:8d:dc:
f7:8c:d8:bb:00:25:d5:4b:16:62:f6:9d:13:66:9f:37:a4:86:
a7:59:a6:64:7a:1b:e4:f3:05:6d:b4:5e:51:83:87:0f:05:8d:
e1:fa:a9:16:a2:cf:a2:ab:9c:75:6e:c9:19:4f:13:b7:98:4f:
65:a0:90:b9:94:c5:ff:f4:ed:a4:92:e8:c0:d3:f9:8f:47:99:
e7:23:5c:c8:de:e0:a4:ef:f4:ac:d1:33:ad:d2:c5:ba:d5:b4:
27:13:7a:be:02:6f:6b:0b:24:20:ec:90:9f:58:0f:3d:bd:0d:
6c:9d:0b:43:da:8e:af:6d:35:c1:35:8d:4b:0c:c1:3e:23:05:
50:b2:aa:94:3c:9f:cf:01:df:23:76:60:f8:2c:45:2c:06:82:
e3:0d:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:38 2026 by rpki-client