Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/wNRTFR3_V8IdYsdayBlHrUHj-HY.roa
File: wNRTFR3_V8IdYsdayBlHrUHj-HY.roa (raw, json)
Hash identifier: bXUcu5dHIDrbVP7mbGq4oeJhftNa8Os32eojiI8AJHE=
Subject key identifier: C0:D4:53:15:1D:FF:57:C2:1D:62:C7:5A:C8:19:47:AD:41:E3:F8:76
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 01A0D3A0527EFA44AE688F9D4B5483C3F3C9
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/wNRTFR3_V8IdYsdayBlHrUHj-HY.roa
Signing time: Thu 24 Sep 2026 13:34:54 +0000
ROA not before: Thu 24 Sep 2026 13:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42237
IP address blocks: 91.236.116.0/24 maxlen: 24
185.217.0.0/24 maxlen: 24
185.217.1.0/24 maxlen: 24
185.246.128.0/24 maxlen: 24
185.246.129.0/24 maxlen: 24
185.246.130.0/24 maxlen: 24
185.255.122.0/24 maxlen: 24
193.105.134.0/24 maxlen: 24
2a0b:c040::/32 maxlen: 32
2a0b:c041::/32 maxlen: 32
2a0d:8980::/32 maxlen: 32
2a0d:8981::/32 maxlen: 32
2a0d:8982::/32 maxlen: 32
2a0d:8983::/32 maxlen: 32
2a0d:8984::/32 maxlen: 32
2a0d:8985::/32 maxlen: 32
2a0d:8986::/32 maxlen: 32
2a0d:8987::/32 maxlen: 32
2a10:e0c0::/29 maxlen: 29
2a10:e0c0::/32 maxlen: 32
2a10:e0c1::32/128 maxlen: 128
2a10:e0c2::32/128 maxlen: 128
2a10:e0c3::32/128 maxlen: 128
2a10:e0c4::32/128 maxlen: 128
2a10:e0c5::32/128 maxlen: 128
2a10:e0c6::32/128 maxlen: 128
2a10:e0c7::32/128 maxlen: 128
2a13:80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:a0:52:7e:fa:44:ae:68:8f:9d:4b:54:83:c3:f3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Sep 24 13:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0d453151dff57c21d62c75ac81947ad41e3f876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:1e:ba:4b:34:5f:40:7c:62:0a:da:a9:47:
e2:b6:30:c1:68:66:6f:0b:b4:36:02:db:9e:54:d4:
34:40:94:18:cb:74:9f:99:05:c6:c0:bc:25:98:86:
69:6d:56:cf:64:bf:3d:15:bd:ab:5c:38:d8:f2:cd:
e5:b7:05:9f:3f:95:89:6d:86:76:c1:88:b9:0d:4d:
e6:b5:db:ef:3b:45:35:53:6b:b4:c3:15:c7:c0:26:
e2:88:27:a9:af:01:f1:4d:51:b3:e1:26:b0:b9:4d:
72:e5:85:e7:46:50:20:56:ef:62:b4:bc:07:1f:26:
3a:e9:f9:47:71:76:f3:7b:62:ea:27:2f:09:5d:cb:
2c:4a:ae:0e:a2:4a:21:55:2a:3c:e1:fe:ef:71:d4:
4d:ec:53:d9:ea:f6:71:ff:5b:ac:a9:c9:c3:d8:7e:
df:19:a7:99:0d:81:ba:8b:c6:0b:3f:b5:96:bf:3c:
10:8d:a1:9b:47:71:9e:11:8a:78:2e:a1:05:69:98:
96:0c:38:69:f0:d7:89:76:8a:40:16:76:7e:84:cd:
eb:0a:60:af:4c:39:72:7f:c7:66:63:94:ad:5d:50:
6f:f8:38:85:9e:97:b5:a3:ea:04:f6:9d:a7:db:5d:
4e:60:86:15:2d:a6:5b:b8:f5:52:d7:52:22:13:a2:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:53:15:1D:FF:57:C2:1D:62:C7:5A:C8:19:47:AD:41:E3:F8:76
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/wNRTFR3_V8IdYsdayBlHrUHj-HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.116.0/24
185.217.0.0/23
185.246.128.0-185.246.130.255
185.255.122.0/24
193.105.134.0/24
IPv6:
2a0b:c040::/31
2a0d:8980::/29
2a10:e0c0::/29
2a13:80::/32
Signature Algorithm: sha256WithRSAEncryption
52:b1:bb:84:a2:f4:11:cd:59:42:6c:b1:d8:89:f7:a6:81:fb:
7c:0d:5d:c1:a4:1a:73:30:09:0a:0f:27:ef:14:55:44:cb:ef:
a8:60:96:8c:1c:ee:22:0c:45:f7:2a:4c:58:05:16:bf:4b:2e:
7f:74:3a:a3:c6:97:3c:1e:81:68:f0:d8:0a:a1:aa:83:46:34:
d3:c4:55:48:77:7e:7f:55:24:d6:3f:12:e4:f7:37:2c:d7:0d:
d9:2b:af:fb:50:6c:5b:cc:40:80:fc:a2:73:31:69:23:0a:d8:
09:40:42:b5:05:05:e6:c5:0f:cb:30:06:f3:4c:47:31:e1:45:
77:e0:0d:df:b7:46:ac:ff:59:ef:89:f3:25:f3:38:a3:37:e2:
fc:ed:71:d3:c4:6e:ae:52:db:19:4e:74:1c:89:fd:b0:42:14:
a8:89:96:06:c3:81:2f:6b:82:c9:90:5e:44:a7:f4:b3:86:68:
fb:58:37:b9:a2:73:ef:dc:d1:a6:73:2d:27:d1:0a:ec:94:0f:
bf:c0:82:5a:a3:ca:95:df:23:86:6e:c5:59:8c:93:51:a2:42:
44:79:90:3f:1b:39:16:10:a1:a4:fc:cd:4c:40:3c:7e:47:9e:
7b:44:45:c8:2a:fa:61:27:51:c5:b4:04:46:c9:18:c1:a0:5e:
5d:33:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:28:44 2026 by rpki-client