Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/wJZSwL8BiBquq-vmCFMDh-9C9DY.roa
File: wJZSwL8BiBquq-vmCFMDh-9C9DY.roa (raw, json)
Hash identifier: B748XBhRBLvB0DrGzXE/NmjkYhX92fM+cPyhqGUPC8Y=
Subject key identifier: C0:96:52:C0:BF:01:88:1A:AE:AB:EB:E6:08:53:03:87:EF:42:F4:36
Certificate issuer: /CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Certificate serial: 019F2368D30173AC6BCD242710F593FF5882
Authority key identifier: C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/wJZSwL8BiBquq-vmCFMDh-9C9DY.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2586
IP address blocks: 62.65.192.0/18 maxlen: 18
81.90.112.0/20 maxlen: 23
82.131.0.0/17 maxlen: 17
85.253.0.0/16 maxlen: 16
87.119.160.0/19 maxlen: 21
91.213.43.0/24 maxlen: 24
94.246.216.0/21 maxlen: 22
94.246.224.0/19 maxlen: 19
95.129.192.0/21 maxlen: 23
145.14.16.0/20 maxlen: 20
145.14.32.0/20 maxlen: 20
146.255.176.0/21 maxlen: 23
178.23.112.0/21 maxlen: 23
185.13.16.0/22 maxlen: 24
185.34.36.0/22 maxlen: 22
185.72.28.0/22 maxlen: 24
194.55.8.0/22 maxlen: 22
194.150.64.0/22 maxlen: 24
194.204.0.0/18 maxlen: 20
2001:1530::/32 maxlen: 32
2001:1bf0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d3:01:73:ac:6b:cd:24:27:10:f5:93:ff:58:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672f4a652a58bca0ce3d178e028560e113e9a1d
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c09652c0bf01881aaeabebe608530387ef42f436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:41:c6:c1:ea:e1:54:52:57:48:ae:5b:29:
53:24:91:2f:a0:f2:a4:f1:c9:cf:37:9b:92:b2:c6:
af:ba:85:52:c7:37:6b:77:4f:e7:e8:4d:d6:d4:0a:
bf:73:ba:0b:23:34:4c:ef:a7:d1:62:00:63:9b:2b:
8e:47:18:f2:56:af:01:d9:14:c8:68:e0:08:14:0b:
4d:e1:45:96:38:61:84:ad:14:cd:38:7b:b2:cc:83:
e9:b6:68:9d:9a:f4:f6:53:e4:dd:d5:2c:73:94:05:
d4:70:10:d4:52:95:40:38:51:b6:ff:2f:8d:0c:a1:
96:50:a3:de:ad:f8:f7:6a:bd:6d:60:6c:c9:79:39:
ab:ce:6f:7e:3b:cc:e7:f8:ab:c0:67:0f:29:c7:9f:
cf:ed:48:7b:7d:dc:2d:47:45:35:13:b1:24:26:15:
b0:31:26:3d:0a:3b:9a:d1:f6:05:1a:85:53:8f:56:
5d:e5:81:a0:a7:8c:a1:c0:8b:35:60:0f:14:ea:aa:
2e:47:80:9b:c4:7d:56:88:f4:27:6d:16:95:43:3e:
37:ed:23:b8:66:c0:48:fc:fe:72:1e:67:0d:1e:46:
35:8d:e9:36:f9:3f:53:3a:5e:b1:fd:9f:f2:5d:0a:
2f:01:7d:ff:67:8e:1a:86:49:56:79:02:b1:e8:9b:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:96:52:C0:BF:01:88:1A:AE:AB:EB:E6:08:53:03:87:EF:42:F4:36
X509v3 Authority Key Identifier:
keyid:C6:72:F4:A6:52:A5:8B:CA:0C:E3:D1:78:E0:28:56:0E:11:3E:9A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnL0plKli8oM49F44ChWDhE-mh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/wJZSwL8BiBquq-vmCFMDh-9C9DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/xnL0plKli8oM49F44ChWDhE-mh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.192.0/18
81.90.112.0/20
82.131.0.0/17
85.253.0.0/16
87.119.160.0/19
91.213.43.0/24
94.246.216.0-94.246.255.255
95.129.192.0/21
145.14.16.0-145.14.47.255
146.255.176.0/21
178.23.112.0/21
185.13.16.0/22
185.34.36.0/22
185.72.28.0/22
194.55.8.0/22
194.150.64.0/22
194.204.0.0/18
IPv6:
2001:1530::/32
2001:1bf0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:59:59:34:bc:96:59:6d:52:dd:81:aa:86:ab:ee:62:0c:fb:
8f:29:36:1d:23:a4:84:b3:f0:be:74:db:7b:7e:9e:dc:bb:c0:
20:ee:74:ae:27:c8:85:de:09:a8:23:f0:ae:ab:7a:c1:54:e6:
6e:2f:a1:99:4f:04:0c:ea:a4:fb:28:6b:6f:30:70:e6:65:02:
54:27:39:15:4c:3d:04:f4:ca:d0:56:10:29:1c:ca:33:9a:75:
93:f5:93:1b:23:4e:c8:d0:4b:6c:8a:33:76:6c:72:61:48:3b:
eb:1e:ab:2e:9e:fb:10:cd:aa:ac:0e:db:b6:ed:4c:eb:5b:be:
36:60:72:90:92:df:a4:aa:ef:14:f0:15:c7:b6:ed:ff:dc:cc:
c2:b7:f2:3e:5d:06:d0:12:17:46:f2:74:3c:41:d7:2d:11:12:
5c:c9:ad:bb:49:bf:3c:0b:69:aa:35:f0:d6:44:61:d3:b0:61:
16:a3:5f:9e:ed:91:28:d9:db:19:1a:66:49:1e:dc:f8:29:5b:
ce:b2:e7:08:07:a4:ef:ea:21:67:0f:c0:d2:8b:eb:2e:a9:5a:
0f:ab:34:fe:b7:a9:bc:44:84:7d:ee:cf:e3:4e:28:ef:68:74:
16:53:0a:69:a6:9c:5e:3e:8b:ac:ff:79:9a:0f:be:31:f7:3c:
70:9c:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:14 2026 by rpki-client