Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/We9ajpgv-KMWtCNehj5200Ms4KE.roa
File: We9ajpgv-KMWtCNehj5200Ms4KE.roa (raw, json)
Hash identifier: yAe9WyOmZWrvcHTRYvIZ0zYpeNqUkrBR9gUrKL3DkRg=
Subject key identifier: 59:EF:5A:8E:98:2F:F8:A3:16:B4:23:5E:86:3E:76:D3:43:2C:E0:A1
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019EB1937566B5819E26D44CEC53C633C1E9
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/We9ajpgv-KMWtCNehj5200Ms4KE.roa
Signing time: Wed 10 Jun 2026 12:48:11 +0000
ROA not before: Wed 10 Jun 2026 12:48:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141039
IP address blocks: 186.247.172.0/24 maxlen: 24
186.247.173.0/24 maxlen: 24
186.247.174.0/24 maxlen: 24
187.13.31.0/24 maxlen: 24
187.13.181.0/24 maxlen: 24
187.13.182.0/24 maxlen: 24
187.13.206.0/24 maxlen: 24
187.13.207.0/24 maxlen: 24
187.13.208.0/24 maxlen: 24
187.14.55.0/24 maxlen: 24
187.14.56.0/24 maxlen: 24
187.14.115.0/24 maxlen: 24
187.14.224.0/24 maxlen: 24
187.14.225.0/24 maxlen: 24
187.14.230.0/24 maxlen: 24
187.14.231.0/24 maxlen: 24
187.14.237.0/24 maxlen: 24
187.14.238.0/24 maxlen: 24
187.14.239.0/24 maxlen: 24
187.14.253.0/24 maxlen: 24
187.14.254.0/24 maxlen: 24
187.15.80.0/24 maxlen: 24
187.15.81.0/24 maxlen: 24
187.15.82.0/24 maxlen: 24
187.15.174.0/24 maxlen: 24
187.15.175.0/24 maxlen: 24
2a13:240:4100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:93:75:66:b5:81:9e:26:d4:4c:ec:53:c6:33:c1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jun 10 12:48:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59ef5a8e982ff8a316b4235e863e76d3432ce0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:2e:95:6e:63:03:91:ad:f3:64:00:1a:53:
8f:53:2e:63:82:3e:b7:df:cf:37:21:68:4f:7f:ed:
4d:62:2b:67:2c:5c:af:51:c7:b5:9a:2b:2c:c8:96:
cc:2d:42:fa:a3:f8:77:00:cc:a3:22:5a:31:41:a7:
b1:c2:41:e4:fc:30:78:be:e7:53:c9:b3:0d:1b:a8:
3b:98:80:21:4b:06:41:71:5d:93:18:b5:17:b7:b4:
c7:90:c1:8b:b8:51:c9:80:00:73:ee:c0:8d:ae:15:
30:4f:0f:e5:90:42:cd:01:f1:00:10:23:f7:94:e5:
b9:1d:25:24:12:f7:e6:3d:9b:16:26:04:e9:62:a1:
b3:e1:e7:ad:0a:96:43:04:45:4a:51:c3:63:50:d2:
9b:46:7e:bb:4d:15:bf:9d:9d:5c:36:47:05:0e:4e:
3d:76:9e:1c:dc:63:ea:7e:53:ef:9b:41:af:49:1c:
b9:c7:6e:30:c8:b5:65:c1:94:4f:d8:0f:39:e0:68:
c4:5f:2b:46:d8:df:4f:4e:95:4c:54:11:19:ed:2b:
4d:c7:8d:c3:ad:29:80:62:89:b0:92:e3:8c:4f:17:
77:92:33:84:da:d9:eb:2c:1f:61:0a:b8:bc:ee:9f:
77:03:ae:f0:30:fa:d5:7d:2e:bf:a2:73:77:61:74:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EF:5A:8E:98:2F:F8:A3:16:B4:23:5E:86:3E:76:D3:43:2C:E0:A1
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/We9ajpgv-KMWtCNehj5200Ms4KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.172.0-186.247.174.255
187.13.31.0/24
187.13.181.0-187.13.182.255
187.13.206.0-187.13.208.255
187.14.55.0-187.14.56.255
187.14.115.0/24
187.14.224.0/23
187.14.230.0/23
187.14.237.0-187.14.239.255
187.14.253.0-187.14.254.255
187.15.80.0-187.15.82.255
187.15.174.0/23
IPv6:
2a13:240:4100::/40
Signature Algorithm: sha256WithRSAEncryption
17:37:f5:94:c8:e2:e4:df:eb:5c:f4:e2:a5:62:40:10:46:bf:
13:23:07:a0:2b:fd:ab:83:8e:e1:1b:97:7e:e6:76:bd:5f:19:
6a:ab:fa:53:a8:e0:43:31:56:ee:28:49:b4:95:24:7f:44:b8:
10:9d:97:50:5a:50:ee:77:94:1c:1c:a8:84:4f:fe:58:04:88:
47:2a:fb:70:2b:b5:dc:10:31:fb:f8:21:d0:b6:85:68:d3:58:
2c:79:03:c8:aa:98:ac:18:6a:f3:73:4b:b5:dd:d3:11:d5:aa:
93:38:ba:a5:4b:a9:cc:b7:2d:f5:b3:69:dc:8c:f9:8d:1a:77:
d9:25:f9:17:4e:d7:11:db:a3:1f:f9:bb:e6:9a:7c:4c:ac:d8:
ab:c7:62:3a:db:84:c6:95:f9:37:12:65:65:c8:b3:63:7d:32:
6a:d1:80:dc:fc:f3:05:42:b2:06:c9:e0:a5:05:5b:ec:61:0c:
4f:6d:93:b5:9f:41:6f:59:f0:de:e5:ba:30:55:e6:25:71:11:
6f:f4:1f:c9:34:a0:fc:bc:f6:fb:6c:0e:c4:a3:8e:e9:ed:31:
14:1b:b9:48:cd:e6:fc:d9:d3:28:0f:d2:fd:80:4c:4a:18:a0:
ac:2d:27:58:34:66:c6:40:2e:33:d9:e8:09:c6:8c:46:da:30:
1f:d1:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:29 2026 by rpki-client