Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1zWjwwKPZ6WThNUNt9AIPz8qn84.roa
File: 1zWjwwKPZ6WThNUNt9AIPz8qn84.roa (raw, json)
Hash identifier: sKCI1qtv5vthF9uCE00oPhYR9qO55ovUHSj5jaf9Qno=
Subject key identifier: D7:35:A3:C3:02:8F:67:A5:93:84:D5:0D:B7:D0:08:3F:3F:2A:9F:CE
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01A0B5D0B046DD9FC653369A190C4CCD26BF
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1zWjwwKPZ6WThNUNt9AIPz8qn84.roa
Signing time: Fri 18 Sep 2026 18:39:07 +0000
ROA not before: Fri 18 Sep 2026 18:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.147.0/24 maxlen: 24
45.140.220.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.186.66.0/24 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.29.0/24 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.105.177.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
194.56.224.0/24 maxlen: 24
194.56.227.0/24 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b86:100::/40 maxlen: 48
2a0b:b86:fff0::/44 maxlen: 44
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffc0::/44 maxlen: 44
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0b:7086:fff0::/44 maxlen: 44
2a0b:7087:fff0::/44 maxlen: 44
2a0d:77c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 08:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:d0:b0:46:dd:9f:c6:53:36:9a:19:0c:4c:cd:26:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Sep 18 18:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d735a3c3028f67a59384d50db7d0083f3f2a9fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:fc:4e:15:cb:da:1f:30:25:6e:e0:91:bc:
69:18:76:9f:65:47:01:b9:ca:01:ee:bb:20:ad:30:
d7:b8:9c:13:36:09:85:b9:d6:6a:9b:73:5a:9d:3c:
0c:ad:e2:a0:4f:00:b5:e5:b1:57:be:3c:3a:f1:65:
17:3e:f9:1e:de:74:d0:4c:e2:f1:cc:3f:3b:13:2d:
80:1c:ca:55:e8:57:7e:b7:d5:19:27:5a:76:3a:92:
89:71:52:9b:51:ca:e6:06:2a:64:1f:04:5f:73:e9:
8f:84:6d:1e:84:69:b9:ba:9f:2a:7c:fe:ad:52:97:
2a:7e:2f:7d:1f:3f:c7:81:81:e0:9d:cd:3a:6d:4d:
20:f9:1a:09:4c:7e:06:7f:73:74:f8:26:7e:a3:02:
87:9c:6b:b8:22:91:af:52:7b:55:da:ea:82:f1:5c:
05:a4:5f:8f:af:91:c9:2f:d8:36:6b:04:72:9d:37:
ab:78:62:a9:db:b5:5e:e5:f0:77:38:77:ba:f3:3f:
21:38:85:c4:e1:3f:c3:a0:63:a4:58:72:2b:28:68:
b3:98:b3:d2:78:88:ca:6b:53:b6:d4:ba:d0:e1:99:
b1:11:0b:53:7e:7f:0f:4f:a6:02:e2:3a:f7:2a:b0:
27:1a:29:fd:22:3b:6a:b2:7f:3f:57:99:24:02:75:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:35:A3:C3:02:8F:67:A5:93:84:D5:0D:B7:D0:08:3F:3F:2A:9F:CE
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1zWjwwKPZ6WThNUNt9AIPz8qn84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.90.147.0/24
45.140.220.0/22
77.83.240.0/22
78.108.217.0/24
83.143.116.0/24
85.202.162.0/24
89.190.156.0/22
178.218.144.0/22
185.186.64.0/22
185.227.71.0/24
185.234.72.0/22
185.242.224.0/22
193.31.29.0-193.31.30.255
193.34.76.0/22
193.105.177.0/24
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:1ff:ffff:ffff:ffff:ffff:ffff
2a0b:b86:fff0::/44
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffc0::/44
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0b:7086:fff0::/44
2a0b:7087:fff0::/44
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
2a:78:93:6b:fb:e3:8a:67:6a:6a:9b:8a:b0:54:37:3a:09:72:
15:3d:fb:a7:07:22:f8:52:ab:7f:92:bd:a9:57:77:9a:98:42:
b7:ed:96:e3:58:56:4d:c4:11:1f:e2:9d:c8:12:12:aa:9b:35:
93:71:c7:fb:6e:39:f5:76:9c:66:9c:f0:35:7c:a2:b4:fb:a8:
fe:35:d5:a4:71:21:3f:3a:fb:cd:82:82:57:f5:27:58:5e:7b:
8b:49:a7:27:1c:f4:80:e8:b2:fb:e7:3a:3a:85:86:4a:ba:af:
de:23:eb:42:78:5b:73:e0:85:28:23:cb:00:e3:6c:9d:77:5b:
11:02:a8:2d:0a:d6:6c:e8:db:86:80:d3:b0:29:e9:61:22:9d:
17:ac:99:94:02:84:98:ef:dc:49:34:50:79:ca:0c:cb:3a:e6:
a9:cf:22:f1:93:1d:1f:e7:5a:6f:cb:ca:64:a4:7a:03:d7:33:
f9:d2:2b:d4:f2:5c:70:3e:31:fd:c5:38:b9:7b:92:94:5d:03:
a9:01:4d:7a:ef:bc:9e:5a:22:9e:d8:cf:e7:6b:40:a7:67:b3:
fd:aa:cc:9f:b9:af:17:29:3d:e2:44:70:2c:67:20:08:a1:03:
3f:e8:39:45:c4:42:a8:5a:54:fc:56:09:30:4e:1f:90:fb:0a:
fa:18:83:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:13:22 2026 by rpki-client