Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/0aOtXYS-xwLEXTraGpn5WE6qBJ4.roa
File: 0aOtXYS-xwLEXTraGpn5WE6qBJ4.roa (raw, json)
Hash identifier: SOn+Kbwa+nIvVe7nm2ycJKCebWhqB2GaInZHqFrY/6s=
Subject key identifier: D1:A3:AD:5D:84:BE:C7:02:C4:5D:3A:DA:1A:99:F9:58:4E:AA:04:9E
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 019FA300015EBD224CE5A55EF2E329835DDA
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/0aOtXYS-xwLEXTraGpn5WE6qBJ4.roa
Signing time: Mon 27 Jul 2026 09:55:14 +0000
ROA not before: Mon 27 Jul 2026 09:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29180
IP address blocks: 82.132.128.0/22 maxlen: 24
82.132.132.0/22 maxlen: 24
82.132.136.0/23 maxlen: 24
82.132.140.0/23 maxlen: 24
82.132.142.0/23 maxlen: 24
82.132.144.0/21 maxlen: 24
82.132.152.0/21 maxlen: 24
82.132.188.0/23 maxlen: 24
82.132.190.0/23 maxlen: 24
82.132.192.0/23 maxlen: 24
82.132.194.0/23 maxlen: 24
82.132.196.0/23 maxlen: 24
82.132.200.0/23 maxlen: 24
82.132.202.0/23 maxlen: 24
82.132.204.0/23 maxlen: 24
82.132.206.0/23 maxlen: 24
82.132.208.0/23 maxlen: 24
82.132.250.0/23 maxlen: 24
82.132.252.0/23 maxlen: 23
82.132.254.0/23 maxlen: 24
185.238.16.0/23 maxlen: 24
185.238.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:00:01:5e:bd:22:4c:e5:a5:5e:f2:e3:29:83:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Jul 27 09:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1a3ad5d84bec702c45d3ada1a99f9584eaa049e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:3e:df:7b:bb:50:8f:53:91:5d:24:9a:58:
24:ca:c0:59:09:94:c3:01:a0:26:33:e5:31:e9:9c:
ce:42:23:3e:25:31:29:9f:f8:7d:95:ee:9a:89:e7:
f3:e4:07:92:c8:e9:26:3f:2a:55:14:38:1f:19:37:
2e:bb:9c:70:18:d8:53:68:15:a5:2d:5e:ac:d9:72:
90:a3:2f:28:ae:a9:3d:be:79:3c:99:f8:36:e0:39:
ec:e3:7d:9b:74:3c:e0:ec:04:09:d9:a7:f8:0c:ab:
96:f4:31:d7:20:b8:ad:fb:2f:da:00:d2:74:a9:71:
f0:c8:a5:20:6a:aa:41:77:fc:79:6a:ed:06:26:b1:
e6:e1:16:25:94:10:2a:74:0c:8d:14:74:2e:2e:ec:
38:6f:05:a0:dc:7e:51:15:6b:1d:a2:1a:95:35:66:
85:98:36:cc:13:e3:1b:a5:29:46:73:57:86:19:37:
b8:e6:87:fe:0e:63:ca:96:6e:f9:aa:f3:20:88:c6:
31:c4:5c:c1:e9:f8:aa:2c:d2:99:f9:2e:26:b5:76:
40:40:d7:54:02:a5:b3:fb:17:0f:3a:67:5d:98:87:
21:50:71:42:8b:6b:b0:e7:32:e7:53:0f:b6:92:21:
c4:09:8b:38:c9:e0:5d:4f:8a:88:9f:bd:bb:2f:29:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A3:AD:5D:84:BE:C7:02:C4:5D:3A:DA:1A:99:F9:58:4E:AA:04:9E
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/0aOtXYS-xwLEXTraGpn5WE6qBJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.132.128.0-82.132.137.255
82.132.140.0-82.132.159.255
82.132.188.0-82.132.197.255
82.132.200.0-82.132.209.255
82.132.250.0-82.132.255.255
185.238.16.0/22
Signature Algorithm: sha256WithRSAEncryption
27:86:1e:5d:1c:5a:d2:26:d5:cd:65:ae:82:73:3e:c7:13:87:
ea:6b:a6:af:d3:20:29:a7:f7:f9:2c:5a:97:d6:24:ab:0b:15:
6e:20:6b:fd:32:72:62:b8:4d:32:11:fc:bd:95:0f:00:6a:f3:
ac:1c:16:41:54:28:d9:b5:78:12:8b:3e:b4:28:41:a1:8a:df:
78:a3:65:2b:f5:32:44:ed:40:d4:65:5f:81:74:d8:ab:09:ec:
59:2e:42:ab:65:91:8c:b9:2a:0d:2a:52:7b:4e:82:0a:1d:20:
02:44:98:a2:04:ad:1b:10:fb:cd:9b:71:59:85:b6:79:f2:9b:
3f:e1:a8:fc:eb:0c:98:55:16:9b:22:ce:bb:ed:e5:21:e4:d5:
4c:64:00:96:2f:c5:70:85:f4:d5:7d:0c:86:b0:c8:ab:e1:dc:
7b:ef:ff:6b:d9:3c:24:0a:84:c8:f6:06:8d:40:40:31:4c:ff:
90:96:a1:cf:82:3f:04:40:90:31:2c:5d:6a:82:47:ef:09:17:
f6:80:04:73:5d:8c:e9:c7:73:81:2c:42:05:93:6f:96:59:0c:
4e:45:73:c4:ca:07:73:3e:d1:45:98:de:a8:6a:60:e2:04:dc:
93:22:de:7f:17:3d:d7:9f:ed:25:4d:ac:9d:00:ed:19:15:88:
02:bb:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:00:01 2026 by rpki-client