Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/l3OTpkEiK1FfXrLHs2NKSCDvgQU.roa
File: l3OTpkEiK1FfXrLHs2NKSCDvgQU.roa (raw, json)
Hash identifier: NLVVgJzmmQ1sWYT4j8Ti7g6Q5AulDx/jaD9m5mdqTqg=
Subject key identifier: 97:73:93:A6:41:22:2B:51:5F:5E:B2:C7:B3:63:4A:48:20:EF:81:05
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 019FA33170E58E7165E8D095F34DEE409582
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/l3OTpkEiK1FfXrLHs2NKSCDvgQU.roa
Signing time: Mon 27 Jul 2026 10:49:14 +0000
ROA not before: Mon 27 Jul 2026 10:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35228
IP address blocks: 82.132.128.0/17 maxlen: 24
82.132.138.0/23 maxlen: 24
82.132.160.0/23 maxlen: 24
82.132.164.0/23 maxlen: 24
82.132.166.0/23 maxlen: 24
82.132.168.0/23 maxlen: 24
82.132.170.0/23 maxlen: 24
82.132.172.0/23 maxlen: 24
82.132.174.0/23 maxlen: 24
82.132.176.0/23 maxlen: 24
82.132.180.0/23 maxlen: 24
82.132.184.0/22 maxlen: 24
82.132.198.0/23 maxlen: 24
82.132.199.0/24 maxlen: 24
82.132.210.0/23 maxlen: 24
82.132.212.0/22 maxlen: 24
82.132.216.0/22 maxlen: 24
82.132.220.0/22 maxlen: 24
82.132.228.0/22 maxlen: 24
82.132.232.0/22 maxlen: 24
82.132.236.0/22 maxlen: 24
82.132.244.0/22 maxlen: 24
82.132.248.0/23 maxlen: 24
82.132.253.0/24 maxlen: 24
2a03:dd00:810::/46 maxlen: 48
2a03:dd00:821::/48 maxlen: 48
2a03:dd00:822::/48 maxlen: 48
2a03:dd00:2000::/40 maxlen: 48
2a03:dd00:2100::/40 maxlen: 48
2a03:dd00:2200::/40 maxlen: 48
2a03:dd00:2300::/40 maxlen: 48
2a03:dd00:2400::/40 maxlen: 48
2a03:dd00:2500::/40 maxlen: 48
2a03:dd00:2600::/40 maxlen: 48
2a03:dd00:2700::/40 maxlen: 48
2a03:dd00:3000::/44 maxlen: 48
2a03:dd00:3002::/48 maxlen: 48
2a03:dd00:300d::/48 maxlen: 48
2a03:dd00:3040::/47 maxlen: 48
2a03:dd00:3042::/47 maxlen: 48
2a03:dd00:3044::/47 maxlen: 48
2a03:dd00:3046::/47 maxlen: 48
2a03:dd00:3048::/47 maxlen: 48
2a03:dd00:304a::/47 maxlen: 48
2a03:dd00:304c::/47 maxlen: 48
2a03:dd00:304e::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:31:70:e5:8e:71:65:e8:d0:95:f3:4d:ee:40:95:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Jul 27 10:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=977393a641222b515f5eb2c7b3634a4820ef8105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:cf:ea:f8:2e:a7:49:f4:89:93:ab:bd:3b:
ab:90:0e:38:c8:7a:cd:d4:df:2e:42:8e:cf:38:46:
b8:35:d7:ca:e7:68:7c:83:a8:03:93:e9:f9:0f:cd:
dc:c2:e7:83:4d:c9:3d:fb:61:27:87:56:c5:f5:7b:
30:a1:70:ad:e8:66:ce:b5:7a:01:7c:00:4e:0b:a9:
61:b8:89:1d:ff:d6:90:aa:1a:2f:e7:f6:e9:38:f1:
2d:15:f7:38:ea:7b:b2:c3:10:37:63:f5:68:ea:ca:
b4:3c:96:bb:1f:97:25:c2:71:ab:ab:f0:27:1d:f0:
81:57:a7:cd:9c:03:1b:0b:00:c5:cb:c2:08:df:74:
3c:3a:06:21:97:86:ee:3d:fc:2a:36:f2:df:b5:0b:
97:a5:ed:e5:78:a4:79:2b:c0:12:f9:e9:d4:9e:01:
1e:d6:07:92:25:17:b8:3e:75:b0:b5:d1:30:5e:75:
aa:43:74:ea:a3:de:6d:95:ae:0d:29:b9:f1:24:d2:
dd:ab:ce:ef:5f:6b:a6:48:b4:9e:61:84:03:86:a8:
19:05:65:b4:82:82:5d:f1:53:b0:f5:5f:df:c3:eb:
3e:c0:08:79:c2:f3:f7:3c:a1:36:69:b1:d4:0f:6a:
47:db:8c:7b:25:47:ef:fa:60:8c:a4:89:92:11:a6:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:73:93:A6:41:22:2B:51:5F:5E:B2:C7:B3:63:4A:48:20:EF:81:05
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/l3OTpkEiK1FfXrLHs2NKSCDvgQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.132.128.0/17
IPv6:
2a03:dd00:810::/46
2a03:dd00:821::-2a03:dd00:822:ffff:ffff:ffff:ffff:ffff
2a03:dd00:2000::/37
2a03:dd00:3000::/44
2a03:dd00:3040::/44
Signature Algorithm: sha256WithRSAEncryption
20:3c:53:d5:ba:76:4b:db:9d:aa:7d:75:0b:8c:49:c5:00:67:
71:ba:21:14:06:1d:eb:21:bd:27:f2:1b:b8:44:38:78:db:bc:
1d:29:8f:f7:01:d6:97:b1:e7:13:eb:d7:6f:8f:27:6b:bd:33:
9b:52:43:e9:33:15:25:7a:ff:7d:60:5b:88:1f:5b:99:ad:d9:
05:fc:e9:77:d2:bd:f5:60:be:21:fb:15:1b:8f:37:6c:42:31:
ee:67:3c:bf:96:c6:cf:08:88:27:dc:ee:fd:bf:ac:f3:21:b0:
63:e5:65:c4:a8:c1:55:7b:6d:b0:b2:d5:f2:2b:d4:62:c9:c2:
ce:d7:36:1b:1c:14:8b:a9:66:0a:37:cf:9a:36:14:48:97:ec:
9f:ff:74:0f:89:f3:f0:2f:6b:fb:14:a7:b3:02:98:ed:aa:aa:
72:fe:b0:cc:60:aa:18:9b:ad:ba:08:50:0f:24:15:94:89:3d:
41:77:c6:9c:cb:e3:6a:37:d8:18:f3:ff:ae:43:c7:9b:23:87:
1c:9c:a0:9c:f2:d7:6e:95:67:08:48:91:b2:ab:e4:ff:fc:98:
c6:a7:d3:8c:90:c8:4d:a7:02:36:ba:79:22:c3:51:5d:91:f0:
27:65:4c:16:ca:32:13:35:dd:12:6c:06:ed:05:f9:59:92:4b:
4b:db:c8:b8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZ+jMXDljnFl6NCV803uQJWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjI5ZTdiOGEwZGRiOWMzNmM2ZTBlM2Y0OTU3NzgxN2Iw
ZWEzYTYwHhcNMjYwNzI3MTA0OTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzczOTNhNjQxMjIyYjUxNWY1ZWIyYzdiMzYzNGE0ODIwZWY4MTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmPP6vgup0n0iZOrvTurkA44yHrN
1N8uQo7POEa4NdfK52h8g6gDk+n5D83cwueDTck9+2Enh1bF9XswoXCt6GbOtXoB
fABOC6lhuIkd/9aQqhov5/bpOPEtFfc46nuywxA3Y/Vo6sq0PJa7H5clwnGrq/An
HfCBV6fNnAMbCwDFy8II33Q8OgYhl4buPfwqNvLftQuXpe3leKR5K8AS+enUngEe
1geSJRe4PnWwtdEwXnWqQ3Tqo95tla4NKbnxJNLdq87vX2umSLSeYYQDhqgZBWW0
goJd8VOw9V/fw+s+wAh5wvP3PKE2abHUD2pH24x7JUfv+mCMpImSEaYC6QIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFJdzk6ZBIitRX16yx7NjSkgg74EFMB8GA1UdIwQY
MBaAFFiynnuKDducNsbg4/SVd4F7DqOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUt
ZWU3M2ZlMjFlZDIzLzEvbDNPVHBrRWlLMUZmWHJMSHMyTktTQ0R2Z1FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUtZWU3M2ZlMjFlZDIz
LzEvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTAMBAIAATAGAwQHUoSAMD0E
AgACMDcDBwIqA90ACBAwEgMHACoD3QAIIQMHACoD3QAIIgMGAyoD3QAgAwcEKgPd
ADAAAwcEKgPdADBAMA0GCSqGSIb3DQEBCwUAA4IBAQAgPFPVunZL252qfXULjEnF
AGdxuiEUBh3rIb0n8hu4RDh427wdKY/3AdaXsecT69dvjydrvTObUkPpMxUlev99
YFuIH1uZrdkF/Ol30r31YL4h+xUbjzdsQjHuZzy/lsbPCIgn3O79v6zzIbBj5WXE
qMFVe22wstXyK9RiycLO1zYbHBSLqWYKN8+aNhRIl+yf/3QPifPwL2v7FKezApjt
qqpy/rDMYKoYm626CFAPJBWUiT1Bd8acy+NqN9gY8/+uQ8ebI4ccnKCc8tdulWcI
SJGyq+T//JjGp9OMkMhNpwI2unkiw1FdkfAnZUwWyjITNd0SbAbtBflZkktL28i4
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:12:45 2026 by rpki-client