Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa
File: wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa (raw, json)
Hash identifier: u+wT+BimsnSpg1n9wfO3eibMx6uV2+gDEF0IS+GeD+4=
Subject key identifier: C0:11:8D:96:90:4C:39:CE:AE:F8:0A:1C:E8:C1:51:B6:AC:44:D9:94
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 01A018E7516087867B8516685D529A0EDD66
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa
Signing time: Wed 19 Aug 2026 07:23:27 +0000
ROA not before: Wed 19 Aug 2026 07:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 5.44.42.0/24 maxlen: 24
157.22.240.0/24 maxlen: 24
2a05:541:102::/48 maxlen: 48
2a05:541:103::/48 maxlen: 48
2a05:541:104::/48 maxlen: 48
2a05:541:105::/48 maxlen: 48
2a05:541:106::/48 maxlen: 48
2a05:541:107::/48 maxlen: 48
2a05:541:108::/48 maxlen: 48
2a05:541:109::/48 maxlen: 48
2a05:541:110::/48 maxlen: 48
2a05:541:111::/48 maxlen: 48
2a05:541:112::/48 maxlen: 48
2a05:541:113::/48 maxlen: 48
2a05:541:114::/48 maxlen: 48
2a05:541:115::/48 maxlen: 48
2a05:541:116::/48 maxlen: 48
2a05:541:117::/48 maxlen: 48
2a05:541:118::/48 maxlen: 48
2a05:541:119::/48 maxlen: 48
2a05:541:121::/48 maxlen: 48
2a05:541:122::/48 maxlen: 48
2a05:541:123::/48 maxlen: 48
2a05:541:124::/48 maxlen: 48
2a05:541:125::/48 maxlen: 48
2a05:541:126::/48 maxlen: 48
2a05:541:127::/48 maxlen: 48
2a05:541:131::/48 maxlen: 48
2a05:541:133::/48 maxlen: 48
2a05:541:134::/48 maxlen: 48
2a05:541:135::/48 maxlen: 48
2a05:541:136::/48 maxlen: 48
2a05:541:137::/48 maxlen: 48
2a05:541:138::/48 maxlen: 48
2a05:541:139::/48 maxlen: 48
2a05:541:141::/48 maxlen: 48
2a05:541:152::/48 maxlen: 48
2a05:541:153::/48 maxlen: 48
2a05:541:156::/48 maxlen: 48
2a05:541:157::/48 maxlen: 48
2a05:541:158::/48 maxlen: 48
2a05:541:159::/48 maxlen: 48
2a05:541:170::/48 maxlen: 48
2a05:541:171::/48 maxlen: 48
2a05:541:172::/48 maxlen: 48
2a05:541:173::/48 maxlen: 48
2a05:541:174::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:e7:51:60:87:86:7b:85:16:68:5d:52:9a:0e:dd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Aug 19 07:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0118d96904c39ceaef80a1ce8c151b6ac44d994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:65:8e:5f:fd:e0:1f:c8:4c:8f:f7:29:44:af:
bb:3e:ae:f5:c9:75:c7:ec:23:43:ba:85:9d:97:92:
f0:2a:9f:62:74:41:5c:2f:b4:01:f7:17:04:ca:0f:
e9:80:78:64:64:f6:3a:57:9f:fb:df:cd:6e:04:ff:
57:cd:f4:bc:f2:00:db:f7:09:89:0e:a6:50:7d:70:
e1:4f:fd:5d:12:d7:ce:2d:a9:eb:0f:cd:b1:9a:bc:
f0:4b:99:d2:c2:6c:1a:2f:b5:96:9e:d4:c5:05:a2:
af:c2:0b:72:f6:af:c8:88:4c:7d:1e:eb:54:b0:1c:
05:ea:fd:23:d9:ee:b3:d7:c6:4a:85:bd:95:66:94:
10:3c:0d:88:b2:c0:d9:d1:e7:ca:1a:1b:15:25:a2:
9e:c6:43:4f:2f:0b:f4:57:7e:10:14:15:df:f0:d9:
f8:3a:38:ba:97:af:71:a9:b4:ce:08:0b:0f:1b:8b:
53:4d:3a:c7:bf:89:95:44:da:73:2c:10:05:6b:af:
14:10:98:90:82:a0:e0:ca:2c:41:d9:6a:30:29:d0:
c7:c3:92:29:29:a1:ce:4d:83:3a:de:df:77:31:7b:
4c:64:26:df:07:74:9d:0a:c5:4a:3d:15:64:55:b3:
0c:05:d1:a0:7c:0d:f2:7d:7a:f3:1b:5b:3c:a4:36:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:8D:96:90:4C:39:CE:AE:F8:0A:1C:E8:C1:51:B6:AC:44:D9:94
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
157.22.240.0/24
IPv6:
2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff
2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff
2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
2a05:541:131::/48
2a05:541:133::-2a05:541:139:ffff:ffff:ffff:ffff:ffff
2a05:541:141::/48
2a05:541:152::/47
2a05:541:156::-2a05:541:159:ffff:ffff:ffff:ffff:ffff
2a05:541:170::-2a05:541:174:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:6a:fd:45:91:7b:c6:13:20:e4:df:77:21:0b:09:56:18:90:
1e:11:2b:a5:28:57:c0:33:89:a5:ad:a9:98:4f:65:8f:ba:78:
41:50:67:b9:6c:88:4c:c1:32:39:07:0c:d6:4c:f3:db:f8:6c:
20:a0:55:09:2e:67:14:cf:0a:0c:c3:20:e9:26:13:12:d2:a4:
b2:6e:58:0e:72:1f:60:cf:0e:c1:6e:31:a2:c2:07:a8:ba:df:
fa:b4:70:fc:7d:7a:20:14:d1:2e:1c:10:f9:63:a0:e3:df:4a:
46:6a:5e:7a:86:09:82:2b:79:66:8a:61:40:8a:0a:2a:2d:97:
b4:f4:53:ec:63:c2:71:0d:df:9b:be:70:3d:5c:0a:d1:29:0e:
33:02:3f:dd:49:fe:f5:c6:91:3a:25:8d:3b:ef:d8:72:7b:a7:
04:2f:c5:ff:c2:9d:54:11:35:82:56:99:1f:f5:72:a4:0c:05:
20:31:b0:0e:3b:90:24:5d:20:cc:43:36:8e:95:e5:21:5d:e5:
2b:28:c9:91:a0:84:bc:96:17:5d:e8:46:37:4d:9a:bc:23:a1:
eb:81:14:94:4c:c2:8b:c2:39:1b:25:d5:2d:61:17:04:ba:76:
ee:aa:ec:04:34:ed:ce:08:28:fc:ca:0d:15:c8:80:49:04:45:
af:a2:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:44:17 2026 by rpki-client