Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/woag82GpGdhOtv6aK_tzKWVllZc.roa
File: woag82GpGdhOtv6aK_tzKWVllZc.roa (raw, json)
Hash identifier: bb4CuQyCmFYYltm6OOHyV8Jx0hIaQd25Uc1ln9G8vFk=
Subject key identifier: C2:86:A0:F3:61:A9:19:D8:4E:B6:FE:9A:2B:FB:73:29:65:65:95:97
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019D2026BF466DD2EE984BCFF8736E57757B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/woag82GpGdhOtv6aK_tzKWVllZc.roa
Signing time: Tue 24 Mar 2026 14:01:43 +0000
ROA not before: Tue 24 Mar 2026 14:01:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 2.59.48.0/24 maxlen: 24
31.222.240.0/24 maxlen: 24
31.222.243.0/24 maxlen: 24
31.222.250.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.89.68.0/24 maxlen: 24
45.89.71.0/24 maxlen: 24
45.147.168.0/22 maxlen: 22
91.188.220.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
176.56.35.0/24 maxlen: 24
176.56.36.0/24 maxlen: 24
176.124.34.0/24 maxlen: 24
185.212.112.0/24 maxlen: 24
185.234.8.0/24 maxlen: 24
193.3.18.0/24 maxlen: 24
193.201.114.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.69.150.0/24 maxlen: 24
195.96.150.0/24 maxlen: 24
195.225.96.0/24 maxlen: 24
212.18.100.0/24 maxlen: 24
212.18.122.0/24 maxlen: 24
212.52.4.0/24 maxlen: 24
213.109.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:26:bf:46:6d:d2:ee:98:4b:cf:f8:73:6e:57:75:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 24 14:01:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c286a0f361a919d84eb6fe9a2bfb732965659597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:35:3b:06:d3:88:3e:bd:f1:21:b5:c6:0b:
b6:9e:72:91:a9:b5:a3:93:a0:26:fa:6b:cd:2b:8d:
84:a0:9f:74:8a:a7:94:9f:dc:76:9f:41:e3:b9:72:
fb:1a:f3:44:30:89:20:1a:df:0f:31:09:b0:89:f3:
11:11:1a:dd:d9:43:e3:f0:7d:c7:7f:96:5c:19:af:
07:c2:ac:10:cf:fe:0c:9b:50:b2:a0:bb:c6:25:c7:
e2:a7:be:10:eb:e4:37:49:2c:b3:9a:2d:3c:f3:1d:
c9:be:10:23:4f:1c:38:63:11:69:fe:6a:ea:88:3b:
d5:e9:3d:5c:49:d4:48:73:4d:5d:0c:b5:a4:ef:92:
b8:ae:0a:da:bc:3d:8c:dc:90:95:14:34:72:92:fe:
c8:ce:22:6b:1f:a1:16:ea:17:20:4c:78:5a:88:83:
d2:7a:54:e1:85:50:8a:44:6c:50:02:13:4c:36:6f:
89:5b:c8:54:24:a3:48:81:98:5c:86:8d:80:e7:56:
33:56:97:e4:04:e8:54:f3:03:0e:a2:50:b8:7d:17:
3b:8f:fc:89:a7:2e:ea:f0:43:f2:f7:fa:3d:82:12:
17:94:e0:7a:08:e9:ce:80:0b:7f:69:51:38:7b:ee:
38:7a:85:6c:fe:72:9e:f5:8e:96:de:28:20:fc:52:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:A0:F3:61:A9:19:D8:4E:B6:FE:9A:2B:FB:73:29:65:65:95:97
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/woag82GpGdhOtv6aK_tzKWVllZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
31.222.240.0/24
31.222.243.0/24
31.222.250.0/24
37.221.80.0/24
45.11.22.0/24
45.14.221.0/24
45.89.68.0/24
45.89.71.0/24
45.147.168.0/22
91.188.220.0/24
94.158.188.0/24
176.56.35.0-176.56.36.255
176.124.34.0/24
185.212.112.0/24
185.234.8.0/24
193.3.18.0/24
193.201.114.0/24
194.32.240.0/24
195.69.148.0/24
195.69.150.0/24
195.96.150.0/24
195.225.96.0/24
212.18.100.0/24
212.18.122.0/24
212.52.4.0/24
213.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a1:a5:7d:34:70:35:36:5d:13:36:92:48:2e:f9:9e:de:bb:
a2:67:b9:75:d3:ba:b9:ff:5a:5d:ac:2c:7c:12:4d:ae:f6:20:
76:47:ab:67:7f:aa:ad:30:69:3d:55:9f:c3:f7:89:c7:9e:da:
58:81:33:90:2f:b6:eb:dc:cc:c5:9d:7a:90:06:17:10:95:4c:
85:66:86:90:42:0a:96:5f:63:cd:1b:4c:41:c1:6e:53:39:9b:
8c:60:32:8b:92:2f:3c:e8:a1:cb:48:e4:cc:c0:f2:27:e3:65:
67:ad:1a:38:b3:7a:b2:5c:6d:65:0d:8e:4b:7d:b1:5d:62:a6:
12:ab:60:f4:39:e4:3a:92:de:bf:8c:0a:d9:80:a9:10:e2:6b:
f4:36:0a:d7:88:59:e4:63:b8:2b:47:1e:07:b2:3b:b0:e5:9e:
82:81:c1:ac:cb:d8:c6:d4:a3:3d:24:64:df:1e:1d:21:ca:aa:
21:c2:8c:e8:38:05:74:f0:13:36:23:42:64:db:02:a8:96:a9:
81:14:a1:b3:b7:23:cd:f9:ca:e1:5a:b3:44:40:7d:f3:ad:73:
fa:52:e0:28:96:4c:a3:5a:65:fa:9f:6d:69:7e:f7:af:90:3d:
14:ef:a6:78:86:39:da:5b:09:23:a2:98:58:b3:b4:01:29:44:
32:a5:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 12:13:27 2026 by rpki-client