Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/WrfLi6B4C5n8KYb3aO5hiWyqrQw.roa
File: WrfLi6B4C5n8KYb3aO5hiWyqrQw.roa (raw, json)
Hash identifier: l450E1VbjWMP09lLWfXBdFYDcmgMKFdvyz3EAYHxkx4=
Subject key identifier: 5A:B7:CB:8B:A0:78:0B:99:FC:29:86:F7:68:EE:61:89:6C:AA:AD:0C
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 019CDA127D9587B45FB76F62D0B19D7FA7BF
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/WrfLi6B4C5n8KYb3aO5hiWyqrQw.roa
Signing time: Tue 10 Mar 2026 23:26:10 +0000
ROA not before: Tue 10 Mar 2026 23:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8245
IP address blocks: 185.202.192.0/22 maxlen: 22
185.202.192.0/24 maxlen: 24
185.202.193.0/24 maxlen: 24
185.202.194.0/24 maxlen: 24
185.202.195.0/24 maxlen: 24
195.26.192.0/19 maxlen: 19
195.26.198.0/24 maxlen: 24
195.26.216.0/22 maxlen: 24
195.26.220.0/22 maxlen: 22
212.236.0.0/16 maxlen: 24
212.236.0.0/18 maxlen: 18
212.236.0.0/24 maxlen: 24
212.236.1.0/24 maxlen: 24
212.236.2.0/24 maxlen: 24
212.236.11.0/24 maxlen: 24
212.236.12.0/24 maxlen: 24
212.236.160.0/19 maxlen: 19
212.236.192.0/18 maxlen: 18
2a02:2750::/32 maxlen: 48
2a02:2750:40::/42 maxlen: 42
2a02:2750:80::/42 maxlen: 42
2a02:2750:cafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:da:12:7d:95:87:b4:5f:b7:6f:62:d0:b1:9d:7f:a7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Mar 10 23:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab7cb8ba0780b99fc2986f768ee61896caaad0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:a4:19:5d:f0:06:aa:45:6a:05:f1:97:d8:
91:34:4f:f4:c5:59:55:f7:74:0c:7e:c5:94:ab:12:
e6:51:5e:4b:0b:e9:ca:ab:4b:60:9c:e0:10:8d:e1:
0e:f0:0b:74:de:e2:c0:59:35:ce:ad:36:e6:ff:00:
94:21:01:29:5a:de:a5:ee:a4:97:c1:7a:a6:e1:57:
5a:0d:6f:78:cc:e5:f5:a8:41:53:5f:dc:a0:8e:8e:
8c:08:39:ca:f6:4b:33:60:70:bc:7c:52:71:0b:ca:
8a:1f:81:29:15:4a:32:a0:28:d5:d3:53:45:36:72:
11:9b:d5:60:fd:d5:02:08:ea:d0:6c:c2:d9:f5:af:
83:17:49:f3:02:b6:67:c0:80:c6:cb:f9:dd:82:b3:
d2:fd:49:72:eb:4c:b6:50:c2:c0:3b:fa:c1:e9:15:
02:53:79:f7:74:e5:f4:56:b1:03:19:39:64:b5:05:
11:2d:c2:63:5e:8b:a5:69:7a:cc:af:6a:17:dc:70:
5e:ba:00:9d:ab:18:86:20:e3:77:e1:d8:57:74:bf:
a1:83:23:6f:40:3b:2d:a9:51:0e:b4:b6:16:b9:eb:
4f:32:77:a2:cc:9e:90:88:17:cf:76:bb:1e:4d:72:
9b:fd:96:26:bc:94:1b:3f:22:5a:af:23:20:29:80:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B7:CB:8B:A0:78:0B:99:FC:29:86:F7:68:EE:61:89:6C:AA:AD:0C
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/WrfLi6B4C5n8KYb3aO5hiWyqrQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.192.0/22
195.26.192.0/19
212.236.0.0/16
IPv6:
2a02:2750::/32
Signature Algorithm: sha256WithRSAEncryption
2d:90:52:47:b0:b8:91:bd:39:ca:d3:4c:85:5e:5b:89:62:1c:
c1:3f:e6:a5:2b:99:27:b4:f8:c9:de:19:18:cf:8b:d3:d0:d8:
41:74:0d:da:47:95:3f:3b:d1:48:34:90:87:eb:9b:3b:1c:1e:
b5:20:df:30:9b:b8:ab:ec:09:0e:56:d3:b1:4c:ac:58:e7:37:
6b:d1:38:5a:e8:23:b3:94:81:df:23:b6:01:49:e1:d7:28:c4:
04:03:2b:11:b5:b4:8c:cd:d5:a3:79:3c:3d:fa:75:23:80:03:
a0:c6:41:f4:ad:17:7f:cb:67:31:77:f2:f1:27:df:4d:b5:51:
57:f5:94:c6:06:2b:1e:94:e2:8a:57:74:5d:be:29:1e:7e:91:
54:93:96:0a:8e:8b:5f:02:9e:24:ca:01:0a:b5:b6:7e:2e:08:
32:d9:2c:13:3c:f8:79:0a:87:19:9a:01:b0:b3:b3:50:9b:13:
5d:fa:1e:36:e7:9b:a3:d6:20:96:a7:ba:85:0c:eb:ab:db:1b:
e2:51:1b:d5:f6:a9:1f:8d:6f:20:ff:94:1e:f5:61:1e:0c:4c:
ce:45:1a:6b:b1:83:f6:bc:50:54:44:5e:56:ed:f6:01:48:c8:
33:f0:71:1b:e7:ef:5a:f6:3a:49:bb:11:04:1d:5a:92:d3:7d:
40:de:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:49:20 2026 by rpki-client