Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/WU9_Bg7MRX2JICB9SeOwvcZbOag.roa
File: WU9_Bg7MRX2JICB9SeOwvcZbOag.roa (raw, json)
Hash identifier: qcY3U3QmyFWt8nMp8jcO6HAmRnTyhZhKK7zRNJxKVks=
Subject key identifier: 59:4F:7F:06:0E:CC:45:7D:89:20:20:7D:49:E3:B0:BD:C6:5B:39:A8
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 019EE00B77097793930BC93FC667059BBC59
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/WU9_Bg7MRX2JICB9SeOwvcZbOag.roa
Signing time: Fri 19 Jun 2026 13:21:48 +0000
ROA not before: Fri 19 Jun 2026 13:21:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62371
IP address blocks: 79.135.106.0/24 maxlen: 24
79.135.107.0/24 maxlen: 24
95.36.96.0/24 maxlen: 24
95.36.97.0/24 maxlen: 24
95.36.98.0/24 maxlen: 24
95.36.99.0/24 maxlen: 24
185.70.40.0/22 maxlen: 22
185.70.40.0/24 maxlen: 24
185.70.41.0/24 maxlen: 24
185.70.42.0/24 maxlen: 24
185.70.43.0/24 maxlen: 24
2a05:2700::/32 maxlen: 32
2a05:2701:f00::/44 maxlen: 44
2a05:2701:f10::/44 maxlen: 44
2a05:2701:f20::/44 maxlen: 44
2a05:2701:f40::/44 maxlen: 44
2a05:2701:f50::/44 maxlen: 44
2a05:2701:fe00::/48 maxlen: 48
2a05:2701:fe01::/48 maxlen: 48
2a05:2701:fe02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:0b:77:09:77:93:93:0b:c9:3f:c6:67:05:9b:bc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Jun 19 13:21:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=594f7f060ecc457d8920207d49e3b0bdc65b39a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:98:83:2f:4a:5c:f7:7f:4d:44:72:7d:7f:
c7:0f:46:de:10:88:91:df:e2:e5:b4:12:ed:bc:84:
57:25:e3:53:29:93:2c:8d:b2:1c:fe:0d:2b:f8:e9:
59:7a:f0:fe:5b:12:e7:f3:88:34:b6:40:e2:68:57:
a2:a3:8b:57:45:b9:24:e4:c1:dc:e4:62:3b:58:38:
23:6d:0f:d4:a0:94:6b:ab:f3:5c:1e:87:ef:a2:53:
d5:a6:b5:ec:24:92:e8:2e:90:a4:b9:b6:3c:79:7b:
d9:38:e9:62:bc:ff:de:3a:4d:0b:2b:6e:fe:40:bc:
c7:13:4c:eb:96:91:0d:4d:b3:5f:dd:7e:53:7b:44:
8b:3d:fc:dd:2e:cd:94:4f:32:91:90:ff:25:3b:0b:
d5:23:09:f2:07:46:ae:d5:d1:34:3a:00:92:ce:51:
4b:04:d3:7e:68:2a:6a:aa:ba:ea:cb:50:4b:ff:48:
ab:cc:34:f2:20:5b:50:0a:a4:a9:34:59:0f:93:7c:
7a:42:3b:4a:b4:2d:bc:74:e2:9e:6f:ec:6d:ba:27:
ff:18:88:b7:8d:17:89:89:fb:13:ed:15:e2:48:6c:
46:ac:17:da:0d:1a:b8:42:76:6a:56:47:67:b6:4b:
16:da:1a:4a:47:63:06:b3:4f:d4:6f:4c:7e:7e:72:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4F:7F:06:0E:CC:45:7D:89:20:20:7D:49:E3:B0:BD:C6:5B:39:A8
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/WU9_Bg7MRX2JICB9SeOwvcZbOag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.106.0/23
95.36.96.0/22
185.70.40.0/22
IPv6:
2a05:2700::/32
2a05:2701:f00::-2a05:2701:f2f:ffff:ffff:ffff:ffff:ffff
2a05:2701:f40::/43
2a05:2701:fe00::-2a05:2701:fe02:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:68:ef:b8:74:6f:b6:a8:2f:12:ea:89:8d:88:74:05:3d:3f:
1b:8a:90:70:c9:7b:19:3f:a2:bd:84:41:e8:70:8a:56:10:04:
e4:a7:b0:43:0f:c7:f2:fe:2b:c5:f8:b7:74:39:6f:48:33:53:
b5:56:77:65:3c:05:9d:b9:77:06:00:e3:c9:b4:c8:aa:38:dd:
dd:59:02:a7:61:04:f9:93:aa:08:80:0e:a9:24:b8:a3:c6:b9:
d5:00:5d:1c:93:ff:39:c1:f6:a5:39:95:9e:d9:8a:70:25:9a:
a2:98:82:a0:d0:85:e5:c8:f6:87:ca:9c:ee:8b:45:d2:f0:75:
6a:5f:ed:3a:8b:7c:47:cd:66:2d:54:21:e7:77:b4:92:a3:54:
4a:c8:4e:94:fa:d7:56:cc:1a:07:a7:59:5e:14:6d:5d:09:b9:
ff:05:d7:bf:a9:6c:24:af:3b:b1:54:bc:fd:56:15:12:a2:2f:
26:3b:12:98:e2:80:9b:ee:67:a0:f0:9e:be:76:de:59:8f:b3:
4a:a0:56:1b:80:93:fb:03:af:5e:c4:10:f4:94:47:0b:4e:7a:
3a:f4:bc:b7:49:19:cb:19:2b:8b:26:9c:aa:1b:23:6c:90:09:
ef:94:25:82:eb:00:16:2f:bc:ab:fe:fc:76:fa:45:97:f2:d6:
50:12:d6:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZ7gC3cJd5OTC8k/xmcFm7xZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1
ODliYTgwHhcNMjYwNjE5MTMyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTRmN2YwNjBlY2M0NTdkODkyMDIwN2Q0OWUzYjBiZGM2NWIzOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSGYgy9KXPd/TURyfX/HD0beEIiR
3+LltBLtvIRXJeNTKZMsjbIc/g0r+OlZevD+WxLn84g0tkDiaFeio4tXRbkk5MHc
5GI7WDgjbQ/UoJRrq/NcHofvolPVprXsJJLoLpCkubY8eXvZOOlivP/eOk0LK27+
QLzHE0zrlpENTbNf3X5Te0SLPfzdLs2UTzKRkP8lOwvVIwnyB0au1dE0OgCSzlFL
BNN+aCpqqrrqy1BL/0irzDTyIFtQCqSpNFkPk3x6QjtKtC28dOKeb+xtuif/GIi3
jReJifsT7RXiSGxGrBfaDRq4QnZqVkdntksW2hpKR2MGs0/Ub0x+fnLlWQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFFlPfwYOzEV9iSAgfUnjsL3GWzmoMB8GA1UdIwQY
MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt
Y2YxZjRjN2M5MjIyLzEvV1U5X0JnN01SWDJKSUNCOVNlT3d2Y1piT2FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy
LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDAYBAIAATASAwQBT4dqAwQC
XyRgAwQCuUYoMDwEAgACMDYDBQAqBScAMBEDBgAqBScBDwMHBCoFJwEPIAMHBSoF
JwEPQDARAwYBKgUnAf4DBwAqBScB/gIwDQYJKoZIhvcNAQELBQADggEBAI9o77h0
b7aoLxLqiY2IdAU9PxuKkHDJexk/or2EQehwilYQBOSnsEMPx/L+K8X4t3Q5b0gz
U7VWd2U8BZ25dwYA48m0yKo43d1ZAqdhBPmTqgiADqkkuKPGudUAXRyT/znB9qU5
lZ7ZinAlmqKYgqDQheXI9ofKnO6LRdLwdWpf7TqLfEfNZi1UIed3tJKjVErITpT6
11bMGgenWV4UbV0Juf8F17+pbCSvO7FUvP1WFRKiLyY7EpjigJvuZ6Dwnr523lmP
s0qgVhuAk/sDr17EEPSURwtOejr0vLdJGcsZK4smnKobI2yQCe+UJYLrABYvvKv+
/Hb6RZfy1lAS1vQ=
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:36 2026 by rpki-client