Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/dLkbfrZ0nH3Kr3bvm6WG5ym4104.roa
File: dLkbfrZ0nH3Kr3bvm6WG5ym4104.roa (raw, json)
Hash identifier: FSYFfdn3hv9kN/qMwTudiNUcB90HK6rm8oZ3RkDVyuM=
Subject key identifier: 74:B9:1B:7E:B6:74:9C:7D:CA:AF:76:EF:9B:A5:86:E7:29:B8:D7:4E
Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial: 019DCF5F70A357BB9C3238EB81834C5EAB5B
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/dLkbfrZ0nH3Kr3bvm6WG5ym4104.roa
Signing time: Mon 27 Apr 2026 14:37:11 +0000
ROA not before: Mon 27 Apr 2026 14:37:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49178
IP address blocks: 81.172.44.0/24 maxlen: 24
185.192.180.0/24 maxlen: 24
185.237.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:5f:70:a3:57:bb:9c:32:38:eb:81:83:4c:5e:ab:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Validity
Not Before: Apr 27 14:37:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74b91b7eb6749c7dcaaf76ef9ba586e729b8d74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:75:a3:37:6f:25:db:6c:94:7c:ef:81:c4:
17:81:55:66:4f:c4:13:28:ac:5a:6e:c5:9c:ad:62:
77:81:e3:35:61:0d:b7:5c:c7:39:31:6d:77:d3:a2:
76:c5:24:89:61:80:d0:33:1a:59:8f:67:01:f4:cb:
cc:c8:c5:49:35:2f:1c:94:75:c1:71:41:ca:97:94:
e9:39:58:7c:df:c6:0a:61:00:3c:e5:44:3a:55:fa:
27:af:08:78:75:84:e6:70:1d:06:dd:23:bb:40:ae:
c0:df:bd:4b:ed:4f:85:bc:d7:22:93:70:ff:c8:38:
3f:8d:22:3a:88:99:ea:f7:75:c9:a5:d7:ba:70:57:
3e:ce:60:99:98:54:d5:9c:01:63:2f:ed:26:48:ff:
8e:44:e8:85:89:00:a8:d6:55:18:75:66:32:06:1b:
82:ac:16:eb:be:92:81:d4:b0:e0:4b:df:66:ed:e6:
c4:48:c8:83:42:8a:9b:11:0a:d1:63:b4:3d:da:79:
fc:71:6e:a4:ba:d3:ba:85:26:55:d4:e5:38:4c:01:
d8:be:45:6c:b4:cd:e8:4b:a4:5f:ca:7a:5e:96:b3:
e3:47:a3:29:7a:a0:b3:6f:c4:59:17:93:cb:e3:4e:
01:79:88:60:b4:b0:ab:0a:a7:ba:34:ae:e6:94:9c:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B9:1B:7E:B6:74:9C:7D:CA:AF:76:EF:9B:A5:86:E7:29:B8:D7:4E
X509v3 Authority Key Identifier:
keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/dLkbfrZ0nH3Kr3bvm6WG5ym4104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.172.44.0/24
185.192.180.0/24
185.237.180.0/22
Signature Algorithm: sha256WithRSAEncryption
40:cb:a6:0e:24:7c:92:16:26:24:09:71:e9:97:b7:f8:9f:f7:
76:ac:05:f3:80:e3:91:8b:1b:7c:e1:2f:82:25:55:18:86:ed:
8e:52:44:0d:09:2f:91:f4:c6:89:a0:58:31:8c:99:bd:b7:df:
d9:af:81:99:76:1b:87:4a:cd:9e:55:40:c5:4e:0a:4d:fb:b4:
06:23:8f:5c:b1:80:88:58:ca:9b:00:fa:32:70:c2:4c:57:27:
f8:c9:55:4d:13:14:e6:b8:3f:91:64:36:83:17:b8:e6:40:72:
c8:52:62:bc:8a:97:42:67:8c:9e:4c:9c:7a:ba:bc:2d:94:e2:
e3:d7:95:f1:95:07:8e:4d:8d:dc:38:15:87:cb:43:d1:44:d1:
3e:9b:95:bf:94:a0:d2:71:d4:ab:16:ca:78:89:7d:02:c0:7c:
dd:0f:31:42:c4:6f:ef:38:be:76:c6:b6:59:1f:07:18:09:7a:
84:2e:8d:4e:e6:44:ea:8f:dc:4b:10:72:0f:ce:0d:7e:21:2d:
44:25:44:55:c7:6b:63:28:09:b9:84:18:41:17:63:2c:0b:fa:
e0:ab:13:e4:4a:dd:d0:35:f7:b6:60:fd:9a:b6:3b:d0:74:d1:
fe:37:4f:92:5e:51:c5:b2:bc:36:77:ea:5d:9f:85:40:d7:d8:
97:c4:54:8b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ3PX3CjV7ucMjjrgYNMXqtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMmZjOTMzM2RiNDNlMjRiM2YyM2JjNjRhM2FlMTNmNDBm
YjBhYTcwHhcNMjYwNDI3MTQzNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGI5MWI3ZWI2NzQ5YzdkY2FhZjc2ZWY5YmE1ODZlNzI5YjhkNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp711ozdvJdtslHzvgcQXgVVmT8QT
KKxabsWcrWJ3geM1YQ23XMc5MW1306J2xSSJYYDQMxpZj2cB9MvMyMVJNS8clHXB
cUHKl5TpOVh838YKYQA85UQ6Vfonrwh4dYTmcB0G3SO7QK7A371L7U+FvNcik3D/
yDg/jSI6iJnq93XJpde6cFc+zmCZmFTVnAFjL+0mSP+OROiFiQCo1lUYdWYyBhuC
rBbrvpKB1LDgS99m7ebESMiDQoqbEQrRY7Q92nn8cW6kutO6hSZV1OU4TAHYvkVs
tM3oS6RfynpelrPjR6MpeqCzb8RZF5PL404BeYhgtLCrCqe6NK7mlJwQeQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHS5G362dJx9yq9275ulhucpuNdOMB8GA1UdIwQY
MBaAFMMvyTM9tD4ks/I7xko64T9A+wqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWIt
YTY3MTkxNWVlOTlhLzEvZExrYmZyWjBuSDNLcjNidm02V0c1eW00MTA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWItYTY3MTkxNWVlOTlh
LzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUawsAwQA
ucC0AwQCue20MA0GCSqGSIb3DQEBCwUAA4IBAQBAy6YOJHySFiYkCXHpl7f4n/d2
rAXzgOORixt84S+CJVUYhu2OUkQNCS+R9MaJoFgxjJm9t9/Zr4GZdhuHSs2eVUDF
TgpN+7QGI49csYCIWMqbAPoycMJMVyf4yVVNExTmuD+RZDaDF7jmQHLIUmK8ipdC
Z4yeTJx6urwtlOLj15XxlQeOTY3cOBWHy0PRRNE+m5W/lKDScdSrFsp4iX0CwHzd
DzFCxG/vOL52xrZZHwcYCXqELo1O5kTqj9xLEHIPzg1+IS1EJURVx2tjKAm5hBhB
F2MsC/rgqxPkSt3QNfe2YP2atjvQdNH+N0+SXlHFsrw2d+pdn4VA19iXxFSL
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:18 2026 by rpki-client