Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wRkj_2zUAi_7G3eXTbV8uTpXPbA.roa
File: wRkj_2zUAi_7G3eXTbV8uTpXPbA.roa (raw, json)
Hash identifier: QlGadj3ayF7YBX1Rq4y/Aj6r7r7YHWM90DYYEx9c+7s=
Subject key identifier: C1:19:23:FF:6C:D4:02:2F:FB:1B:77:97:4D:B5:7C:B9:3A:57:3D:B0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A02508CB6C70B2744C13428D64772F7D01
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wRkj_2zUAi_7G3eXTbV8uTpXPbA.roa
Signing time: Fri 21 Aug 2026 15:55:28 +0000
ROA not before: Fri 21 Aug 2026 15:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.17.22.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.125.96.0/24 maxlen: 24
89.125.99.0/24 maxlen: 24
89.125.100.0/24 maxlen: 24
89.125.101.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
140.225.194.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
140.225.199.0/24 maxlen: 24
162.35.244.0/23 maxlen: 23
167.17.32.0/23 maxlen: 23
167.17.38.0/23 maxlen: 23
167.17.41.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:08:cb:6c:70:b2:74:4c:13:42:8d:64:77:2f:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 21 15:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c11923ff6cd4022ffb1b77974db57cb93a573db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:06:b2:f1:4b:da:84:b1:9a:5b:2f:f4:de:
76:79:3e:46:2a:11:2d:c1:4a:48:a0:a3:bb:2f:8c:
a7:7d:62:3c:22:7e:85:e3:44:ee:02:46:d8:61:56:
61:f5:24:ab:2b:9b:70:4f:85:69:3e:bd:bc:6e:dd:
a4:f6:fb:93:0b:cf:fa:9a:52:bb:61:00:84:dc:cd:
67:eb:27:9e:a7:75:19:27:4a:ba:a5:87:c7:4d:ca:
48:ec:19:99:a2:99:07:90:3d:c6:3d:cb:7c:7b:f6:
64:aa:3a:eb:9d:09:0d:9a:70:33:9a:7c:d7:a5:e8:
51:b4:12:11:6b:e8:2c:50:48:a2:53:2b:60:e6:c5:
ab:a5:48:f2:b0:5a:e5:90:8d:76:07:ca:d5:8d:5e:
9f:0c:5f:46:9d:b0:71:99:94:05:0f:a9:85:ae:3c:
7b:e2:94:5b:03:3b:47:60:8e:c2:1c:1a:04:03:96:
df:3f:c8:a4:d1:78:64:c3:3b:fa:0f:bb:52:ed:e8:
32:46:19:fa:7c:54:30:e8:2c:19:fa:16:ba:59:37:
49:ef:cf:0f:d2:93:82:5d:11:75:2b:a9:5e:e6:35:
be:24:fe:d0:7c:13:b1:36:f0:f7:f2:ad:a0:ae:cc:
41:65:fd:a7:b4:af:2b:22:e5:eb:2d:4f:04:99:c6:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:23:FF:6C:D4:02:2F:FB:1B:77:97:4D:B5:7C:B9:3A:57:3D:B0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wRkj_2zUAi_7G3eXTbV8uTpXPbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.22.0/24
89.34.106.0/24
89.125.96.0/24
89.125.99.0-89.125.101.255
93.114.183.0/24
140.225.194.0/23
140.225.199.0/24
162.35.244.0/23
167.17.32.0/23
167.17.38.0/23
167.17.41.0/24
167.17.46.0/24
167.17.59.0/24
194.58.47.0/24
206.245.156.0/24
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
43:20:95:06:6d:37:24:04:22:b1:17:c3:cf:e3:2d:94:f8:dc:
7f:aa:bf:16:b2:e7:97:1d:e3:2b:4c:62:9f:1e:8d:60:b8:25:
db:91:e1:37:1e:fb:e6:3a:76:27:e5:a6:2f:e2:a1:c3:41:ac:
d3:36:c9:89:6b:11:1a:a8:a7:15:ee:28:9c:76:b5:e5:59:23:
f4:d6:e2:6b:62:b6:d7:8c:22:1b:0b:2a:48:f4:84:d7:2e:45:
b0:76:4e:fa:c0:dd:a4:df:bf:9b:b5:16:03:89:c9:34:62:e8:
d6:a8:bb:26:f4:cc:27:98:b3:53:d6:1f:c0:4e:73:af:d5:7d:
e7:8d:31:9f:0e:0b:67:b5:44:cf:28:cb:f0:3c:29:ac:64:3d:
e5:6d:28:dd:82:c2:1a:f4:ab:d8:41:5d:23:ae:a1:7e:b0:c4:
91:f5:30:f6:8e:61:a3:f1:6b:bc:14:2a:83:e6:8d:5d:e1:b0:
ee:d6:7c:25:57:4b:bd:5f:58:19:a3:46:6b:2f:4a:7a:9d:8a:
6d:c9:27:cb:56:3a:b6:45:96:e5:22:1b:df:6e:19:88:2f:f1:
fe:ac:32:fa:2f:49:00:59:71:eb:b8:02:f5:bf:4e:1f:d7:bf:
e8:7e:2f:8f:d2:b4:3b:6e:7c:e3:a4:6c:a9:15:7a:f9:d4:1e:
b6:40:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:49 2026 by rpki-client