Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wSxLkCWxIQzwU2FiC-TpVZZTxCU.roa
File: wSxLkCWxIQzwU2FiC-TpVZZTxCU.roa (raw, json)
Hash identifier: jzInkF+yRBOA6Z/1xOCIy4sPWidkNwQ5N+6vtxsKnlU=
Subject key identifier: C1:2C:4B:90:25:B1:21:0C:F0:53:61:62:0B:E4:E9:55:96:53:C4:25
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019CAD5CD0F473B42DAFACAA4F330C011D08
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wSxLkCWxIQzwU2FiC-TpVZZTxCU.roa
Signing time: Mon 02 Mar 2026 07:04:27 +0000
ROA not before: Mon 02 Mar 2026 07:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 89.44.76.0/24 maxlen: 24
89.125.39.0/24 maxlen: 24
89.125.52.0/24 maxlen: 24
89.125.57.0/24 maxlen: 24
89.125.59.0/24 maxlen: 24
89.125.72.0/24 maxlen: 24
89.125.74.0/24 maxlen: 24
89.125.75.0/24 maxlen: 24
89.125.118.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
185.141.217.0/24 maxlen: 24
193.124.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5c:d0:f4:73:b4:2d:af:ac:aa:4f:33:0c:01:1d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 2 07:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c12c4b9025b1210cf05361620be4e9559653c425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:e5:5b:f2:f2:89:a3:69:85:82:2a:ce:bb:
c2:09:c8:49:43:93:60:de:af:d3:9a:3c:10:fa:ef:
70:ac:78:f1:2c:0f:34:2c:91:88:56:69:8d:de:22:
92:b7:98:a9:ed:6b:0f:a9:4a:cb:e9:f4:e5:ce:40:
40:34:2d:49:70:2d:2a:7b:db:9d:75:98:28:15:c1:
67:c8:f5:37:43:31:ea:38:42:2f:ea:ed:85:36:13:
a2:46:f6:73:e4:09:b6:1c:f3:f2:5c:46:2b:26:be:
56:df:38:e0:d8:42:e7:5b:77:d4:37:c1:a9:3b:b1:
f1:ca:59:bb:0b:10:07:ca:5e:8c:55:ac:83:1c:42:
d1:20:2a:77:20:1f:44:51:d2:55:6f:54:92:43:4b:
ce:29:95:00:f0:b4:a5:7e:19:87:87:55:43:67:53:
5a:f7:d2:56:e3:b1:9c:51:ca:dd:7b:cb:38:7b:dc:
8a:09:2f:9f:c7:9c:15:eb:5a:cb:b4:4a:74:76:f8:
31:89:81:48:6b:dd:12:3b:69:12:89:22:53:22:54:
a6:5a:ac:04:eb:30:95:5e:5d:d8:5a:cb:d0:35:91:
20:7d:40:5d:af:9c:5f:e8:f9:66:f5:a5:d8:94:b2:
12:1f:3c:20:df:f9:13:73:d2:05:7d:fd:52:b5:74:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2C:4B:90:25:B1:21:0C:F0:53:61:62:0B:E4:E9:55:96:53:C4:25
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wSxLkCWxIQzwU2FiC-TpVZZTxCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.76.0/24
89.125.39.0/24
89.125.52.0/24
89.125.57.0/24
89.125.59.0/24
89.125.72.0/24
89.125.74.0/23
89.125.118.0/24
103.245.229.0/24
185.141.217.0/24
193.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:57:df:d0:01:2e:4c:be:8e:a5:7b:82:cd:4a:35:fb:ad:86:
5a:8c:5f:5f:48:83:e1:e4:8c:0f:89:56:d7:65:51:71:db:f5:
6e:db:aa:cb:b1:9d:e6:64:aa:2a:e2:83:35:a2:3b:b1:e1:36:
6a:0b:14:74:02:71:3e:6a:95:90:88:a2:7a:da:ef:64:c9:04:
b2:80:17:4d:86:8f:35:d8:21:dc:9d:0f:9c:50:f6:e2:f1:e8:
05:2d:0f:1f:a0:2a:82:a7:25:4c:72:92:d1:4a:01:93:cb:b5:
fc:b2:26:90:6d:a3:05:99:d2:d5:c7:e8:4c:cd:b6:25:da:53:
1b:aa:5b:8b:08:ad:00:27:4b:41:23:1b:77:77:7b:9a:f0:b9:
c0:0f:62:83:6c:5c:b8:50:54:ff:02:d7:21:4b:f7:0b:4d:33:
7d:9a:33:d4:87:11:2a:84:ff:6a:a2:45:50:26:05:f0:c1:fc:
fb:a7:ab:00:da:3e:8e:55:50:e5:e9:bf:f7:70:a3:f5:9a:49:
a9:e3:f3:af:54:04:c2:67:84:7f:fb:2c:db:14:d0:49:cb:94:
67:a2:2f:7d:e9:98:06:89:75:ec:5e:c9:59:28:12:28:26:45:
cb:29:79:09:3c:30:f0:1a:56:6a:47:71:2e:aa:de:01:42:52:
76:12:ad:45
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZytXND0c7Qtr6yqTzMMAR0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMzAyMDcwNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTJjNGI5MDI1YjEyMTBjZjA1MzYxNjIwYmU0ZTk1NTk2NTNjNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tjlW/LyiaNphYIqzrvCCchJQ5Ng
3q/TmjwQ+u9wrHjxLA80LJGIVmmN3iKSt5ip7WsPqUrL6fTlzkBANC1JcC0qe9ud
dZgoFcFnyPU3QzHqOEIv6u2FNhOiRvZz5Am2HPPyXEYrJr5W3zjg2ELnW3fUN8Gp
O7Hxylm7CxAHyl6MVayDHELRICp3IB9EUdJVb1SSQ0vOKZUA8LSlfhmHh1VDZ1Na
99JW47GcUcrde8s4e9yKCS+fx5wV61rLtEp0dvgxiYFIa90SO2kSiSJTIlSmWqwE
6zCVXl3YWsvQNZEgfUBdr5xf6Plm9aXYlLISHzwg3/kTc9IFff1StXSWwwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFMEsS5AlsSEM8FNhYgvk6VWWU8QlMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvd1N4TGtDV3hJUXp3VTJGaUMtVHBWWlpUeENVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAWSxMAwQA
WX0nAwQAWX00AwQAWX05AwQAWX07AwQAWX1IAwQBWX1KAwQAWX12AwQAZ/XlAwQA
uY3ZAwQAwXzgMA0GCSqGSIb3DQEBCwUAA4IBAQAaV9/QAS5Mvo6le4LNSjX7rYZa
jF9fSIPh5IwPiVbXZVFx2/Vu26rLsZ3mZKoq4oM1ojux4TZqCxR0AnE+apWQiKJ6
2u9kyQSygBdNho812CHcnQ+cUPbi8egFLQ8foCqCpyVMcpLRSgGTy7X8siaQbaMF
mdLVx+hMzbYl2lMbqluLCK0AJ0tBIxt3d3ua8LnAD2KDbFy4UFT/AtchS/cLTTN9
mjPUhxEqhP9qokVQJgXwwfz7p6sA2j6OVVDl6b/3cKP1mkmp4/OvVATCZ4R/+yzb
FNBJy5Rnoi996ZgGiXXsXslZKBIoJkXLKXkJPDDwGlZqR3Euqt4BQlJ2Eq1F
-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:22 2026 by rpki-client