Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/WVRWTHu2jYG5NGmFC6GaDzPuyf0.roa
File: WVRWTHu2jYG5NGmFC6GaDzPuyf0.roa (raw, json)
Hash identifier: ddR/0J3WSYMueqGWA4Jv4FzRBLir7poFgFFMNLJDNtY=
Subject key identifier: 59:54:56:4C:7B:B6:8D:81:B9:34:69:85:0B:A1:9A:0F:33:EE:C9:FD
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01A10C17EAA20DF60F087EBF83086425108B
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/WVRWTHu2jYG5NGmFC6GaDzPuyf0.roa
Signing time: Mon 05 Oct 2026 12:44:16 +0000
ROA not before: Mon 05 Oct 2026 12:44:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60246
IP address blocks: 80.72.20.0/23 maxlen: 32
80.72.24.0/23 maxlen: 32
85.198.120.0/21 maxlen: 32
92.118.72.0/23 maxlen: 32
95.174.96.0/20 maxlen: 32
95.174.112.0/21 maxlen: 32
95.174.120.0/24 maxlen: 32
95.174.121.0/24 maxlen: 32
95.174.123.0/24 maxlen: 32
95.174.124.0/22 maxlen: 32
178.212.139.0/24 maxlen: 32
178.248.0.0/22 maxlen: 32
178.248.4.0/23 maxlen: 32
178.248.6.0/23 maxlen: 32
185.9.184.0/24 maxlen: 32
185.9.186.0/23 maxlen: 32
185.230.240.0/23 maxlen: 32
185.230.242.0/24 maxlen: 32
2a00:8740::/46 maxlen: 128
2a00:8740:10::/44 maxlen: 128
2a00:8740:20::/44 maxlen: 128
2a00:8740:30::/44 maxlen: 128
2a00:8740:80::/48 maxlen: 128
2a00:8740:100::/48 maxlen: 128
2a00:8740:110::/47 maxlen: 128
2a00:8740:112::/48 maxlen: 128
2a00:8740:113::/48 maxlen: 128
2a00:8740:201::/48 maxlen: 128
2a00:8740:ff00::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:17:ea:a2:0d:f6:0f:08:7e:bf:83:08:64:25:10:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Oct 5 12:44:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5954564c7bb68d81b93469850ba19a0f33eec9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:fb:5a:a3:58:88:5b:86:4f:4f:43:a9:75:
ef:69:03:3e:d9:1c:84:e8:35:2c:dd:49:3f:60:71:
ad:26:86:2b:e7:a1:71:4a:35:7a:ab:99:15:bf:73:
f6:6f:41:53:ca:c0:ef:73:09:6b:4a:25:0a:1b:2c:
72:d8:31:da:56:86:a2:62:34:42:2c:11:06:38:1f:
12:d2:4d:a3:02:7f:1f:bd:1b:74:51:d7:6b:ce:15:
d0:cf:9f:71:23:ec:10:22:69:b1:09:53:22:89:43:
b2:4d:5a:d5:ab:95:40:27:12:63:1b:a2:08:19:36:
56:62:ca:1c:84:d8:a8:73:9b:41:9a:8c:e1:96:8d:
be:2e:77:89:4f:ec:09:b4:ed:9f:9e:5d:3e:47:90:
a7:7b:cb:ff:45:fa:d7:e5:d9:89:d8:ef:e0:1b:b3:
65:98:28:e9:7e:fc:b5:03:48:31:a6:ba:94:88:f0:
99:f4:c2:83:b5:b2:a1:47:30:53:d1:b6:a4:83:1c:
d0:2b:97:48:92:12:41:93:21:0a:a3:f0:18:ca:5c:
28:68:b7:d0:3a:bf:b3:41:87:27:4c:1a:27:86:3a:
c8:cc:cb:16:fe:73:c9:b2:52:0c:9b:21:84:4c:10:
ad:e9:6e:af:9a:dc:f7:d0:9c:2f:f8:16:31:54:40:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:56:4C:7B:B6:8D:81:B9:34:69:85:0B:A1:9A:0F:33:EE:C9:FD
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/WVRWTHu2jYG5NGmFC6GaDzPuyf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.20.0/23
80.72.24.0/23
85.198.120.0/21
92.118.72.0/23
95.174.96.0-95.174.121.255
95.174.123.0-95.174.127.255
178.212.139.0/24
178.248.0.0/21
185.9.184.0/24
185.9.186.0/23
185.230.240.0-185.230.242.255
IPv6:
2a00:8740::/46
2a00:8740:10::-2a00:8740:3f:ffff:ffff:ffff:ffff:ffff
2a00:8740:80::/48
2a00:8740:100::/48
2a00:8740:110::/46
2a00:8740:201::/48
2a00:8740:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
6e:98:87:40:6e:ed:79:b9:07:eb:71:9d:21:e4:f1:58:77:67:
6a:8a:eb:ea:a7:26:13:0b:f5:d7:b6:0e:61:55:78:27:97:58:
e0:93:70:e4:a2:d5:0b:17:e2:73:4f:88:a6:75:cd:fd:4d:6f:
37:14:6e:79:01:59:8b:b8:fd:30:88:8a:26:63:f2:0e:c7:15:
e1:42:8b:2a:a2:11:3a:73:7e:dc:b3:8b:67:18:2c:49:a3:33:
5e:ea:2a:ac:67:f1:48:63:5f:a9:de:71:70:83:40:db:19:a7:
74:24:92:e6:6a:d2:5d:4b:f3:fc:03:e7:ea:13:15:29:00:fa:
1d:83:3d:47:7a:75:af:eb:b0:2d:d5:b4:d6:40:1c:61:28:1a:
d4:fb:40:5d:08:1b:6f:37:bf:68:6b:79:32:4c:ef:07:cb:e0:
d0:ce:df:56:5b:fb:f5:37:9b:ab:9d:99:3b:34:43:c2:48:fd:
f1:4f:bd:4e:c0:87:ee:50:c9:64:7c:5c:10:19:2d:18:ee:ee:
03:84:08:da:65:8d:f6:46:72:31:bc:d9:cd:d9:c5:3a:cb:14:
24:a0:a0:a7:f8:84:ed:22:5e:2f:4f:64:da:c3:7f:6b:12:28:
85:d1:da:bc:79:54:93:b1:b7:c0:87:50:37:cb:7f:74:86:5a:
3d:d6:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:41 2026 by rpki-client