Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/wzGdB7WyZzZ6EYWjM0LsTtHFOyA.roa
File: wzGdB7WyZzZ6EYWjM0LsTtHFOyA.roa (raw, json)
Hash identifier: R2aU4t1tU/m6DkxfmQI29qUNeaAWLXLodLY1Ury0RAE=
Subject key identifier: C3:31:9D:07:B5:B2:67:36:7A:11:85:A3:33:42:EC:4E:D1:C5:3B:20
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01A1452859DCE5FE74A030CC307B7E1CBC57
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/wzGdB7WyZzZ6EYWjM0LsTtHFOyA.roa
Signing time: Fri 16 Oct 2026 14:40:34 +0000
ROA not before: Fri 16 Oct 2026 14:40:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49037
IP address blocks: 46.226.160.0/21 maxlen: 32
80.72.16.0/21 maxlen: 32
85.198.120.0/21 maxlen: 32
89.169.52.0/22 maxlen: 32
92.118.72.0/22 maxlen: 32
92.246.132.0/22 maxlen: 32
92.246.136.0/21 maxlen: 32
93.185.144.0/20 maxlen: 32
95.174.96.0/19 maxlen: 32
178.212.139.0/24 maxlen: 32
185.9.184.0/22 maxlen: 32
185.136.32.0/22 maxlen: 32
185.230.240.0/22 maxlen: 32
185.230.241.0/24 maxlen: 24
185.230.242.0/24 maxlen: 24
213.108.20.0/22 maxlen: 32
217.144.176.0/20 maxlen: 32
2a00:8740::/32 maxlen: 128
2a0b:1c40::/29 maxlen: 128
2a12:3280::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:28:59:dc:e5:fe:74:a0:30:cc:30:7b:7e:1c:bc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Oct 16 14:40:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3319d07b5b267367a1185a33342ec4ed1c53b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d6:e1:4f:5c:c7:93:ca:2f:c8:51:67:b2:8f:
7b:93:04:64:57:54:3e:05:64:fe:a0:88:a6:d4:ab:
ef:2a:4b:32:a0:01:d2:64:e9:47:81:f9:21:b0:79:
78:10:c5:0e:54:ee:96:ab:11:be:ac:33:d2:fa:f4:
cc:a0:7d:dc:67:1b:08:fb:d0:fd:1c:8c:60:03:36:
a5:58:2b:08:9b:c9:26:f2:9e:da:98:5d:54:74:3b:
ea:c3:a7:f7:b9:66:e6:74:a7:3f:b5:b5:e7:71:f2:
cf:7e:f6:3e:49:5e:5d:a5:66:57:db:dd:da:e0:00:
48:d8:43:2b:ef:0f:31:2a:e6:8b:f7:dc:5a:6d:62:
14:a1:11:45:08:cc:c6:94:01:61:4b:0c:15:d7:9c:
87:8d:32:de:b3:1f:6a:41:1e:cf:ee:0e:e9:a9:7a:
85:e4:51:33:4e:1d:4d:90:f8:cb:51:5b:b3:b7:49:
40:bc:c1:48:35:20:48:47:37:65:f4:aa:45:19:71:
7f:fe:92:bb:56:b0:34:6d:af:20:8f:3e:9d:60:14:
ae:dc:8b:73:29:85:d7:47:f6:eb:a6:87:11:9d:3b:
01:2d:30:2d:d4:f9:0d:92:99:6b:39:63:da:3e:47:
18:a7:8e:ec:17:52:aa:0f:6f:8c:52:2c:1a:a8:33:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:9D:07:B5:B2:67:36:7A:11:85:A3:33:42:EC:4E:D1:C5:3B:20
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/wzGdB7WyZzZ6EYWjM0LsTtHFOyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.160.0/21
80.72.16.0/21
85.198.120.0/21
89.169.52.0/22
92.118.72.0/22
92.246.132.0-92.246.143.255
93.185.144.0/20
95.174.96.0/19
178.212.139.0/24
185.9.184.0/22
185.136.32.0/22
185.230.240.0/22
213.108.20.0/22
217.144.176.0/20
IPv6:
2a00:8740::/32
2a0b:1c40::/29
2a12:3280::/32
Signature Algorithm: sha256WithRSAEncryption
98:7f:c1:4f:40:c0:59:a7:21:f3:e8:0f:bb:c3:93:cf:82:5d:
55:75:02:4f:c9:ec:76:37:e3:c8:78:4f:cd:85:75:e4:9c:3d:
7a:b7:49:2c:09:27:1a:f2:5f:bb:2f:9b:a8:82:59:d0:94:61:
2d:b5:5e:8b:2e:06:2f:d4:6d:28:bb:97:89:7a:cf:7a:fc:69:
7c:a0:7e:fd:78:f3:bc:b6:79:45:d1:90:71:eb:a1:82:eb:9d:
cf:91:24:d0:11:4d:89:d0:c9:ab:79:f4:d3:76:eb:46:9c:9d:
99:30:2a:ee:88:11:26:79:23:29:53:40:c3:d4:35:0f:1f:65:
3c:56:c8:f8:ed:c9:c9:e6:95:79:66:76:9c:d0:ee:b5:3b:99:
3c:6b:4f:23:f7:10:dd:9d:8e:ad:91:b3:72:1f:3a:03:8d:c8:
12:f5:b8:7a:33:2a:ec:67:1a:e2:94:f6:a8:1d:0b:77:8b:e3:
88:bd:00:65:3a:f9:9e:b6:22:74:27:4e:6e:31:59:b5:86:9b:
cc:54:af:01:3d:3c:46:cb:bb:07:fc:30:a9:e2:ab:46:57:d1:
16:00:89:77:5b:e1:f6:59:6e:7f:9a:a3:a0:a6:6d:34:3c:11:
f5:c3:64:81:4e:2b:0f:28:56:c4:dd:fd:19:f4:75:d1:e3:80:
5a:7c:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:07 2026 by rpki-client