Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/WlZHaK6cwmsSNYmxvN2mo3I2-mo.roa
File: WlZHaK6cwmsSNYmxvN2mo3I2-mo.roa (raw, json)
Hash identifier: gNHxdcU+ZZjds1fvfGvkBhqPhdBcauHdFZB1oUleTSo=
Subject key identifier: 5A:56:47:68:AE:9C:C2:6B:12:35:89:B1:BC:DD:A6:A3:72:36:FA:6A
Certificate issuer: /CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Certificate serial: 019F2795C03D0AABBA10CAC747D7467D9501
Authority key identifier: 95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/WlZHaK6cwmsSNYmxvN2mo3I2-mo.roa
Signing time: Fri 03 Jul 2026 10:45:53 +0000
ROA not before: Fri 03 Jul 2026 10:45:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56478
IP address blocks: 31.14.248.0/22 maxlen: 22
37.156.72.0/22 maxlen: 22
68.168.32.0/19 maxlen: 19
68.168.32.0/22 maxlen: 22
68.168.40.0/22 maxlen: 22
68.168.44.0/22 maxlen: 22
88.98.192.0/18 maxlen: 18
88.98.200.0/22 maxlen: 22
88.98.204.0/22 maxlen: 22
88.98.216.0/23 maxlen: 23
88.98.218.0/23 maxlen: 23
88.98.240.0/20 maxlen: 20
88.98.240.0/22 maxlen: 22
89.32.120.0/22 maxlen: 22
89.34.164.0/22 maxlen: 22
89.35.196.0/22 maxlen: 22
89.36.64.0/21 maxlen: 21
89.39.136.0/21 maxlen: 21
89.44.40.0/22 maxlen: 22
93.115.192.0/22 maxlen: 22
137.220.64.0/18 maxlen: 18
137.220.68.0/22 maxlen: 22
137.220.72.0/21 maxlen: 21
137.220.80.0/22 maxlen: 22
137.220.84.0/22 maxlen: 22
137.220.88.0/22 maxlen: 22
137.220.92.0/22 maxlen: 22
137.220.96.0/22 maxlen: 22
137.220.100.0/22 maxlen: 22
137.220.104.0/22 maxlen: 22
137.220.108.0/22 maxlen: 22
137.220.112.0/20 maxlen: 20
137.220.112.0/23 maxlen: 23
137.220.112.0/24 maxlen: 24
137.220.113.0/24 maxlen: 24
137.220.114.0/23 maxlen: 23
137.220.116.0/23 maxlen: 23
137.220.116.0/24 maxlen: 24
137.220.117.0/24 maxlen: 24
137.220.118.0/23 maxlen: 23
137.220.118.0/24 maxlen: 24
137.220.119.0/24 maxlen: 24
137.220.120.0/23 maxlen: 23
137.220.120.0/24 maxlen: 24
137.220.121.0/24 maxlen: 24
137.220.122.0/23 maxlen: 23
137.220.122.0/24 maxlen: 24
137.220.123.0/24 maxlen: 24
137.220.124.0/22 maxlen: 22
140.228.32.0/19 maxlen: 19
140.228.40.0/22 maxlen: 22
140.228.44.0/22 maxlen: 22
140.228.48.0/22 maxlen: 22
140.228.52.0/22 maxlen: 22
140.228.56.0/22 maxlen: 22
140.228.64.0/19 maxlen: 19
140.228.80.0/21 maxlen: 21
140.228.88.0/22 maxlen: 22
140.228.92.0/22 maxlen: 22
141.0.144.0/21 maxlen: 21
141.0.152.0/21 maxlen: 21
143.58.128.0/18 maxlen: 18
143.58.128.0/21 maxlen: 21
143.58.136.0/21 maxlen: 21
143.58.144.0/22 maxlen: 22
143.58.148.0/22 maxlen: 22
143.58.152.0/21 maxlen: 21
143.58.160.0/21 maxlen: 21
143.58.168.0/21 maxlen: 21
143.58.176.0/21 maxlen: 21
143.58.184.0/21 maxlen: 21
143.58.192.0/18 maxlen: 18
143.58.192.0/21 maxlen: 21
143.58.200.0/21 maxlen: 21
143.58.212.0/22 maxlen: 22
143.58.216.0/21 maxlen: 21
143.58.216.0/22 maxlen: 22
143.58.220.0/22 maxlen: 22
143.58.224.0/21 maxlen: 21
143.58.224.0/22 maxlen: 22
143.58.228.0/22 maxlen: 22
143.58.232.0/22 maxlen: 22
143.58.236.0/22 maxlen: 22
143.58.240.0/21 maxlen: 21
143.58.248.0/21 maxlen: 21
152.37.64.0/18 maxlen: 18
152.37.64.0/22 maxlen: 22
152.37.68.0/22 maxlen: 22
152.37.72.0/22 maxlen: 22
152.37.76.0/22 maxlen: 22
152.37.80.0/22 maxlen: 22
152.37.84.0/22 maxlen: 22
152.37.88.0/22 maxlen: 22
152.37.92.0/22 maxlen: 22
152.37.96.0/22 maxlen: 22
152.37.100.0/23 maxlen: 23
152.37.102.0/23 maxlen: 23
152.37.104.0/22 maxlen: 22
152.37.108.0/22 maxlen: 22
152.37.114.0/23 maxlen: 23
152.37.116.0/22 maxlen: 22
152.37.120.0/22 maxlen: 22
152.37.124.0/22 maxlen: 22
152.37.124.0/23 maxlen: 23
152.37.126.0/23 maxlen: 23
185.24.120.0/22 maxlen: 22
188.172.144.0/20 maxlen: 20
188.210.208.0/21 maxlen: 21
188.210.208.0/22 maxlen: 22
188.210.212.0/22 maxlen: 22
188.210.212.0/23 maxlen: 23
188.210.214.0/23 maxlen: 23
188.211.160.0/22 maxlen: 22
188.213.136.0/22 maxlen: 22
188.214.8.0/21 maxlen: 21
209.35.64.0/19 maxlen: 19
209.35.64.0/21 maxlen: 21
209.35.72.0/22 maxlen: 22
209.35.76.0/22 maxlen: 22
209.35.78.0/23 maxlen: 23
209.35.80.0/20 maxlen: 20
209.35.80.0/21 maxlen: 21
209.35.80.0/22 maxlen: 22
209.35.84.0/22 maxlen: 22
209.35.88.0/21 maxlen: 21
209.35.88.0/22 maxlen: 22
209.35.92.0/22 maxlen: 22
2a01:4b00::/32 maxlen: 32
2a01:4b00:d000::/36 maxlen: 36
2a01:4b00:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:95:c0:3d:0a:ab:ba:10:ca:c7:47:d7:46:7d:95:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Validity
Not Before: Jul 3 10:45:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a564768ae9cc26b123589b1bcdda6a37236fa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:18:00:59:72:ac:c6:35:c5:8f:a8:7e:9c:
1c:8e:e0:58:fe:90:df:ec:6c:88:4a:0f:55:8d:61:
16:ce:c6:37:58:f0:e8:c7:02:2b:54:85:c4:d2:74:
e8:13:bc:7a:57:44:c8:58:2f:1c:13:c6:76:bb:9e:
e0:40:6f:7b:a6:ed:d1:05:cf:96:3d:9a:09:eb:1b:
0b:c8:b9:61:31:66:a1:cd:d1:09:74:f3:2b:fa:9e:
c9:2d:bc:d7:64:10:ef:e6:9f:61:d5:38:b4:7a:8f:
37:35:61:0e:32:f2:5e:af:b2:ca:32:f8:d2:fa:80:
e1:6f:5f:57:f5:b0:aa:14:ad:c4:54:fa:c4:5e:4b:
7f:b9:64:60:72:8b:7c:10:e3:98:34:5e:00:57:95:
94:8d:05:60:6c:5f:81:0e:84:fe:f2:60:dd:6a:a8:
e3:a5:5d:de:f2:17:38:3a:25:50:f0:2d:11:0f:8d:
da:ff:2d:3e:fd:62:a2:25:d2:e0:b3:c1:44:29:e6:
6e:60:72:51:df:e8:63:66:0f:ad:c3:3a:d7:6f:5e:
af:6d:6a:3f:52:3b:7f:1e:c2:69:83:28:00:3d:92:
d8:6a:69:8c:ff:0c:92:45:35:dc:e7:fb:59:a3:76:
3a:93:bf:3a:09:91:4f:8b:ee:a0:cf:3c:bd:21:ae:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:47:68:AE:9C:C2:6B:12:35:89:B1:BC:DD:A6:A3:72:36:FA:6A
X509v3 Authority Key Identifier:
keyid:95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/WlZHaK6cwmsSNYmxvN2mo3I2-mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.248.0/22
37.156.72.0/22
68.168.32.0/19
88.98.192.0/18
89.32.120.0/22
89.34.164.0/22
89.35.196.0/22
89.36.64.0/21
89.39.136.0/21
89.44.40.0/22
93.115.192.0/22
137.220.64.0/18
140.228.32.0-140.228.95.255
141.0.144.0/20
143.58.128.0/17
152.37.64.0/18
185.24.120.0/22
188.172.144.0/20
188.210.208.0/21
188.211.160.0/22
188.213.136.0/22
188.214.8.0/21
209.35.64.0/19
IPv6:
2a01:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
34:1b:c2:d7:84:6b:42:eb:50:60:86:b8:9f:ea:4e:9c:4f:6b:
be:7d:a4:13:63:8a:48:48:10:bf:1a:86:8c:11:2c:c2:a1:2b:
54:21:fc:5b:e1:b4:bb:50:5a:1a:1b:57:01:2e:3d:f1:b9:73:
41:2f:06:cc:98:86:bd:0d:c5:45:3b:9f:fe:53:3c:7f:84:68:
49:c4:0a:4d:db:22:64:08:91:fe:f1:fc:3d:69:ad:ab:a9:78:
af:54:67:b0:90:59:27:bd:38:32:dc:3f:e8:d5:82:ee:c1:4f:
e2:4c:8d:8c:0e:03:c3:f7:18:88:1e:7f:f8:15:94:ee:34:4e:
16:4f:48:71:9c:f0:d9:26:48:a4:34:8b:e6:e6:2c:55:93:d9:
ff:b7:65:d1:88:47:a2:b0:e7:00:e2:35:15:08:de:ef:af:43:
e9:8f:ac:a2:0e:40:f3:ad:f8:1c:13:9f:3f:f6:32:f5:37:db:
75:b4:e1:eb:e7:63:01:f7:06:eb:6f:24:19:dc:57:5f:4a:d8:
42:a7:cc:7e:f1:aa:85:97:07:7c:7c:8b:00:ba:97:a5:d8:d2:
c2:ce:d8:8d:f1:f3:03:59:5f:66:30:f3:60:b8:ba:3c:d1:a1:
86:ca:7d:57:4a:fa:63:f9:c1:30:84:cc:cd:18:2d:65:bf:0f:
eb:da:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:06:31 2026 by rpki-client