Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/AWYzgkSeU1ruLdcQGWyx3NFOxJQ.roa
File: AWYzgkSeU1ruLdcQGWyx3NFOxJQ.roa (raw, json)
Hash identifier: P9Q3/GJCp544vg/dW4m/kMtZQYifMjeadrDv+i+SQls=
Subject key identifier: 01:66:33:82:44:9E:53:5A:EE:2D:D7:10:19:6C:B1:DC:D1:4E:C4:94
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 019EF395B7DC6805ADCFDCA694273BCAC306
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/AWYzgkSeU1ruLdcQGWyx3NFOxJQ.roa
Signing time: Tue 23 Jun 2026 08:25:35 +0000
ROA not before: Tue 23 Jun 2026 08:25:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63150
IP address blocks: 185.241.40.0/22 maxlen: 24
185.241.40.0/23 maxlen: 24
185.241.40.0/24 maxlen: 24
185.241.41.0/24 maxlen: 24
185.241.42.0/23 maxlen: 24
185.241.42.0/24 maxlen: 24
185.241.43.0/24 maxlen: 24
209.33.144.0/20 maxlen: 24
209.33.145.0/24 maxlen: 24
209.33.160.0/20 maxlen: 24
209.33.171.0/24 maxlen: 24
2a14:4900:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:95:b7:dc:68:05:ad:cf:dc:a6:94:27:3b:ca:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Jun 23 08:25:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01663382449e535aee2dd710196cb1dcd14ec494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:b9:08:ec:e5:d6:e0:49:6f:c3:55:ea:69:
72:0e:8a:cb:ab:05:c8:5d:2b:17:a2:dc:bf:0d:39:
9b:47:4f:59:86:e6:98:e3:15:dc:1c:7c:10:60:7c:
da:13:b1:6f:0a:3f:49:83:88:87:39:07:63:d5:5b:
13:74:12:3b:5c:ce:4d:18:ae:c7:aa:6c:eb:a3:0f:
f1:75:e6:a1:7b:c2:15:fa:54:0a:c6:01:44:a8:7f:
14:32:3a:4e:e7:3e:37:54:cf:1f:85:13:41:d0:1f:
27:bc:ed:82:b3:da:58:45:41:ae:24:c3:b9:23:85:
1e:de:10:72:74:c4:5f:54:0f:c6:2e:4a:a3:cd:b3:
66:a8:13:c0:09:36:f4:d2:a3:0f:16:b2:02:dc:bb:
99:8b:d3:76:7b:a0:3b:e9:63:07:b0:35:c6:22:89:
f1:d7:1b:14:e6:de:d0:e6:9e:46:f6:02:97:3d:62:
7f:08:08:0e:7d:b1:47:ed:43:37:1e:3f:a1:a1:47:
63:e1:9b:d3:26:b9:b0:e5:87:9b:f3:e1:7e:74:e3:
1b:d5:37:30:d9:4f:13:f4:e9:e0:4c:46:04:b3:fc:
77:23:e7:75:29:e3:ff:85:88:41:7b:b4:92:85:fe:
ee:e0:62:e0:fd:e6:a0:fe:6c:db:d7:59:4d:9a:3e:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:66:33:82:44:9E:53:5A:EE:2D:D7:10:19:6C:B1:DC:D1:4E:C4:94
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/AWYzgkSeU1ruLdcQGWyx3NFOxJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.40.0/22
209.33.144.0-209.33.175.255
IPv6:
2a14:4900:2000::/36
Signature Algorithm: sha256WithRSAEncryption
9c:17:97:41:d5:d1:fc:99:ce:96:de:67:1a:e2:2c:6a:2d:63:
93:ba:26:c2:02:2a:aa:22:91:4a:e8:ec:2c:58:64:48:e5:20:
58:38:72:b4:f1:98:d3:8a:6a:3f:db:34:b8:04:e7:9b:75:d0:
b0:85:55:4d:32:c0:51:a6:f8:a2:4e:3f:38:8e:c2:68:2c:f9:
57:c1:a4:c5:34:9f:e1:7d:04:7a:9d:29:de:24:69:14:30:a8:
6f:38:23:9b:a4:b8:53:5c:d9:9d:f5:4d:18:c6:8b:b8:39:f7:
9d:6b:cf:72:ac:1a:b5:f8:c6:11:5f:17:3d:c9:1b:5c:2b:cb:
7a:0b:68:4f:15:e0:86:fd:1e:16:d0:26:8e:1c:fa:89:61:46:
90:4d:c3:f8:a8:42:63:f4:2b:c3:59:31:78:b0:9f:50:91:fe:
8f:13:76:ff:db:9d:b1:a1:be:c3:eb:37:52:21:21:f3:94:e9:
84:0d:46:de:f3:c7:a5:66:58:ef:0c:4b:76:3c:8c:f0:69:4e:
62:60:c0:ad:13:f9:f7:d6:18:c2:ab:af:bd:59:65:85:6a:f0:
cf:66:44:e0:7e:1e:c0:d9:ce:de:1a:f5:8e:b6:97:d4:4e:e2:
24:10:9f:78:b9:c0:e4:fb:e1:d3:ca:93:01:e3:80:c0:5e:e3:
43:84:27:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 00:55:37 2026 by rpki-client