Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/wb6Alx2jI_wyy2l0j2ScP2iF5LA.roa
File: wb6Alx2jI_wyy2l0j2ScP2iF5LA.roa (raw, json)
Hash identifier: ARjWpiCOD9NdvmXB4t9x9aVktqPhjrZ66+Av5qsEbOA=
Subject key identifier: C1:BE:80:97:1D:A3:23:FC:32:CB:69:74:8F:64:9C:3F:68:85:E4:B0
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 019CD1883675805C02F947AC621319560C35
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/wb6Alx2jI_wyy2l0j2ScP2iF5LA.roa
Signing time: Mon 09 Mar 2026 07:38:10 +0000
ROA not before: Mon 09 Mar 2026 07:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48101
IP address blocks: 37.25.44.0/24 maxlen: 24
37.25.45.0/24 maxlen: 24
37.25.46.0/23 maxlen: 23
91.151.240.0/20 maxlen: 22
91.228.232.0/23 maxlen: 24
91.228.234.0/24 maxlen: 24
95.166.0.0/18 maxlen: 21
98.96.160.0/20 maxlen: 23
134.19.192.0/22 maxlen: 22
134.19.196.0/22 maxlen: 23
134.65.128.0/21 maxlen: 21
134.65.136.0/22 maxlen: 22
134.65.140.0/22 maxlen: 22
134.65.144.0/22 maxlen: 22
134.65.148.0/22 maxlen: 22
134.65.152.0/21 maxlen: 21
146.103.128.0/18 maxlen: 19
176.20.128.0/18 maxlen: 21
185.16.160.0/22 maxlen: 24
185.122.192.0/22 maxlen: 22
199.15.232.0/22 maxlen: 22
199.15.236.0/24 maxlen: 24
199.15.237.0/24 maxlen: 24
199.15.238.0/24 maxlen: 24
199.15.239.0/24 maxlen: 24
2a04:200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:88:36:75:80:5c:02:f9:47:ac:62:13:19:56:0c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Mar 9 07:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1be80971da323fc32cb69748f649c3f6885e4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:f4:ab:97:32:b6:45:72:84:bd:ca:e0:de:
de:70:13:3f:c8:8d:b5:83:d2:48:cc:a2:7a:12:8a:
90:6c:dc:b3:6a:27:41:e6:7f:f1:41:57:d9:85:74:
28:cc:0a:d7:af:00:da:2a:84:a4:cb:87:16:6a:93:
95:f1:d3:da:7b:3a:90:50:75:68:db:98:25:38:33:
7f:e4:1a:54:98:2c:5e:b2:6b:24:08:de:7b:6e:b6:
52:dd:c0:29:b0:98:93:16:ae:9c:0a:67:14:e5:3c:
21:c0:73:81:51:82:d9:21:89:5f:87:99:81:4e:a5:
b5:d4:57:9d:4a:ed:6c:4e:56:87:1a:1a:1c:35:13:
6d:e1:43:e5:06:bc:f2:7f:32:ac:61:47:44:f1:98:
15:23:d6:11:86:db:e6:d2:17:1e:10:4e:03:79:a2:
eb:e9:fd:5a:6d:df:d8:00:64:8b:5b:3e:54:cb:3e:
f1:e4:32:50:15:51:61:0c:cc:a4:79:16:c6:d0:9d:
22:8b:2e:0d:1e:64:71:95:ea:d9:0f:ed:24:ef:0a:
65:9f:15:43:55:ca:6b:80:0b:a8:bd:24:18:9d:6e:
99:b3:ed:4b:e3:0b:e3:dc:7c:41:34:ca:bd:d2:b9:
34:a2:97:ea:c8:ad:7c:6e:e1:ef:89:e4:b1:19:f7:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BE:80:97:1D:A3:23:FC:32:CB:69:74:8F:64:9C:3F:68:85:E4:B0
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/wb6Alx2jI_wyy2l0j2ScP2iF5LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.44.0/22
91.151.240.0/20
91.228.232.0-91.228.234.255
95.166.0.0/18
98.96.160.0/20
134.19.192.0/21
134.65.128.0/19
146.103.128.0/18
176.20.128.0/18
185.16.160.0/22
185.122.192.0/22
199.15.232.0/21
IPv6:
2a04:200::/29
Signature Algorithm: sha256WithRSAEncryption
90:b5:fb:f2:21:11:25:76:55:c1:94:46:27:c5:ce:11:e4:c5:
e9:68:99:d7:61:11:f4:4a:50:9b:16:9a:de:b1:99:60:f7:db:
be:b4:48:98:e3:31:5a:dd:dc:25:68:ed:96:0e:ea:8f:13:96:
c0:cd:47:2f:36:bb:7b:ff:89:1a:03:18:14:7c:15:cc:e3:3e:
d3:0c:9d:f2:a7:1b:d1:0a:64:0a:73:37:6b:08:33:ce:71:86:
21:61:04:2b:8b:1e:e9:71:f9:e2:a8:24:3c:6b:39:f6:43:b9:
48:c7:b2:e5:92:1b:48:f3:87:83:b4:c5:b7:51:ea:2e:89:f6:
40:9d:3f:e5:7f:78:bc:9f:e9:9e:1e:f6:e3:19:80:4b:58:74:
74:25:8e:c9:ac:a7:65:2f:35:c6:63:36:ab:bc:ce:1f:12:e4:
7c:16:c0:ce:1e:5f:ab:82:c9:91:04:8f:de:8e:a5:08:67:c7:
e3:45:30:52:0c:e4:f7:20:86:c0:cc:52:18:7a:e7:d2:5a:fe:
4f:32:fd:0e:e5:84:d4:d3:f5:32:80:af:21:6c:9a:d3:c4:02:
a8:79:60:4a:aa:cd:19:3b:b4:05:d7:26:78:ff:4d:bc:b6:93:
c6:e4:ec:76:48:66:56:a6:32:88:e2:8d:75:b2:db:99:56:31:
84:c0:00:7d
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZzRiDZ1gFwC+UesYhMZVgw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjZhYzBhNDkyNTUyODNjZDUzMDY2OTcxY2Q3YjNkZmUy
YTNjZTgwHhcNMjYwMzA5MDczODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWJlODA5NzFkYTMyM2ZjMzJjYjY5NzQ4ZjY0OWMzZjY4ODVlNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn70q5cytkVyhL3K4N7ecBM/yI21
g9JIzKJ6EoqQbNyzaidB5n/xQVfZhXQozArXrwDaKoSky4cWapOV8dPaezqQUHVo
25glODN/5BpUmCxesmskCN57brZS3cApsJiTFq6cCmcU5TwhwHOBUYLZIYlfh5mB
TqW11FedSu1sTlaHGhocNRNt4UPlBrzyfzKsYUdE8ZgVI9YRhtvm0hceEE4DeaLr
6f1abd/YAGSLWz5Uyz7x5DJQFVFhDMykeRbG0J0iiy4NHmRxlerZD+0k7wplnxVD
VcprgAuovSQYnW6Zs+1L4wvj3HxBNMq90rk0opfqyK18buHvieSxGfemnQIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFMG+gJcdoyP8MstpdI9knD9oheSwMB8GA1UdIwQY
MBaAFLRmrApJJVKDzVMGaXHNez3+KjzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt
YzliNDcwZGMyNDBiLzEvd2I2QWx4MmpJX3d5eTJsMGoyU2NQMmlGNUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi
LzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQCJRksAwQE
W5fwMAwDBANb5OgDBABb5OoDBAZfpgADBARiYKADBAOGE8ADBAWGQYADBAaSZ4AD
BAawFIADBAK5EKADBAK5esADBAPHD+gwDQQCAAIwBwMFAyoEAgAwDQYJKoZIhvcN
AQELBQADggEBAJC1+/IhESV2VcGURifFzhHkxelomddhEfRKUJsWmt6xmWD32760
SJjjMVrd3CVo7ZYO6o8TlsDNRy82u3v/iRoDGBR8FczjPtMMnfKnG9EKZApzN2sI
M85xhiFhBCuLHulx+eKoJDxrOfZDuUjHsuWSG0jzh4O0xbdR6i6J9kCdP+V/eLyf
6Z4e9uMZgEtYdHQljsmsp2UvNcZjNqu8zh8S5HwWwM4eX6uCyZEEj96OpQhnx+NF
MFIM5PcghsDMUhh659Ja/k8y/Q7lhNTT9TKAryFsmtPEAqh5YEqqzRk7tAXXJnj/
Tby2k8bk7HZIZlamMojijXWy25lWMYTAAH0=
-----END CERTIFICATE-----
Generated at Fri Mar 13 22:51:39 2026 by rpki-client