Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/wy2l2xfgQzFulQvXU47aJXYQkIs.roa
File: wy2l2xfgQzFulQvXU47aJXYQkIs.roa (raw, json)
Hash identifier: 4TLXNlTOb7jyrMM7V/2+VqJpYo+6cOyYEkTpDPdlFeE=
Subject key identifier: C3:2D:A5:DB:17:E0:43:31:6E:95:0B:D7:53:8E:DA:25:76:10:90:8B
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 01A0F6F928118506C4B5E558770BD976A6C7
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/wy2l2xfgQzFulQvXU47aJXYQkIs.roa
Signing time: Thu 01 Oct 2026 10:18:38 +0000
ROA not before: Thu 01 Oct 2026 10:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6723
IP address blocks: 178.255.176.0/22 maxlen: 24
178.255.180.0/23 maxlen: 24
178.255.183.0/24 maxlen: 24
185.5.254.0/24 maxlen: 24
185.5.255.0/24 maxlen: 24
2a01:6d80:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:f9:28:11:85:06:c4:b5:e5:58:77:0b:d9:76:a6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Oct 1 10:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c32da5db17e043316e950bd7538eda257610908b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:bb:df:93:b0:d9:ec:cb:c3:82:25:f0:34:
b5:38:ac:b9:5d:f2:cd:39:a2:a3:c7:f5:cb:d8:78:
c7:00:02:80:49:65:56:a5:79:12:86:37:51:af:c1:
88:50:92:37:c8:79:ee:09:c7:d1:1b:52:f9:fe:a0:
14:2e:4f:da:60:38:a0:49:b2:8b:33:5d:15:1a:87:
4f:5b:1e:cf:5e:11:a1:94:6a:b6:ef:3d:d6:41:9d:
7d:a5:b9:50:4a:22:3b:f0:fe:6f:f1:e3:e7:15:77:
6c:8d:d3:6e:17:19:bc:e5:9e:36:15:3b:5e:d9:32:
e7:2c:a8:b4:b3:cc:ea:a6:46:a2:bc:fd:4c:b4:e2:
83:ad:59:b8:f5:1c:0e:fd:b1:ae:79:58:27:51:63:
3a:73:07:e6:00:b6:5a:2c:1c:52:5f:8c:4c:1b:0f:
3d:aa:30:a3:24:76:1e:22:10:3f:45:ef:d5:55:d8:
e9:16:63:c7:43:67:00:82:e3:65:b8:b1:da:4f:d8:
23:d1:e8:b7:c0:03:18:bd:a6:ff:27:0b:ee:31:aa:
36:e4:f1:ed:b7:37:44:fd:83:ae:7d:7f:97:3a:84:
0a:b5:38:29:c5:c8:4c:74:91:72:20:7e:ac:1a:7a:
ba:a4:4e:59:e5:3d:6f:0f:13:22:cc:bc:52:ed:04:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2D:A5:DB:17:E0:43:31:6E:95:0B:D7:53:8E:DA:25:76:10:90:8B
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/wy2l2xfgQzFulQvXU47aJXYQkIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.176.0-178.255.181.255
178.255.183.0/24
185.5.254.0/23
IPv6:
2a01:6d80:f000::/36
Signature Algorithm: sha256WithRSAEncryption
46:b1:a2:e5:17:69:e3:6a:a2:9e:eb:8a:c3:88:80:8e:7f:11:
2b:e0:bf:5c:f7:74:d2:76:15:19:4c:1f:e7:67:c8:1e:fc:fd:
03:96:26:18:ef:18:e9:2d:9d:25:88:9b:ce:25:47:a7:37:25:
f3:99:04:7d:95:4f:77:fb:18:1a:0c:be:ea:34:44:f0:03:56:
c0:8b:31:e3:fe:41:62:64:c9:41:1a:2d:00:e5:05:93:55:06:
9b:a0:57:d4:c9:d3:75:90:c8:8d:28:59:99:4e:b3:7a:03:b6:
bd:d0:ad:66:aa:1e:a4:f4:87:b3:65:b5:b3:52:38:d5:f0:4d:
73:9f:18:93:4c:e9:30:1b:68:e5:fd:73:3c:53:c5:8f:b9:c7:
d4:8b:88:54:09:74:de:13:bc:22:51:74:b5:34:bc:ff:1e:61:
fe:74:d9:4a:b4:f0:40:67:cb:1c:87:7e:b0:2c:38:36:bb:d1:
ff:73:c5:7f:91:92:a2:fe:3d:0f:60:8c:76:4f:64:4c:af:3e:
fc:81:37:6d:50:5a:de:67:e8:f5:45:1e:d4:f1:d6:14:5c:b1:
65:81:6f:86:b1:2d:be:2c:35:0a:ec:71:a7:1b:f3:15:07:60:
e4:b0:c8:0b:1a:7d:3e:62:92:1e:18:25:a5:f8:f6:16:00:18:
d9:49:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:18 2026 by rpki-client