Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wXwM9J1YWaUPr8qF4HwBIgSBWGg.roa
File: wXwM9J1YWaUPr8qF4HwBIgSBWGg.roa (raw, json)
Hash identifier: a7I0OJl6X3k4MmuJoOLfZROOxtN2TsPHvRyuKNj4pXQ=
Subject key identifier: C1:7C:0C:F4:9D:58:59:A5:0F:AF:CA:85:E0:7C:01:22:04:81:58:68
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019EC6509BA4B3E745141E0170AC54C37A35
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wXwM9J1YWaUPr8qF4HwBIgSBWGg.roa
Signing time: Sun 14 Jun 2026 13:27:11 +0000
ROA not before: Sun 14 Jun 2026 13:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
86.54.213.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
185.248.134.0/26 maxlen: 26
185.248.134.64/26 maxlen: 26
185.248.134.128/26 maxlen: 26
185.248.134.192/26 maxlen: 26
194.46.57.0/24 maxlen: 24
2a12:bec0:7d::/48 maxlen: 48
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:e40::/44 maxlen: 44
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7008::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec1::/32 maxlen: 48
2a12:bec1:2::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec2::/48 maxlen: 48
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec3:b00b::/48 maxlen: 48
2a12:bec4:20::/44 maxlen: 48
2a12:bec4:100::/44 maxlen: 44
2a12:bec4:1120::/44 maxlen: 44
2a12:bec4:1260::/44 maxlen: 44
2a12:bec4:1430::/44 maxlen: 44
2a12:bec4:1490::/44 maxlen: 44
2a12:bec4:16b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:50:9b:a4:b3:e7:45:14:1e:01:70:ac:54:c3:7a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 14 13:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c17c0cf49d5859a50fafca85e07c012204815868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:e2:b0:86:c0:48:ae:bd:0d:ab:14:71:e3:
1a:19:f7:59:5d:3b:2d:2a:e2:d2:6a:2d:bf:01:04:
df:eb:8e:b1:dd:53:1f:59:19:2d:fa:41:73:a6:08:
1b:16:91:b4:86:6b:cd:5c:2e:67:f6:f1:82:59:7c:
f5:a5:0b:72:76:0b:b9:be:c4:72:88:3a:97:c4:11:
f8:7c:a2:0e:81:1e:b9:b2:9e:77:fd:42:eb:c0:36:
c0:3c:b9:74:ec:50:06:32:97:7c:b7:e0:1f:04:99:
39:56:d4:7f:5d:5e:18:eb:77:e4:fb:3d:4d:8e:b1:
2b:39:5c:d7:bc:8d:d6:f3:42:fa:6c:30:e2:4d:e5:
61:4a:86:1b:8a:87:17:03:c1:30:2f:29:f9:e4:d1:
4d:ab:e9:ba:4b:43:05:13:26:c1:04:44:2e:b0:11:
b7:56:8a:aa:e0:55:86:16:b6:42:ff:6f:88:74:6e:
3d:6c:0e:07:41:5f:e2:b9:56:c5:45:ad:6a:9e:27:
3b:fd:ed:f4:e4:9c:e2:18:4a:03:d0:95:89:3a:ee:
22:2f:03:f1:56:6e:58:10:e5:5f:95:78:39:82:39:
0c:a5:cc:ba:7d:0e:0f:c7:16:15:7d:7a:0d:4e:e0:
24:09:d7:07:c9:fa:fd:d1:af:82:c6:ef:f9:45:75:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7C:0C:F4:9D:58:59:A5:0F:AF:CA:85:E0:7C:01:22:04:81:58:68
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wXwM9J1YWaUPr8qF4HwBIgSBWGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
86.54.213.0/24
185.248.134.0/24
194.46.57.0/24
IPv6:
2a12:bec0:7d::/48
2a12:bec0:d0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::-2a12:bec0:7008:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1::-2a12:bec2:ffff:ffff:ffff:ffff:ffff:ffff
2a12:bec3:b00b::/48
2a12:bec4:20::/44
2a12:bec4:100::/44
2a12:bec4:1120::/44
2a12:bec4:1260::/44
2a12:bec4:1430::/44
2a12:bec4:1490::/44
2a12:bec4:16b0::/44
Signature Algorithm: sha256WithRSAEncryption
1b:b5:0d:0b:57:ea:31:6c:d5:46:bf:4c:4f:a1:f0:a3:25:26:
3e:79:fe:04:41:db:c2:ec:09:e2:00:57:70:50:48:d4:ab:ab:
62:98:23:e7:be:fe:88:92:a9:9c:2e:be:cd:51:0e:9f:80:d0:
4b:78:ec:20:e7:bb:b9:df:62:d8:5c:df:2b:4b:4f:4c:60:cf:
fc:71:0f:b5:4d:c3:e4:09:ff:95:4f:5a:ce:4d:bd:aa:7f:7f:
5a:30:7a:41:d6:e4:30:d6:67:36:8e:ac:a1:fb:4d:67:bd:0a:
53:ce:cf:73:5c:9f:c5:c6:7e:84:73:1d:77:39:b2:02:90:cd:
c2:45:06:ae:86:ba:13:24:1b:e5:e8:23:f3:9b:bc:ea:03:5e:
c0:13:e5:72:ac:d4:97:4a:11:6a:66:70:cf:14:e1:c9:1b:a2:
7f:99:76:f2:33:98:62:f9:42:16:65:b5:51:64:da:8d:16:f9:
52:5b:df:52:a5:73:55:74:11:02:f1:43:d5:12:a6:04:c1:c7:
97:ff:49:88:19:94:9c:bd:f4:4e:d2:8f:1c:b3:7b:53:ca:6a:
3f:85:6b:9c:ee:79:07:05:8b:cc:41:c8:ea:16:af:11:07:2a:
86:d8:4e:a1:a8:d5:3f:1c:ef:cb:a5:36:7e:fa:69:c8:bd:a9:
99:9f:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:36:30 2026 by rpki-client