Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/dwJ-g3-3P2MZcMoOR3FNsYKSwoQ.roa
File: dwJ-g3-3P2MZcMoOR3FNsYKSwoQ.roa (raw, json)
Hash identifier: CEw5oFmdA+lmNi9dXoyHwZUkPspjYdU0MaZLaXpgCiU=
Subject key identifier: 77:02:7E:83:7F:B7:3F:63:19:70:CA:0E:47:71:4D:B1:82:92:C2:84
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01A14C9BFB90003471DA4084B5BA877D0DD1
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/dwJ-g3-3P2MZcMoOR3FNsYKSwoQ.roa
Signing time: Sun 18 Oct 2026 01:24:13 +0000
ROA not before: Sun 18 Oct 2026 01:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48611
IP address blocks: 185.250.184.0/24 maxlen: 24
185.250.185.0/24 maxlen: 24
206.245.212.0/24 maxlen: 24
2a0c:1140::/32 maxlen: 32
2a0c:1141::/32 maxlen: 32
2a0c:1142::/32 maxlen: 32
2a0c:1143::/32 maxlen: 32
2a0c:1144::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:9b:fb:90:00:34:71:da:40:84:b5:ba:87:7d:0d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Oct 18 01:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77027e837fb73f631970ca0e47714db18292c284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fc:c8:68:15:6a:53:2a:ff:24:92:1e:96:8f:
37:40:7b:6c:f7:c0:f5:29:35:a1:16:4b:88:06:7b:
d4:03:a2:89:46:f1:52:e5:8e:72:75:97:10:35:ed:
43:ae:c2:e9:cc:c5:87:00:5d:b1:2b:de:ca:73:54:
0c:b4:bf:70:85:98:a3:78:5b:65:e3:14:a5:ba:13:
f0:b3:ec:b4:5c:f8:d1:b4:c6:5c:a3:85:fa:b2:2d:
94:c0:c7:92:80:c6:3f:44:bd:14:83:62:4d:17:90:
af:25:83:d9:a9:fa:47:07:8f:8e:4f:f5:ce:43:5f:
a7:76:e6:b5:f7:81:e7:eb:0c:eb:a0:32:f5:ca:cc:
02:d5:7d:8c:9a:e8:35:84:7f:87:71:be:43:c3:23:
98:07:41:10:b5:0f:25:7b:08:ae:60:b9:aa:81:f8:
6e:d9:ca:17:34:df:0d:14:e8:8f:27:3e:c9:e1:3c:
15:3b:fa:fb:7d:60:28:aa:53:cd:a6:15:64:50:cc:
8d:e2:7a:9e:73:55:b7:21:c4:99:b8:68:72:34:e9:
b2:d9:3b:de:d6:71:e5:b1:de:06:ab:db:f3:46:e3:
b8:cf:67:08:7d:63:21:f8:d0:44:fa:e4:04:ee:f8:
44:ca:2a:1a:18:46:8a:77:bf:06:da:ff:07:3b:31:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:02:7E:83:7F:B7:3F:63:19:70:CA:0E:47:71:4D:B1:82:92:C2:84
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/dwJ-g3-3P2MZcMoOR3FNsYKSwoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.184.0/23
206.245.212.0/24
IPv6:
2a0c:1140::/29
Signature Algorithm: sha256WithRSAEncryption
87:7b:8c:ac:33:8c:3f:ab:07:5e:9a:f5:a8:75:a3:15:5d:8b:
b4:de:9b:d9:dc:3c:60:99:72:d9:96:70:34:c1:38:ce:db:79:
32:28:35:e9:37:4a:42:71:f4:4f:35:8f:14:3f:a5:80:66:df:
6a:56:c7:14:06:50:0f:78:ba:be:47:31:a7:34:03:14:0d:96:
56:02:69:16:d4:74:e1:ff:18:77:44:60:1f:9c:4d:ec:80:9c:
1c:03:97:c1:37:48:76:c2:0a:15:56:88:2b:59:4d:9f:60:bc:
58:84:99:2b:e3:e4:99:b1:04:34:d1:42:50:8d:42:16:54:e5:
88:e4:06:d3:5d:e7:9e:6c:26:d6:9f:09:ea:7a:ca:c4:c7:fb:
90:6f:df:59:ed:3f:cd:ba:06:fe:1a:e8:b8:b8:bd:ae:01:66:
a4:10:91:b6:5f:42:09:de:aa:9a:69:81:7b:55:de:ad:a5:0a:
25:3a:bd:7d:16:6d:4d:89:08:88:64:ab:6b:5b:53:4f:44:12:
24:08:2a:23:35:fd:75:9b:fa:ab:43:f2:8b:d0:c2:06:e9:56:
8c:5e:40:04:51:75:0e:e9:a9:41:0e:48:d9:b4:db:a0:49:de:
c7:2e:24:59:e2:44:9b:00:76:d0:30:f6:4d:b5:92:09:a9:8c:
eb:13:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:13 2026 by rpki-client