Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/w82F-_2KUo6780OReWbrcXFgOCI.roa
File: w82F-_2KUo6780OReWbrcXFgOCI.roa (raw, json)
Hash identifier: 2sFKVV9OfbJAOCqpzaEbs0k2EluCBWR6KS26tdOE0SQ=
Subject key identifier: C3:CD:85:FB:FD:8A:52:8E:BB:F3:43:91:79:66:EB:71:71:60:38:22
Certificate issuer: /CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Certificate serial: 019F23682CE58F278E4EA9382EC147258D9E
Authority key identifier: 0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/w82F-_2KUo6780OReWbrcXFgOCI.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29144
IP address blocks: 185.76.200.0/23 maxlen: 23
185.76.200.0/24 maxlen: 24
185.76.201.0/24 maxlen: 24
185.76.202.0/23 maxlen: 23
185.76.202.0/24 maxlen: 24
185.76.203.0/24 maxlen: 24
194.0.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2c:e5:8f:27:8e:4e:a9:38:2e:c1:47:25:8d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3cd85fbfd8a528ebbf343917966eb7171603822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b0:9d:a8:b2:8f:89:5c:ac:9f:36:50:73:09:
f0:4c:1e:83:67:34:d6:6d:8d:50:66:40:44:84:b7:
45:02:ab:5b:53:3f:05:4a:1a:2c:37:73:d9:c4:0b:
ed:f0:3f:0c:9c:99:6c:22:86:5b:15:4d:a6:29:bb:
b1:79:69:9a:8d:50:1f:7d:d4:cf:55:27:e7:e4:bc:
79:fa:b1:03:16:d1:75:dc:81:b4:dc:01:ac:3e:7f:
46:4f:63:14:03:64:02:29:7f:53:53:25:f6:64:99:
bd:d0:8c:9b:c9:19:fb:d1:85:05:3b:64:41:b4:24:
12:53:d0:1c:93:53:07:d6:21:7b:a2:fb:77:e3:a6:
8f:40:f7:fd:c6:8a:c1:aa:da:a6:76:52:3b:19:00:
16:03:35:c3:0e:3a:4a:07:1a:9c:fb:58:a3:0f:88:
a5:99:32:f7:34:b3:ed:e0:f8:b1:ef:8d:77:6c:69:
4d:70:96:4d:34:9b:63:64:42:b7:a3:4b:5a:f1:d2:
b8:31:1f:bb:c8:06:fb:79:72:96:3e:e3:36:9a:79:
20:19:a0:e6:77:28:89:2d:ce:1f:82:e2:14:dc:7e:
72:c0:db:74:ab:d4:33:4a:cc:ef:e0:e0:06:8c:56:
7e:49:5a:de:0f:d6:1e:cc:aa:86:16:29:28:49:20:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:85:FB:FD:8A:52:8E:BB:F3:43:91:79:66:EB:71:71:60:38:22
X509v3 Authority Key Identifier:
keyid:0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/w82F-_2KUo6780OReWbrcXFgOCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.200.0/22
194.0.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:83:a8:a2:98:c0:ac:5b:a4:d5:dd:7f:c8:52:e2:55:59:03:
93:88:75:c1:1e:f1:b0:eb:bb:6f:ec:66:fb:ce:a8:f8:45:67:
2f:0d:18:a2:21:a8:c9:f7:39:84:ac:0a:ab:49:5a:fa:fd:25:
03:12:99:d5:9e:ae:8f:a0:4b:c1:b0:4d:ab:e6:57:2a:83:7c:
e3:82:85:e8:af:44:bf:79:bd:3a:97:0e:a1:e2:82:0f:90:b3:
09:c1:f8:de:01:8e:13:1e:e7:cc:e1:d1:f2:7d:32:4a:66:a5:
51:47:21:f6:cd:7b:79:40:77:c1:f8:06:b6:16:d7:44:7e:3c:
6f:e0:f6:68:f1:a7:87:f8:65:a5:31:b9:36:e1:58:e1:dc:1b:
3c:cc:33:36:e9:66:08:76:c8:30:e1:75:3b:bf:1b:b0:77:ce:
d5:ad:69:0a:f7:52:da:a4:dc:2d:cd:7c:98:8e:9a:85:d0:5a:
ac:34:a5:69:03:79:88:69:96:21:54:bc:f0:6f:e6:22:02:ff:
f8:57:84:42:c1:1e:55:f5:cc:cc:8f:de:a3:fa:92:32:7c:ac:
ea:19:b2:77:51:a2:63:b4:9e:ac:ad:ed:2b:ad:d6:aa:0f:68:
cb:7b:5c:3d:47:1d:c2:4e:c0:b3:2b:da:82:91:6f:79:98:7b:
63:a8:b7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:18 2026 by rpki-client