Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/orAW9dwH2BfX-feVqQzmI9jffgM.roa
File: orAW9dwH2BfX-feVqQzmI9jffgM.roa (raw, json)
Hash identifier: yNQsHaKfb5c+oUhohwjWCGcW4qRd50ep/zTUanwX+MQ=
Subject key identifier: A2:B0:16:F5:DC:07:D8:17:D7:F9:F7:95:A9:0C:E6:23:D8:DF:7E:03
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 01A0346A77277B88E90A96E9BB8E3C785871
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/orAW9dwH2BfX-feVqQzmI9jffgM.roa
Signing time: Mon 24 Aug 2026 15:36:27 +0000
ROA not before: Mon 24 Aug 2026 15:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 37.46.0.0/21 maxlen: 21
51.162.192.0/19 maxlen: 21
51.163.0.0/19 maxlen: 24
51.163.32.0/19 maxlen: 22
80.69.0.0/19 maxlen: 19
89.187.96.0/19 maxlen: 19
185.2.164.0/22 maxlen: 22
195.234.244.0/22 maxlen: 24
2001:1a08::/32 maxlen: 48
2001:1a0a::/32 maxlen: 32
2001:1a0b::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:6a:77:27:7b:88:e9:0a:96:e9:bb:8e:3c:78:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Aug 24 15:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2b016f5dc07d817d7f9f795a90ce623d8df7e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:1b:81:65:43:fb:cb:a6:57:2c:82:bf:bc:
95:f2:5d:3d:90:ab:72:fc:d8:7a:56:39:74:a4:27:
5c:f2:38:ae:91:09:20:e3:12:1d:75:c2:b8:78:2b:
7e:4c:34:0e:26:ee:99:44:c5:89:f8:65:3b:71:57:
9a:58:1c:93:b0:09:35:7d:cb:49:d7:13:3f:35:04:
5c:81:5c:ee:f8:b8:0c:83:6b:85:f4:8a:75:8c:24:
0a:1f:9d:7a:f7:40:3d:ee:1b:ed:b0:63:e7:59:18:
1d:e5:61:95:78:17:0d:e6:74:23:34:73:cb:a1:1a:
c1:f0:e9:9a:a9:e1:8d:30:e9:23:33:d0:c2:e9:8b:
c8:11:61:64:ba:4e:4b:64:53:2e:73:b5:d5:c0:10:
8e:d6:18:56:95:3b:f1:8b:a4:06:b1:30:9a:78:7c:
17:f6:07:f8:b3:1d:47:3c:29:ce:66:91:cd:df:b0:
4c:37:d4:27:97:e2:4a:1a:dc:33:1a:90:92:f8:3c:
c9:8d:c9:43:dd:22:c3:49:ea:a0:1f:d2:33:17:dc:
13:d7:c6:95:b0:bc:a3:ba:3c:11:77:19:29:50:77:
86:9e:49:76:9c:40:de:f4:4e:37:50:74:11:7e:4e:
62:4c:98:32:34:20:ca:fd:62:0f:35:4f:5a:74:77:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B0:16:F5:DC:07:D8:17:D7:F9:F7:95:A9:0C:E6:23:D8:DF:7E:03
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/orAW9dwH2BfX-feVqQzmI9jffgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.0.0/21
51.162.192.0/19
51.163.0.0/18
80.69.0.0/19
89.187.96.0/19
185.2.164.0/22
195.234.244.0/22
IPv6:
2001:1a08::/32
2001:1a0a::/31
Signature Algorithm: sha256WithRSAEncryption
88:53:6d:6e:3e:f2:9d:c7:2b:4b:88:08:25:1e:c1:89:8e:21:
19:5e:c9:2f:3e:d4:40:7d:30:22:7e:47:47:25:99:83:8b:b2:
c6:fb:53:22:44:4b:a3:3c:81:11:04:2c:30:65:91:5b:b8:f7:
7a:3f:00:5a:71:de:1c:2f:64:24:cd:0c:36:38:52:f4:bb:4d:
7f:b9:02:05:82:7d:e1:19:d4:f7:f1:42:27:1e:20:84:b8:53:
36:6e:20:f5:4e:e3:37:c0:be:97:05:6c:a5:13:60:97:87:98:
19:a0:7a:c7:c6:5c:f6:75:aa:54:7d:2e:e4:71:ae:c0:c1:be:
9e:3f:d1:dc:30:c8:73:39:67:c5:5a:eb:a3:1c:29:f6:e3:6a:
e2:9d:64:a2:56:b0:3d:37:6d:8d:7e:ec:aa:d5:84:4e:07:ca:
55:17:11:01:9b:7b:40:df:81:f2:a1:c0:4c:18:7a:d1:2b:fe:
d5:b5:43:7b:1c:b4:e9:e4:8f:4f:56:5c:de:ec:f9:af:f2:00:
cf:46:1d:80:34:aa:52:62:90:23:c6:42:ea:95:d2:bf:41:1a:
aa:59:a6:34:89:89:7b:d5:07:9b:64:dd:bc:5a:c2:b1:be:b9:
7d:3d:8d:74:cd:c7:0b:c5:0b:e2:a0:6f:91:0d:60:dc:c0:6b:
5b:9f:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:49:35 2026 by rpki-client