Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/WueW6I82GEBJmTpOwdN6my0iBVY.roa
File: WueW6I82GEBJmTpOwdN6my0iBVY.roa (raw, json)
Hash identifier: MkREwPkdmJOow1TbkT+eAldjPSpx7GvsHIK7qit+dc8=
Subject key identifier: 5A:E7:96:E8:8F:36:18:40:49:99:3A:4E:C1:D3:7A:9B:2D:22:05:56
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019E6F948DABD18BBDD350B6248AF9719EC1
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/WueW6I82GEBJmTpOwdN6my0iBVY.roa
Signing time: Thu 28 May 2026 17:14:26 +0000
ROA not before: Thu 28 May 2026 17:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2.56.149.0/24 maxlen: 24
45.66.135.0/24 maxlen: 24
45.67.55.0/24 maxlen: 24
45.82.165.0/24 maxlen: 24
45.85.2.0/24 maxlen: 24
45.90.140.0/24 maxlen: 24
45.128.152.0/24 maxlen: 24
45.134.18.0/24 maxlen: 24
89.31.124.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
147.78.14.0/24 maxlen: 24
152.89.210.0/24 maxlen: 24
185.105.191.0/24 maxlen: 24
185.120.17.0/24 maxlen: 24
185.126.68.0/24 maxlen: 24
185.126.136.0/24 maxlen: 24
185.126.137.0/24 maxlen: 24
185.126.224.0/24 maxlen: 24
185.126.227.0/24 maxlen: 24
185.160.24.0/24 maxlen: 24
185.167.117.0/24 maxlen: 24
185.167.118.0/24 maxlen: 24
185.167.119.0/24 maxlen: 24
185.171.122.0/24 maxlen: 24
185.171.123.0/24 maxlen: 24
185.172.114.0/24 maxlen: 24
185.175.142.0/24 maxlen: 24
185.175.143.0/24 maxlen: 24
185.187.236.0/24 maxlen: 24
188.119.102.0/24 maxlen: 24
192.54.56.0/24 maxlen: 24
192.54.58.0/24 maxlen: 24
192.54.59.0/24 maxlen: 24
193.37.56.0/24 maxlen: 24
193.37.57.0/24 maxlen: 24
193.38.136.0/24 maxlen: 24
194.124.32.0/24 maxlen: 24
194.156.229.0/24 maxlen: 24
2a0c:8a40:2::/48 maxlen: 48
2a0c:8a41:a300::/64 maxlen: 64
2a0c:8a47::/32 maxlen: 32
2a0c:8a47::/36 maxlen: 36
2a0c:8a47:1000::/36 maxlen: 36
2a0c:8a47:2000::/36 maxlen: 36
2a0c:8a47:3000::/36 maxlen: 36
2a0c:8a47:4000::/36 maxlen: 36
2a0c:8a47:5000::/36 maxlen: 36
2a0c:8a47:6000::/36 maxlen: 36
2a0c:8a47:7000::/36 maxlen: 36
2a0c:8a47:8000::/36 maxlen: 36
2a0c:8a47:9000::/36 maxlen: 36
2a0c:8a47:a000::/36 maxlen: 36
2a0c:8a47:b000::/36 maxlen: 36
2a0c:8a47:c000::/36 maxlen: 36
2a0c:8a47:d000::/36 maxlen: 36
2a0c:8a47:e000::/36 maxlen: 36
2a0c:8a47:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:94:8d:ab:d1:8b:bd:d3:50:b6:24:8a:f9:71:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: May 28 17:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ae796e88f36184049993a4ec1d37a9b2d220556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:04:69:d0:a3:8b:a4:14:9a:d8:cd:56:7b:
7d:0f:7a:fd:dc:e0:4f:91:13:eb:02:a3:4b:f9:44:
47:ef:3e:07:a8:9d:97:2e:b7:a5:b2:39:51:9c:e0:
11:01:f4:19:7c:65:cd:9e:79:b1:ed:fe:fc:68:21:
98:1b:3d:63:17:2a:55:2a:ec:51:c0:e6:87:3b:bd:
40:12:bc:18:6c:0e:58:73:6b:f8:6c:dc:49:c3:6e:
9d:3e:c8:11:4e:5f:72:4e:cc:3e:17:d9:9e:5f:c6:
cb:c4:8c:ad:80:78:27:9a:bd:c4:93:c3:4f:ed:cd:
25:ee:75:08:33:47:d9:18:17:a3:54:cb:d3:67:fa:
f0:d1:0a:75:d4:cc:cd:cd:af:42:ed:58:c4:81:23:
71:be:95:02:78:75:97:da:84:f8:42:a9:fd:7c:03:
2d:65:28:14:20:d8:a1:3a:fd:43:39:6e:75:59:0f:
23:b5:ce:bb:6a:c6:d5:67:ca:fd:8e:42:ae:6c:16:
37:f6:b6:b4:92:7a:81:d4:dd:66:e7:c4:97:ee:6f:
c9:0d:48:da:c6:56:ef:62:74:31:9b:5c:85:59:42:
26:8d:c0:64:e1:7e:47:21:03:f6:e0:2b:81:f1:9c:
58:b1:b9:ce:40:2f:10:06:ce:83:75:fc:68:5d:7f:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E7:96:E8:8F:36:18:40:49:99:3A:4E:C1:D3:7A:9B:2D:22:05:56
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/WueW6I82GEBJmTpOwdN6my0iBVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.149.0/24
45.66.135.0/24
45.67.55.0/24
45.82.165.0/24
45.85.2.0/24
45.90.140.0/24
45.128.152.0/24
45.134.18.0/24
89.31.124.0/24
91.220.202.0/23
147.78.14.0/24
152.89.210.0/24
185.105.191.0/24
185.120.17.0/24
185.126.68.0/24
185.126.136.0/23
185.126.224.0/24
185.126.227.0/24
185.160.24.0/24
185.167.117.0-185.167.119.255
185.171.122.0/23
185.172.114.0/24
185.175.142.0/23
185.187.236.0/24
188.119.102.0/24
192.54.56.0/24
192.54.58.0/23
193.37.56.0/23
193.38.136.0/24
194.124.32.0/24
194.156.229.0/24
IPv6:
2a0c:8a40:2::/48
2a0c:8a41:a300::/64
2a0c:8a47::/32
Signature Algorithm: sha256WithRSAEncryption
86:7c:6b:22:a6:78:fa:ed:1b:74:a5:3b:24:8d:28:e9:6b:06:
09:d4:8d:9a:91:cf:15:e2:43:10:fe:97:32:20:c6:5f:29:c6:
ff:41:95:f0:b7:f1:cb:c5:80:d4:bd:c4:2b:98:4a:4e:ea:00:
3a:fb:0f:60:90:ec:d9:b9:f7:c9:fd:da:05:38:11:b0:82:ec:
60:70:80:29:c2:c5:0a:10:57:59:40:8f:45:7b:de:57:3b:10:
02:2a:bb:8d:9b:03:78:77:68:c5:7b:3f:42:86:af:87:f3:6c:
e3:e8:94:da:60:47:30:35:11:4e:c7:03:2a:34:ef:be:c2:82:
05:d6:7c:54:0b:7f:09:a9:53:dd:6a:c2:03:52:a0:3a:89:5e:
f0:33:03:cc:7c:d6:36:6a:17:99:8d:bf:2d:e1:ff:1e:24:c7:
05:2a:66:56:d4:8c:cb:cc:25:0c:18:87:44:68:6a:2f:e2:97:
8b:a0:21:d3:1b:5b:49:2c:00:e2:c7:06:1f:11:94:ec:3f:f6:
ab:3f:e3:f4:6e:0e:45:ce:e6:6a:52:64:f0:cf:3d:8a:cc:92:
2e:d6:c3:5a:32:3c:ab:8c:38:ef:38:0e:70:9c:96:cc:48:01:
00:99:b6:08:37:cf:8f:a0:6e:bb:42:9c:ed:c5:a1:ca:f0:a9:
a9:af:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:49:22 2026 by rpki-client