Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/dw9DFWakqWyGOvPpVMr5LqWzzOU.roa
File: dw9DFWakqWyGOvPpVMr5LqWzzOU.roa (raw, json)
Hash identifier: vpyPXqpUatnsbNFIl69kvcHIfHdO0INTOAaGxcZLEhQ=
Subject key identifier: 77:0F:43:15:66:A4:A9:6C:86:3A:F3:E9:54:CA:F9:2E:A5:B3:CC:E5
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 01A066CFB8F07885ED0DA0BAD47F0A6E335E
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/dw9DFWakqWyGOvPpVMr5LqWzzOU.roa
Signing time: Thu 03 Sep 2026 10:28:04 +0000
ROA not before: Thu 03 Sep 2026 10:28:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34245
IP address blocks: 37.26.72.0/23 maxlen: 23
85.91.0.0/19 maxlen: 24
87.192.80.0/24 maxlen: 24
87.192.220.0/23 maxlen: 24
87.198.0.0/16 maxlen: 24
87.198.204.0/24 maxlen: 24
87.232.32.0/19 maxlen: 24
87.232.128.0/21 maxlen: 24
87.232.134.0/24 maxlen: 24
87.232.193.0/24 maxlen: 24
87.232.224.0/24 maxlen: 24
87.232.250.0/23 maxlen: 24
87.232.252.0/22 maxlen: 24
89.124.242.0/23 maxlen: 24
89.124.244.0/24 maxlen: 24
185.106.88.0/22 maxlen: 24
212.17.32.0/19 maxlen: 24
213.79.32.0/19 maxlen: 24
213.159.128.0/22 maxlen: 24
213.159.129.0/24 maxlen: 24
2a01:148::/29 maxlen: 32
2a01:148::/32 maxlen: 32
2a01:14f::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:cf:b8:f0:78:85:ed:0d:a0:ba:d4:7f:0a:6e:33:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Sep 3 10:28:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=770f431566a4a96c863af3e954caf92ea5b3cce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:c3:00:77:12:b4:aa:c5:11:c6:9b:27:06:
5c:33:43:4a:88:f6:1a:26:28:30:d4:3c:ef:b1:f0:
d7:10:c1:9f:92:8f:72:97:ff:e4:6a:6c:8e:7c:91:
2f:ae:ee:56:48:ca:b6:46:e5:88:87:b8:ba:1b:85:
79:dd:24:14:a9:6f:7a:a9:1e:2f:d6:65:3c:2e:59:
11:e1:ae:6b:d1:a7:3d:3f:6d:01:85:37:38:c3:b4:
d0:28:2d:64:54:8f:bd:e2:68:ba:4a:26:db:e5:57:
35:ee:18:4e:75:00:35:df:3a:10:58:63:99:57:65:
96:ae:e5:ed:a5:cb:70:d0:45:2d:ad:03:40:ba:7a:
c3:a9:09:9d:50:d2:aa:fe:54:8e:0e:40:13:c4:d4:
2a:1a:11:f5:17:ed:f5:50:15:b2:ec:1e:81:d9:68:
96:e7:04:80:96:58:98:44:df:29:66:b0:5f:74:7d:
30:b5:34:55:42:4a:5b:f9:70:02:f8:a6:84:e6:82:
c9:85:fb:b2:5a:de:8f:13:16:3d:23:b5:9a:e7:2f:
83:16:1b:6a:3e:22:7b:83:2e:3a:2c:a0:6c:2f:f5:
44:14:ff:e9:99:7a:a7:eb:eb:60:e4:2d:80:6a:6b:
36:7a:b2:a4:9a:8c:55:5e:82:42:3c:62:05:6b:c7:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:43:15:66:A4:A9:6C:86:3A:F3:E9:54:CA:F9:2E:A5:B3:CC:E5
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/dw9DFWakqWyGOvPpVMr5LqWzzOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.72.0/23
85.91.0.0/19
87.192.80.0/24
87.192.220.0/23
87.198.0.0/16
87.232.32.0/19
87.232.128.0/21
87.232.193.0/24
87.232.224.0/24
87.232.250.0-87.232.255.255
89.124.242.0-89.124.244.255
185.106.88.0/22
212.17.32.0/19
213.79.32.0/19
213.159.128.0/22
IPv6:
2a01:148::/29
Signature Algorithm: sha256WithRSAEncryption
35:58:72:71:da:2d:e7:4b:07:38:73:24:23:c1:69:9e:33:41:
aa:ca:ca:07:98:da:cf:71:6e:84:fe:49:10:8b:65:12:a7:53:
c6:6d:bd:41:2d:fb:f4:f1:ff:2e:de:c5:f6:cd:be:c6:d1:17:
8d:cf:01:9b:b1:25:fd:bd:64:33:b7:a8:76:19:86:b5:4a:ec:
1e:dc:f5:14:2d:80:ed:44:4d:a6:54:b6:75:8c:80:85:79:e1:
18:51:68:5f:78:ca:f2:e1:c8:28:09:52:39:ee:86:47:3c:d2:
0d:45:33:c8:8b:03:5b:64:79:cc:bd:7e:1d:89:7f:b0:c5:5e:
06:57:fb:2d:09:cd:2a:dc:2c:b3:2c:75:93:f0:64:80:e6:10:
ee:e2:14:66:07:47:77:12:86:ed:a5:d7:01:ee:56:ed:61:4a:
f2:fa:b8:22:fe:18:73:1f:f6:42:b4:1e:95:25:50:b3:f8:2f:
87:f2:7d:55:a7:c4:7d:27:35:d5:d3:fe:fd:b2:0b:10:f7:ff:
d4:1d:f6:d6:37:4f:4e:22:60:d9:13:b7:82:7d:e4:34:f8:2b:
8a:ef:b7:55:92:74:eb:34:80:49:89:dd:7b:5d:98:a6:94:62:
9e:fb:a4:45:86:b4:8e:dc:15:16:0a:4e:9d:d9:ec:73:fd:3d:
4c:36:3b:1d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAaBmz7jweIXtDaC61H8KbjNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3
NzdmMDYwHhcNMjYwOTAzMTAyODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzBmNDMxNTY2YTRhOTZjODYzYWYzZTk1NGNhZjkyZWE1YjNjY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8LDAHcStKrFEcabJwZcM0NKiPYa
Jigw1DzvsfDXEMGfko9yl//kamyOfJEvru5WSMq2RuWIh7i6G4V53SQUqW96qR4v
1mU8LlkR4a5r0ac9P20BhTc4w7TQKC1kVI+94mi6Sibb5Vc17hhOdQA13zoQWGOZ
V2WWruXtpctw0EUtrQNAunrDqQmdUNKq/lSODkATxNQqGhH1F+31UBWy7B6B2WiW
5wSAlliYRN8pZrBfdH0wtTRVQkpb+XAC+KaE5oLJhfuyWt6PExY9I7Wa5y+DFhtq
PiJ7gy46LKBsL/VEFP/pmXqn6+tg5C2Aams2erKkmoxVXoJCPGIFa8dCmwIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFHcPQxVmpKlshjrz6VTK+S6ls8zlMB8GA1UdIwQY
MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt
MDYwNWMwODlmYzM4LzEvZHc5REZXYWtxV3lHT3ZQcFZNcjVMcVd6ek9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4
LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBAElGkgD
BAVVWwADBABXwFADBAFXwNwDAwBXxgMEBVfoIAMEA1fogAMEAFfowQMEAFfo4DAL
AwQBV+j6AwMAV+gwDAMEAVl88gMEAFl89AMEArlqWAMEBdQRIAMEBdVPIAMEAtWf
gDANBAIAAjAHAwUDKgEBSDANBgkqhkiG9w0BAQsFAAOCAQEANVhycdot50sHOHMk
I8FpnjNBqsrKB5jaz3FuhP5JEItlEqdTxm29QS379PH/Lt7F9s2+xtEXjc8Bm7El
/b1kM7eodhmGtUrsHtz1FC2A7URNplS2dYyAhXnhGFFoX3jK8uHIKAlSOe6GRzzS
DUUzyIsDW2R5zL1+HYl/sMVeBlf7LQnNKtwssyx1k/BkgOYQ7uIUZgdHdxKG7aXX
Ae5W7WFK8vq4Iv4Ycx/2QrQelSVQs/gvh/J9VafEfSc11dP+/bILEPf/1B321jdP
TiJg2RO3gn3kNPgriu+3VZJ06zSASYnde12YppRinvukRYa0jtwVFgpOndnsc/09
TDY7HQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:45:37 2026 by rpki-client