Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/Wi6JQGs_Ldf3qrnUN5X6AVmLjYA.roa
File: Wi6JQGs_Ldf3qrnUN5X6AVmLjYA.roa (raw, json)
Hash identifier: migROeLkQKBEf1/tSexmPUA5c8Aoev86wffLaM8yG0g=
Subject key identifier: 5A:2E:89:40:6B:3F:2D:D7:F7:AA:B9:D4:37:95:FA:01:59:8B:8D:80
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 019ED5DEE08BED5DECA9EEA451848BC00A82
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/Wi6JQGs_Ldf3qrnUN5X6AVmLjYA.roa
Signing time: Wed 17 Jun 2026 13:56:53 +0000
ROA not before: Wed 17 Jun 2026 13:56:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216129
IP address blocks: 81.30.105.0/24 maxlen: 24
95.215.56.0/24 maxlen: 24
107.161.154.0/24 maxlen: 24
121.127.37.0/24 maxlen: 24
148.253.208.0/24 maxlen: 24
148.253.209.0/24 maxlen: 24
148.253.210.0/24 maxlen: 24
148.253.211.0/24 maxlen: 24
148.253.212.0/24 maxlen: 24
148.253.213.0/24 maxlen: 24
148.253.214.0/24 maxlen: 24
148.253.215.0/24 maxlen: 24
185.28.84.0/24 maxlen: 24
185.28.85.0/24 maxlen: 24
185.56.162.0/24 maxlen: 24
194.164.245.0/24 maxlen: 24
199.83.103.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
203.31.40.0/24 maxlen: 24
2a13:d200::/32 maxlen: 32
2a13:d200:6::/48 maxlen: 48
2a13:d200:7::/48 maxlen: 48
2a13:d200:8::/48 maxlen: 48
2a13:d200:9::/48 maxlen: 48
2a13:d200:10::/48 maxlen: 48
2a13:d200:11::/48 maxlen: 48
2a13:d200:14::/48 maxlen: 48
2a13:d200:15::/48 maxlen: 48
2a13:d201::/48 maxlen: 48
2a13:d201:1::/48 maxlen: 48
2a13:d201:2::/48 maxlen: 48
2a13:d201:3::/48 maxlen: 48
2a13:d201:6::/48 maxlen: 48
2a13:d201:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:de:e0:8b:ed:5d:ec:a9:ee:a4:51:84:8b:c0:0a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Jun 17 13:56:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a2e89406b3f2dd7f7aab9d43795fa01598b8d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:1e:2f:b0:d1:c9:e5:70:fe:db:eb:f0:7c:
83:25:89:20:19:5c:5f:c7:71:1d:3c:8d:dc:a8:e0:
97:fa:60:c8:94:57:65:4d:e0:5b:ec:9c:23:07:b3:
9d:14:9e:01:a6:e5:46:57:ce:50:5c:e3:6f:6b:00:
b0:c7:1e:9e:f0:04:5f:ab:5a:fc:da:ad:c1:7c:a0:
49:b7:64:18:7d:ab:08:71:d5:d1:cb:3e:d2:51:02:
fc:62:97:ed:2b:39:0b:45:25:70:af:98:a1:b1:f2:
43:3d:51:00:c5:6e:0b:78:bb:61:1b:22:ce:65:a0:
d8:d9:7a:4f:bf:49:4f:80:84:fb:32:8a:10:e4:1c:
c7:ae:56:d8:0e:66:fc:e5:43:78:89:14:98:02:4f:
2d:3e:8f:ab:63:23:06:6c:27:12:74:76:28:2f:df:
7b:49:a1:ac:f8:be:b5:ea:57:80:27:c1:39:bc:ce:
ef:4c:0f:9f:21:ea:5b:aa:91:01:e6:73:49:95:ab:
cb:2f:fe:31:25:70:a7:d3:ed:40:85:b7:a2:78:38:
9e:39:a3:90:9b:db:fd:73:16:c7:cd:b6:b8:8c:77:
14:64:a7:b7:d6:df:1c:96:22:2c:9c:4e:87:d9:9c:
ee:92:fa:36:c4:ff:58:a2:90:95:7b:ca:7f:64:7b:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:89:40:6B:3F:2D:D7:F7:AA:B9:D4:37:95:FA:01:59:8B:8D:80
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/Wi6JQGs_Ldf3qrnUN5X6AVmLjYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.105.0/24
95.215.56.0/24
107.161.154.0/24
121.127.37.0/24
148.253.208.0/21
185.28.84.0/23
185.56.162.0/24
194.164.245.0/24
199.83.103.0/24
202.181.148.0/24
202.181.188.0/24
203.31.40.0/24
IPv6:
2a13:d200::-2a13:d201:3:ffff:ffff:ffff:ffff:ffff
2a13:d201:6::/47
Signature Algorithm: sha256WithRSAEncryption
3e:31:27:82:53:eb:5b:da:2b:b0:e8:bd:05:42:cc:c2:08:5c:
c7:c0:7a:e3:ed:77:a6:8f:4a:79:ce:ea:f3:08:e2:00:35:52:
ca:4c:9c:d6:d4:cb:cd:4e:ac:71:d2:55:ba:ef:b5:f8:96:f9:
fc:55:08:e3:81:c3:90:a5:84:43:8e:99:c6:00:85:f9:d7:77:
2e:df:9c:28:88:03:37:4b:29:3f:1b:c9:55:76:08:1a:fc:42:
e5:dd:ae:fc:86:10:67:c2:7a:7b:fc:52:6b:90:69:8a:85:df:
9f:c4:70:05:6b:fc:5e:b4:1f:55:11:af:ea:35:07:12:ad:8f:
7a:09:9c:37:db:85:d6:9f:2d:dd:1d:bb:2a:6f:a8:12:c2:45:
13:d4:b9:c2:e2:45:ac:be:b4:a8:2f:f2:19:d8:05:dd:44:a4:
6a:94:6f:c9:d4:25:be:be:70:dc:c3:43:69:06:72:70:09:15:
4a:b5:47:6e:5d:c6:44:31:a9:24:ad:86:cf:8d:6b:22:d9:77:
fc:c0:cb:c7:7c:81:05:18:58:b4:6b:b5:ed:51:63:95:49:eb:
12:82:09:85:b3:dd:dd:f2:e0:d3:ce:04:85:a0:5c:8f:4c:ab:
a3:6b:67:da:53:a3:e0:09:8e:d4:d2:44:94:0d:e4:4e:c9:60:
df:1c:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 03:35:49 2026 by rpki-client