Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/pywVI8l3o29KPiH-Re7c9ZuCZ2w.roa
File: pywVI8l3o29KPiH-Re7c9ZuCZ2w.roa (raw, json)
Hash identifier: +kRNA90dzYxxcFwFBs6BjqJo8QyGwepjvHGSka8sD4Q=
Subject key identifier: A7:2C:15:23:C9:77:A3:6F:4A:3E:21:FE:45:EE:DC:F5:9B:82:67:6C
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019D305E467C8CD6A542B7CC2F7508479A52
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/pywVI8l3o29KPiH-Re7c9ZuCZ2w.roa
Signing time: Fri 27 Mar 2026 17:36:17 +0000
ROA not before: Fri 27 Mar 2026 17:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
74.124.204.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
93.119.184.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
121.127.48.0/20 maxlen: 24
178.216.184.0/21 maxlen: 24
195.133.202.0/23 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:5e:46:7c:8c:d6:a5:42:b7:cc:2f:75:08:47:9a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Mar 27 17:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a72c1523c977a36f4a3e21fe45eedcf59b82676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:6a:26:20:43:7e:20:af:ca:de:e0:e4:9d:
c4:58:70:42:b5:4d:1e:cb:94:f6:76:d8:9c:7c:cd:
a0:22:27:71:3b:d3:9b:48:fb:91:d4:4a:4f:f5:e9:
0a:c5:ed:0c:13:6c:af:1a:04:ec:8b:fa:44:e0:3d:
f1:96:cf:72:5c:0a:8f:e0:60:c5:f3:e1:25:36:07:
c1:a8:81:d9:d3:67:16:14:c0:53:d3:25:b8:49:1c:
14:6a:96:c6:6c:9a:cb:83:56:5c:d4:b0:e9:7e:7a:
de:8a:1a:ea:41:8a:75:24:e4:ac:df:15:8e:f7:92:
ee:6a:5d:cf:c8:c9:f4:bd:2d:19:e5:da:2e:e4:05:
d6:45:7d:bf:b9:c7:06:a7:47:64:70:5c:1e:f3:12:
a5:e3:f1:74:b8:0a:cc:33:9f:20:80:83:4d:41:c7:
4c:69:f0:af:54:ef:bf:c5:8d:5a:f4:10:92:0a:c5:
be:52:6a:22:10:4b:fc:49:ad:51:e9:eb:8e:9c:6f:
ca:16:43:75:01:da:63:91:77:4c:66:9a:7f:58:16:
4e:6f:26:cc:32:9e:c3:c1:bc:7b:d1:39:c1:64:70:
56:af:a6:4e:03:89:76:e9:a0:75:72:88:26:09:c2:
d8:7d:b7:c7:c7:10:a4:91:8c:84:e0:79:2f:20:53:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:15:23:C9:77:A3:6F:4A:3E:21:FE:45:EE:DC:F5:9B:82:67:6C
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/pywVI8l3o29KPiH-Re7c9ZuCZ2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.9.96.0/20
66.117.8.0/22
74.124.204.0/22
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
93.119.184.0/21
94.26.110.0/23
121.127.48.0/20
178.216.184.0/21
195.133.202.0/23
198.145.112.0/22
205.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
44:cc:ee:bb:d2:2f:f4:f4:52:87:80:43:78:21:fd:33:5a:55:
14:f2:fe:ee:da:c2:ae:ba:59:23:4c:3b:27:46:8f:ce:9a:e9:
e1:32:86:c6:fe:01:03:0f:95:a7:39:c2:b3:ba:3f:be:44:e8:
75:27:a4:57:1f:e9:de:4c:ad:e5:b9:4d:ae:10:1c:79:8a:f1:
a3:d9:1e:b0:97:39:bd:e7:44:91:b9:ef:b3:6d:1c:fe:80:32:
02:eb:82:87:2d:56:52:fc:41:b3:96:0b:d0:b6:c5:f4:25:ad:
70:42:ec:a0:2f:7b:32:75:5d:18:a1:a5:1c:57:7a:f8:19:fa:
75:39:0c:a6:28:2f:59:1c:ca:8b:cc:72:87:d4:7d:17:fa:ec:
92:e2:12:2c:d0:20:95:5d:ae:8a:4f:0f:02:2c:a8:6a:e8:42:
7f:4e:3b:52:e6:80:88:0e:ac:17:fe:47:8c:b2:ea:d3:eb:ea:
c7:f5:c1:85:f8:b5:99:09:41:d1:01:a9:75:47:ea:13:2f:8f:
cd:e6:bb:a6:2f:31:08:96:79:ed:ae:63:e6:b2:f1:15:c7:da:
20:d2:6e:59:e5:94:a8:93:b9:cd:79:20:fc:4f:10:c4:82:70:
6b:28:b8:c7:ac:8b:41:1d:62:4c:8a:65:58:75:03:ef:b0:26:
5f:bb:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 08:37:58 2026 by rpki-client