Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/wjlwL_TATpRkl3IwETvo11EU7l0.roa
File: wjlwL_TATpRkl3IwETvo11EU7l0.roa (raw, json)
Hash identifier: uMoT+Y/uxFQEEAREXENe/LFmTT6LeqDGlq2BaS0K//Y=
Subject key identifier: C2:39:70:2F:F4:C0:4E:94:64:97:72:30:11:3B:E8:D7:51:14:EE:5D
Certificate issuer: /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial: 019F2368ACF09818FA18AFBF9AF99B6243BB
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/wjlwL_TATpRkl3IwETvo11EU7l0.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146943
IP address blocks: 185.131.53.0/24 maxlen: 24
185.131.54.0/24 maxlen: 24
185.131.55.0/24 maxlen: 24
188.241.61.0/24 maxlen: 24
188.241.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ac:f0:98:18:fa:18:af:bf:9a:f9:9b:62:43:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c239702ff4c04e9464977230113be8d75114ee5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:e3:54:ae:0e:16:e6:82:d7:c8:d4:f6:66:
d1:04:98:63:cd:2a:55:82:a6:6f:99:54:be:6d:2d:
47:0d:89:eb:23:ab:d9:0e:24:60:49:fb:69:1e:3a:
2e:cb:27:1d:27:e2:fb:67:b3:21:3d:a6:7d:2e:8e:
42:56:ba:ca:3b:0a:8f:f3:40:b9:f8:09:38:89:fd:
2b:bd:9d:af:d2:b6:11:1b:8d:33:08:57:03:95:44:
7c:ae:cb:bd:96:56:e9:b9:18:06:e7:32:58:c9:3b:
e0:ba:40:28:6b:b6:c9:83:32:11:ba:ae:22:12:d9:
18:6b:97:10:00:0c:69:76:e8:8d:b0:01:b5:66:5f:
0a:eb:e8:cd:b9:02:7b:91:05:b0:99:e6:d7:b7:94:
6e:79:61:cc:a4:67:c6:93:2b:98:1d:6e:c4:fa:2b:
b4:96:14:27:8b:0e:01:6e:96:30:d9:3c:38:43:df:
0f:06:56:8a:f5:d5:c2:b2:4f:35:5c:e2:57:c9:af:
5b:ab:65:0a:7e:40:a4:13:ae:9d:e1:b3:20:1a:a2:
7a:fd:d7:39:05:e5:cf:27:42:b3:83:c0:1b:a8:12:
ff:96:e3:99:17:03:c3:27:e0:d4:ad:cf:23:17:a9:
9f:0f:26:37:20:1b:0a:e7:c8:d5:fd:50:a7:20:71:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:39:70:2F:F4:C0:4E:94:64:97:72:30:11:3B:E8:D7:51:14:EE:5D
X509v3 Authority Key Identifier:
keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/wjlwL_TATpRkl3IwETvo11EU7l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.53.0-185.131.55.255
188.241.61.0/24
188.241.187.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8b:74:3c:57:39:5e:ba:78:7e:2a:89:0f:53:04:53:cb:33:
2d:c4:74:66:d3:ac:41:58:b9:e9:d4:11:01:77:d1:f6:a1:41:
df:46:e8:07:75:23:8e:19:d6:ec:cc:06:ba:fc:c2:fb:a2:fc:
73:c2:12:1a:37:3f:a1:cb:2c:68:03:3c:77:6b:91:1c:76:4a:
cb:7c:8a:c6:fd:c6:46:bd:d9:27:94:6f:0b:18:ab:31:ec:8d:
be:32:ee:b1:07:66:c2:35:01:bf:6e:f2:60:b9:d1:23:1c:fa:
de:de:65:6b:e8:b9:1d:a6:69:e0:d9:e1:74:ff:7b:a4:f9:32:
a7:67:9c:74:01:d2:cd:15:83:38:c3:a1:4a:5f:2c:d0:1c:be:
6f:7d:cd:29:e5:8c:a5:34:dd:b6:63:96:24:4f:4a:a3:13:e3:
7a:28:f6:00:45:9d:8e:fe:8b:3f:22:07:80:b7:b0:13:bf:be:
c9:67:0b:3f:a1:ff:7e:58:3e:c6:71:77:fe:16:f4:98:2d:96:
80:15:b8:cd:91:81:94:34:b7:56:23:cc:89:f7:cd:40:7a:2c:
f2:f4:f4:0d:cb:ba:2f:2f:07:79:60:20:e5:d8:69:ae:6b:a8:
c5:6c:70:01:e6:98:42:9d:5a:88:11:23:40:93:cb:ed:55:48:
ad:b8:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:04 2026 by rpki-client