Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/WWv52tGFO2kMcEewV5qZD_WPG3M.roa
File: WWv52tGFO2kMcEewV5qZD_WPG3M.roa (raw, json)
Hash identifier: PbPZumBcrFR7Yo2JXGB7UlvnkomjihCztTIqDqfXbrc=
Subject key identifier: 59:6B:F9:DA:D1:85:3B:69:0C:70:47:B0:57:9A:99:0F:F5:8F:1B:73
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 01A0D83432A8CEC9315BBC3693D9D51DD599
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/WWv52tGFO2kMcEewV5qZD_WPG3M.roa
Signing time: Fri 25 Sep 2026 10:54:54 +0000
ROA not before: Fri 25 Sep 2026 10:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6698
IP address blocks: 31.42.184.0/22 maxlen: 24
45.11.56.0/22 maxlen: 24
45.11.57.0/24 maxlen: 24
45.12.0.0/22 maxlen: 24
45.12.0.0/24 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.2.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
45.134.172.0/22 maxlen: 24
45.134.173.0/24 maxlen: 24
62.182.80.0/21 maxlen: 24
62.182.84.0/24 maxlen: 24
82.158.194.0/24 maxlen: 24
85.137.49.0/24 maxlen: 24
85.137.50.0/24 maxlen: 24
85.137.57.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
91.218.48.0/22 maxlen: 24
91.222.172.0/22 maxlen: 24
91.234.198.0/23 maxlen: 24
128.0.104.0/24 maxlen: 24
152.89.60.0/22 maxlen: 24
176.97.112.0/20 maxlen: 24
176.97.112.0/23 maxlen: 24
176.97.114.0/24 maxlen: 24
176.97.115.0/24 maxlen: 24
176.97.122.0/23 maxlen: 23
176.97.124.0/24 maxlen: 24
176.119.24.0/21 maxlen: 24
176.119.30.0/24 maxlen: 24
176.119.31.0/24 maxlen: 24
185.66.88.0/22 maxlen: 24
185.66.91.0/24 maxlen: 24
185.254.196.0/22 maxlen: 24
185.254.198.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
193.23.181.0/24 maxlen: 24
194.42.204.0/22 maxlen: 24
194.42.204.0/24 maxlen: 24
194.42.205.0/24 maxlen: 24
195.26.86.0/23 maxlen: 24
195.66.210.0/24 maxlen: 24
195.66.212.0/22 maxlen: 24
195.128.248.0/23 maxlen: 24
195.160.220.0/22 maxlen: 24
212.86.116.0/22 maxlen: 24
212.86.116.0/24 maxlen: 24
212.86.118.0/23 maxlen: 23
212.86.124.0/24 maxlen: 24
2a09:2dc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:34:32:a8:ce:c9:31:5b:bc:36:93:d9:d5:1d:d5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Sep 25 10:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=596bf9dad1853b690c7047b0579a990ff58f1b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:61:dc:53:93:a7:21:03:44:ce:ac:ee:f7:
e2:aa:62:81:3e:e7:d4:7a:e8:00:3c:e5:3e:6f:f7:
9a:af:98:8e:49:15:be:6c:85:5d:f2:e5:67:a7:db:
85:e6:2a:35:5b:f9:c0:6e:79:1f:6f:01:cb:4c:b1:
3a:7e:b5:f7:ad:49:47:05:8a:f8:fb:2f:d9:ed:18:
7a:0f:5c:c3:90:46:b7:56:da:9b:97:02:5b:fd:4f:
0b:14:3c:bd:0e:f9:ce:e0:68:af:36:5a:30:1d:5a:
6a:28:63:16:d6:73:f3:90:e2:0a:a7:5b:ef:5b:5e:
76:69:94:d1:17:38:95:d2:67:f6:bc:8d:6c:a2:e0:
2c:ed:26:ec:6f:8a:81:7a:5c:3c:30:26:40:59:17:
7b:a2:2f:58:a6:6c:8e:93:8e:2c:b6:bd:0e:47:6a:
17:69:ea:bd:52:3e:22:c6:a1:78:b2:64:9e:4d:f1:
71:ba:5d:83:55:6f:8d:5a:e7:5c:30:70:55:26:7e:
47:1d:a1:0a:ed:24:c4:b5:d3:63:6e:fd:d2:96:0a:
49:fc:79:9e:43:49:a4:ea:2c:ae:07:04:5d:2e:28:
65:87:81:b4:06:59:73:9e:0c:bc:ca:54:43:bd:0c:
7d:e4:ce:cf:8a:99:5e:37:1c:d3:d8:d6:fe:0b:43:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:F9:DA:D1:85:3B:69:0C:70:47:B0:57:9A:99:0F:F5:8F:1B:73
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/WWv52tGFO2kMcEewV5qZD_WPG3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.184.0/22
45.11.56.0/22
45.12.0.0/22
45.134.172.0/22
62.182.80.0/21
82.158.194.0/24
85.137.49.0-85.137.50.255
85.137.57.0/24
91.208.115.0/24
91.218.48.0/22
91.222.172.0/22
91.234.198.0/23
128.0.104.0/24
152.89.60.0/22
176.97.112.0/20
176.119.24.0/21
185.66.88.0/22
185.254.196.0/22
193.23.181.0/24
194.42.204.0/22
195.26.86.0/23
195.66.210.0/24
195.66.212.0/22
195.128.248.0/23
195.160.220.0/22
212.86.116.0/22
212.86.124.0/24
IPv6:
2a09:2dc2::/32
Signature Algorithm: sha256WithRSAEncryption
80:03:ae:ce:f8:06:c7:c9:27:95:b0:82:64:8d:35:85:54:fa:
6d:34:1f:a4:94:eb:f1:92:2e:2d:75:88:57:a3:96:f7:57:b9:
d6:39:bf:fd:0d:d4:c9:65:4f:5a:74:d9:33:e7:a2:1e:9a:b1:
17:57:45:7b:b5:8f:7a:36:20:89:2e:2b:f2:65:82:15:d5:43:
72:65:1f:6d:f1:9e:7f:f4:fc:d2:55:89:7d:36:8a:86:f9:af:
5d:60:e3:aa:c8:ba:99:e5:67:6c:d4:7f:89:d8:11:f4:72:d5:
74:26:3d:fa:88:1c:51:a3:96:c0:6b:38:42:bc:f6:58:d1:be:
68:6f:eb:a5:d1:54:15:5b:12:73:c7:39:cd:0a:91:0a:d6:d6:
ba:c0:90:1a:c3:56:43:b6:83:2a:25:a7:78:e2:ff:ea:4a:22:
9b:91:68:dc:b7:a0:9b:b2:15:64:b4:55:83:d4:0f:7c:ff:91:
da:d1:13:08:9a:5f:4b:e9:99:eb:a6:53:84:27:32:b1:06:2f:
f8:bc:4c:63:8f:1e:3b:7b:02:ea:0c:cd:2c:d3:38:2c:9b:a1:
9e:90:06:04:19:50:57:73:6a:1a:fd:c7:f6:93:7f:09:05:7a:
d2:57:4c:6b:14:19:f3:74:48:75:fb:28:b1:6e:d0:9f:a2:f7:
98:b9:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:21 2026 by rpki-client