Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/wYnksyA9j8IE38MK44WdI8QthwY.roa
File: wYnksyA9j8IE38MK44WdI8QthwY.roa (raw, json)
Hash identifier: kUGjESP6hpImIv040oxFMoVXOTG5+DBRjTAXej9uu34=
Subject key identifier: C1:89:E4:B3:20:3D:8F:C2:04:DF:C3:0A:E3:85:9D:23:C4:2D:87:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 019E6ED535E1FF215B49C00CF9C4B43CC653
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/wYnksyA9j8IE38MK44WdI8QthwY.roa
Signing time: Thu 28 May 2026 13:45:27 +0000
ROA not before: Thu 28 May 2026 13:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215147
IP address blocks: 165.217.181.0/24 maxlen: 24
165.217.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:d5:35:e1:ff:21:5b:49:c0:0c:f9:c4:b4:3c:c6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: May 28 13:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c189e4b3203d8fc204dfc30ae3859d23c42d8706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:72:2f:92:7e:b0:cd:ad:49:2b:8b:e9:fd:
61:47:e7:2e:fa:7c:4f:96:5b:61:28:9d:4c:0d:09:
26:f7:66:b2:23:ed:7e:4c:bd:20:6a:83:33:c0:8a:
fa:85:b8:cf:b9:68:64:f3:ea:1b:66:be:12:af:d0:
e3:ce:82:09:a5:9b:eb:c6:3c:df:bb:13:e8:bb:ca:
02:32:98:6a:51:4d:d3:4b:e5:97:e4:a9:2a:80:a7:
93:69:6d:09:af:37:f8:cb:fe:ed:e6:b9:2a:fc:20:
08:03:f9:ee:54:87:1c:70:f5:fe:7d:2d:4e:98:f3:
37:ac:c7:c7:b5:8b:53:54:62:ce:2b:36:f5:4e:0f:
8a:d2:e4:b2:14:69:dc:51:40:97:21:3c:f3:03:82:
87:ee:03:2c:57:27:63:6e:71:38:d0:29:42:ec:c4:
bf:5f:af:83:29:c0:aa:fa:60:e6:31:e5:30:98:2a:
cb:d2:d9:eb:e9:8b:c9:e6:08:06:0c:c2:1b:d6:6a:
69:81:7c:24:48:ff:40:8a:7a:82:43:56:ef:92:a3:
e3:60:9d:e2:69:54:a7:34:53:ab:ab:ff:66:85:f9:
c8:04:3b:77:b1:f0:e5:ce:65:5f:14:55:a4:d1:8d:
d1:c3:b8:9d:30:fb:8f:ba:5f:5f:14:5e:97:61:ec:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:E4:B3:20:3D:8F:C2:04:DF:C3:0A:E3:85:9D:23:C4:2D:87:06
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/wYnksyA9j8IE38MK44WdI8QthwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.217.181.0-165.217.182.255
Signature Algorithm: sha256WithRSAEncryption
b0:16:f9:ea:07:be:f5:0b:1d:d5:fd:a1:f1:4d:d7:e9:42:63:
12:bb:26:12:6e:96:ed:0a:32:89:f0:bb:b6:1b:b8:b2:0c:93:
40:bb:09:e3:0c:0a:d3:03:15:d0:6d:24:70:2c:5f:d9:31:95:
72:13:dd:a8:40:ef:b7:ac:26:8d:e7:23:11:88:c3:26:4c:84:
16:2e:71:70:1e:22:7e:2d:37:78:57:2f:de:48:ed:f1:37:5a:
16:4c:43:1a:2c:a0:55:5e:b6:a8:81:54:23:77:33:0c:3d:12:
8e:45:98:f1:42:84:41:56:f8:01:01:9a:b3:40:79:fc:6e:41:
4d:24:c1:07:43:7b:cc:4b:97:23:bb:09:00:49:68:58:b5:ad:
2d:dc:e4:81:08:3c:b7:a7:c8:98:32:8e:4b:37:bc:2f:c4:2b:
d7:80:1b:29:77:ed:9f:ff:82:b8:a3:18:9e:ca:a4:04:f6:07:
15:27:03:c9:75:c4:49:7e:3b:3b:ae:59:00:a5:7b:e2:73:6d:
b8:72:61:eb:ad:c3:6e:8f:02:28:b5:92:8c:18:70:af:01:e4:
88:76:f2:66:12:a0:38:0b:69:77:b3:d5:92:35:c6:37:9a:21:
52:56:55:be:7b:c8:cb:24:c9:a2:46:e7:20:97:37:98:e8:a7:
74:76:f2:e6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ5u1TXh/yFbScAM+cS0PMZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh
NTZjMDYwHhcNMjYwNTI4MTM0NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTg5ZTRiMzIwM2Q4ZmMyMDRkZmMzMGFlMzg1OWQyM2M0MmQ4NzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzVyL5J+sM2tSSuL6f1hR+cu+nxP
llthKJ1MDQkm92ayI+1+TL0gaoMzwIr6hbjPuWhk8+obZr4Sr9DjzoIJpZvrxjzf
uxPou8oCMphqUU3TS+WX5KkqgKeTaW0Jrzf4y/7t5rkq/CAIA/nuVIcccPX+fS1O
mPM3rMfHtYtTVGLOKzb1Tg+K0uSyFGncUUCXITzzA4KH7gMsVydjbnE40ClC7MS/
X6+DKcCq+mDmMeUwmCrL0tnr6YvJ5ggGDMIb1mppgXwkSP9AinqCQ1bvkqPjYJ3i
aVSnNFOrq/9mhfnIBDt3sfDlzmVfFFWk0Y3Rw7idMPuPul9fFF6XYezYJQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMGJ5LMgPY/CBN/DCuOFnSPELYcGMB8GA1UdIwQY
MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt
NmEzNjcwNWJiYTZmLzEvd1lua3N5QTlqOElFMzhNSzQ0V2RJOFF0aHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm
LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACl2bUD
BACl2bYwDQYJKoZIhvcNAQELBQADggEBALAW+eoHvvULHdX9ofFN1+lCYxK7JhJu
lu0KMonwu7YbuLIMk0C7CeMMCtMDFdBtJHAsX9kxlXIT3ahA77esJo3nIxGIwyZM
hBYucXAeIn4tN3hXL95I7fE3WhZMQxosoFVetqiBVCN3Mww9Eo5FmPFChEFW+AEB
mrNAefxuQU0kwQdDe8xLlyO7CQBJaFi1rS3c5IEIPLenyJgyjks3vC/EK9eAGyl3
7Z//grijGJ7KpAT2BxUnA8l1xEl+OzuuWQCle+JzbbhyYeutw26PAii1kowYcK8B
5Ih28mYSoDgLaXez1ZI1xjeaIVJWVb57yMskyaJG5yCXN5jop3R28uY=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:42 2026 by rpki-client