Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/wx6fgP8IcpV9Wa7rD9wqYgF6OOw.roa
File: wx6fgP8IcpV9Wa7rD9wqYgF6OOw.roa (raw, json)
Hash identifier: 7jyVllqQZoltPjiOZEmXnLkJG64ntD8hgU4CrmVx4p4=
Subject key identifier: C3:1E:9F:80:FF:08:72:95:7D:59:AE:EB:0F:DC:2A:62:01:7A:38:EC
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 019DAFDECA402CD990B79C441291A56AD1F0
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/wx6fgP8IcpV9Wa7rD9wqYgF6OOw.roa
Signing time: Tue 21 Apr 2026 11:48:26 +0000
ROA not before: Tue 21 Apr 2026 11:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57087
IP address blocks: 5.182.128.0/22 maxlen: 24
193.163.40.0/22 maxlen: 24
193.163.42.0/23 maxlen: 24
193.163.42.0/24 maxlen: 24
193.163.43.0/24 maxlen: 24
193.163.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:de:ca:40:2c:d9:90:b7:9c:44:12:91:a5:6a:d1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Apr 21 11:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c31e9f80ff0872957d59aeeb0fdc2a62017a38ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:2f:34:56:64:e5:eb:d0:09:58:cd:11:00:
7f:4c:67:20:6a:23:e2:e7:db:5e:a0:8a:f7:8c:c7:
af:86:47:0d:e1:4e:94:f1:7e:ae:fa:93:49:a5:6f:
1f:ab:ca:8d:6b:94:8a:5e:ad:29:04:08:04:50:5b:
c0:09:f9:23:1c:c3:ce:b3:82:67:b1:0d:ec:ab:b6:
aa:5f:46:5c:3e:f3:17:fc:49:b2:bd:4e:75:a6:18:
f1:41:24:50:84:ed:4e:40:df:70:5f:55:43:48:a0:
7d:47:19:57:46:e3:de:75:d5:5f:91:08:00:cd:ff:
c2:c0:93:e6:cc:f0:90:09:99:fb:b2:aa:3f:f5:4a:
e2:27:9c:9e:83:c9:25:5d:14:ea:c6:6a:5d:65:61:
2b:77:7b:5e:08:d2:02:7a:8b:05:e4:8b:45:61:c3:
20:e6:d5:11:b4:d2:dc:70:eb:8b:c4:f3:ab:95:39:
94:0f:b6:f1:66:22:81:0f:51:26:d0:20:96:b4:8e:
9d:a8:81:ff:bd:40:1d:a2:fe:e0:ee:e5:e4:3f:0e:
71:f0:ad:d9:92:25:1e:ba:76:11:f5:c5:9e:59:b4:
7a:8a:f1:be:69:76:ab:74:3f:ce:66:4a:ac:c5:d4:
ce:6f:21:68:d6:5d:5d:cc:bc:0a:6c:3e:d3:17:f3:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1E:9F:80:FF:08:72:95:7D:59:AE:EB:0F:DC:2A:62:01:7A:38:EC
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/wx6fgP8IcpV9Wa7rD9wqYgF6OOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.128.0/22
193.163.40.0-193.163.44.255
Signature Algorithm: sha256WithRSAEncryption
41:22:27:96:db:56:6e:b5:9b:58:7e:02:e6:01:78:67:ec:24:
46:18:11:3c:02:2c:27:7e:84:4f:31:c5:06:8a:5e:76:87:47:
5a:1a:9f:e7:aa:b8:8f:3e:eb:32:6b:1b:84:42:05:ae:34:7c:
60:18:72:30:c6:fa:30:f1:ef:4b:73:4f:fa:10:0b:a3:0b:9e:
eb:a1:79:58:8d:6e:ad:99:ae:a0:40:13:cb:ea:68:a1:18:bd:
bc:a2:d3:9d:a6:0f:c2:73:1f:ff:51:a4:93:0c:f4:bd:db:e1:
9c:b3:9c:ef:dc:02:ec:e0:57:f4:2a:e6:44:30:f9:49:a0:40:
8e:fc:6c:e3:a3:cb:33:96:e1:08:69:dc:ed:93:39:97:b9:47:
cd:a4:1d:ec:10:8b:b1:d1:53:2e:cc:eb:be:fd:85:18:8e:64:
e1:13:69:db:0e:7c:64:58:e2:c4:2b:6f:de:38:9b:fd:9e:8d:
f6:74:f5:84:d1:e4:6a:db:4a:5d:f9:2e:4c:1d:29:d7:c1:76:
02:7e:3a:2c:82:07:4b:b2:3b:2b:39:df:5c:b4:f4:98:5d:fb:
02:5e:91:50:39:b0:66:ba:33:ba:fc:93:8d:83:8e:6e:95:85:
e6:2f:ee:cb:2c:e4:70:24:76:aa:60:f4:cf:03:21:7a:1f:bd:
3f:37:bf:8b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ2v3spALNmQt5xEEpGlatHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh
ZjUxZDIwHhcNMjYwNDIxMTE0ODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzFlOWY4MGZmMDg3Mjk1N2Q1OWFlZWIwZmRjMmE2MjAxN2EzOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeIvNFZk5evQCVjNEQB/TGcgaiPi
59teoIr3jMevhkcN4U6U8X6u+pNJpW8fq8qNa5SKXq0pBAgEUFvACfkjHMPOs4Jn
sQ3sq7aqX0ZcPvMX/EmyvU51phjxQSRQhO1OQN9wX1VDSKB9RxlXRuPeddVfkQgA
zf/CwJPmzPCQCZn7sqo/9UriJ5yeg8klXRTqxmpdZWErd3teCNICeosF5ItFYcMg
5tURtNLccOuLxPOrlTmUD7bxZiKBD1Em0CCWtI6dqIH/vUAdov7g7uXkPw5x8K3Z
kiUeunYR9cWeWbR6ivG+aXardD/OZkqsxdTObyFo1l1dzLwKbD7TF/MCKwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMMen4D/CHKVfVmu6w/cKmIBejjsMB8GA1UdIwQY
MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt
YTk4OTM1NDVjM2M1LzEvd3g2ZmdQOEljcFY5V2E3ckQ5d3FZZ0Y2T093LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1
LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCBbaAMAwD
BAPBoygDBADBoywwDQYJKoZIhvcNAQELBQADggEBAEEiJ5bbVm61m1h+AuYBeGfs
JEYYETwCLCd+hE8xxQaKXnaHR1oan+equI8+6zJrG4RCBa40fGAYcjDG+jDx70tz
T/oQC6MLnuuheViNbq2ZrqBAE8vqaKEYvbyi052mD8JzH/9RpJMM9L3b4ZyznO/c
AuzgV/Qq5kQw+UmgQI78bOOjyzOW4Qhp3O2TOZe5R82kHewQi7HRUy7M6779hRiO
ZOETadsOfGRY4sQrb944m/2ejfZ09YTR5GrbSl35LkwdKdfBdgJ+OiyCB0uyOys5
31y09Jhd+wJekVA5sGa6M7r8k42Djm6VheYv7sss5HAkdqpg9M8DIXofvT83v4s=
-----END CERTIFICATE-----
Generated at Tue Apr 28 07:25:08 2026 by rpki-client