Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/w_0FUO6PVfHDWxWyUSsrIkxbdM8.roa
File: w_0FUO6PVfHDWxWyUSsrIkxbdM8.roa (raw, json)
Hash identifier: jFgnrNVIYXYVywvyG4XzGQRIEIm59a6cbEHdSQPGz9E=
Subject key identifier: C3:FD:05:50:EE:8F:55:F1:C3:5B:15:B2:51:2B:2B:22:4C:5B:74:CF
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 019DB04469B6BD6090F7789A50DB6A6A91AA
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/w_0FUO6PVfHDWxWyUSsrIkxbdM8.roa
Signing time: Tue 21 Apr 2026 13:39:26 +0000
ROA not before: Tue 21 Apr 2026 13:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41960
IP address blocks: 2.56.216.0/22 maxlen: 24
5.183.132.0/22 maxlen: 24
37.148.184.0/21 maxlen: 24
45.10.126.0/23 maxlen: 24
45.95.252.0/22 maxlen: 24
45.129.144.0/22 maxlen: 24
45.140.156.0/22 maxlen: 24
45.151.116.0/22 maxlen: 24
77.73.224.0/21 maxlen: 24
85.184.8.0/21 maxlen: 24
91.202.210.0/24 maxlen: 24
93.188.64.0/22 maxlen: 24
94.142.253.0/24 maxlen: 24
151.248.16.0/22 maxlen: 24
171.22.176.0/22 maxlen: 24
185.112.73.0/24 maxlen: 24
185.116.12.0/22 maxlen: 24
185.234.152.0/23 maxlen: 24
185.234.154.0/24 maxlen: 24
185.239.168.0/23 maxlen: 24
185.239.170.0/24 maxlen: 24
185.249.40.0/22 maxlen: 24
185.249.136.0/22 maxlen: 24
185.251.152.0/22 maxlen: 24
185.253.48.0/22 maxlen: 24
194.61.84.0/24 maxlen: 24
194.61.86.0/24 maxlen: 24
195.184.86.0/23 maxlen: 24
195.184.90.0/23 maxlen: 24
195.238.86.0/23 maxlen: 24
212.18.105.0/24 maxlen: 24
212.19.192.0/19 maxlen: 24
212.26.192.0/19 maxlen: 24
212.57.48.0/20 maxlen: 24
213.156.0.0/20 maxlen: 24
213.173.56.0/22 maxlen: 24
217.8.96.0/20 maxlen: 24
2001:6e0::/29 maxlen: 48
2a02:690::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:44:69:b6:bd:60:90:f7:78:9a:50:db:6a:6a:91:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Apr 21 13:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3fd0550ee8f55f1c35b15b2512b2b224c5b74cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:f6:3b:92:4c:e2:7e:7d:85:48:85:96:c1:
86:f8:11:41:e8:17:ca:fb:82:dc:08:09:65:95:03:
89:84:a3:b6:ae:59:90:2f:b6:7e:af:3f:e4:55:ae:
1b:d5:f0:1d:e9:ad:e0:02:1b:a4:e7:74:5f:7e:1b:
52:96:ba:3b:9d:f6:6b:2e:ed:c8:e3:55:c1:6a:9e:
e8:37:57:df:f3:e3:3d:a0:3b:9f:e2:3e:10:7a:8b:
f2:8a:94:a5:7c:1a:22:ca:57:11:c7:ed:93:bc:04:
f4:5d:9d:63:f4:c8:1c:df:3a:e1:bb:15:e9:af:31:
af:08:95:cd:06:17:63:a3:76:64:73:2c:e0:64:8d:
99:42:e3:39:52:6c:f1:11:40:04:93:9b:8e:2e:e4:
8e:89:e9:25:a3:62:ef:cf:53:d0:35:28:47:23:b8:
a4:cf:9d:e0:7c:e5:ec:74:95:83:61:8a:4a:46:b6:
88:f6:5e:f7:46:98:b6:ca:fd:5a:87:a4:de:ca:35:
71:03:a7:f4:40:a1:be:52:6c:fa:c6:d2:c2:b2:42:
b0:d9:d4:55:b5:45:fc:07:c7:0f:98:a8:36:73:2e:
6d:ef:f3:7d:90:fc:49:75:87:78:7b:bc:d6:8b:b0:
77:dc:45:53:44:b8:af:a0:0f:cb:93:4e:66:39:86:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:05:50:EE:8F:55:F1:C3:5B:15:B2:51:2B:2B:22:4C:5B:74:CF
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/w_0FUO6PVfHDWxWyUSsrIkxbdM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.216.0/22
5.183.132.0/22
37.148.184.0/21
45.10.126.0/23
45.95.252.0/22
45.129.144.0/22
45.140.156.0/22
45.151.116.0/22
77.73.224.0/21
85.184.8.0/21
91.202.210.0/24
93.188.64.0/22
94.142.253.0/24
151.248.16.0/22
171.22.176.0/22
185.112.73.0/24
185.116.12.0/22
185.234.152.0-185.234.154.255
185.239.168.0-185.239.170.255
185.249.40.0/22
185.249.136.0/22
185.251.152.0/22
185.253.48.0/22
194.61.84.0/24
194.61.86.0/24
195.184.86.0/23
195.184.90.0/23
195.238.86.0/23
212.18.105.0/24
212.19.192.0/19
212.26.192.0/19
212.57.48.0/20
213.156.0.0/20
213.173.56.0/22
217.8.96.0/20
IPv6:
2001:6e0::/29
2a02:690::/29
Signature Algorithm: sha256WithRSAEncryption
48:10:be:18:07:f8:52:17:a4:43:57:b7:fe:b0:c1:43:22:5c:
dc:2f:84:a5:fd:39:ff:ff:79:29:8a:48:4d:c5:ff:e4:33:ba:
21:f4:65:e8:ab:9e:2f:84:86:7e:09:4f:cb:5c:c7:65:2f:36:
a0:77:fb:7f:a8:1b:04:1c:3a:7e:fa:6a:d9:9e:c5:a2:34:1a:
18:eb:08:26:76:bf:b7:50:27:20:3a:da:f6:ee:27:5e:56:1e:
9c:ea:0b:dc:10:0c:00:17:c1:d6:81:99:db:d8:e7:e6:71:06:
0d:0e:7f:fb:92:84:33:49:fd:f7:4f:d9:86:aa:3c:e0:77:b3:
d2:d6:30:b9:c0:95:95:9c:23:29:85:41:77:ce:da:15:b3:ac:
4d:25:a0:39:f5:77:47:2f:31:c7:cd:35:67:f0:9b:40:b7:c5:
c8:fd:cb:51:3a:ae:7f:94:e6:ba:27:cf:4c:9b:fd:93:78:33:
ef:26:44:71:d8:cc:38:57:7e:dd:82:8c:1e:ba:27:e0:e4:d2:
a9:ed:33:e6:bd:c9:0a:40:6c:4e:5c:6f:c1:b5:e5:55:d4:4a:
bf:b2:c0:9e:30:db:03:98:9d:e2:f2:cc:da:28:d2:0e:f6:48:
30:26:b9:c2:df:00:6a:e3:0e:0d:8f:2d:4f:d5:75:44:09:5e:
09:36:56:10
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISAZ2wRGm2vWCQ93iaUNtqapGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYTEyMjA3YWY0ZDE4NmM0NGRhMjUzM2MwYjhmMWZkMWY1
NWQ4ZGIwHhcNMjYwNDIxMTMzOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2ZkMDU1MGVlOGY1NWYxYzM1YjE1YjI1MTJiMmIyMjRjNWI3NGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUT2O5JM4n59hUiFlsGG+BFB6BfK
+4LcCAlllQOJhKO2rlmQL7Z+rz/kVa4b1fAd6a3gAhuk53RffhtSlro7nfZrLu3I
41XBap7oN1ff8+M9oDuf4j4QeovyipSlfBoiylcRx+2TvAT0XZ1j9Mgc3zrhuxXp
rzGvCJXNBhdjo3ZkcyzgZI2ZQuM5UmzxEUAEk5uOLuSOieklo2Lvz1PQNShHI7ik
z53gfOXsdJWDYYpKRraI9l73Rpi2yv1ah6TeyjVxA6f0QKG+Umz6xtLCskKw2dRV
tUX8B8cPmKg2cy5t7/N9kPxJdYd4e7zWi7B33EVTRLivoA/Lk05mOYZynwIDAQAB
o4IDAzCCAv8wHQYDVR0OBBYEFMP9BVDuj1Xxw1sVslErKyJMW3TPMB8GA1UdIwQY
MBaAFNuhIgevTRhsRNolM8C48f0fVdjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgt
MTJiMmJjNTgwNTNhLzEvd18wRlVPNlBWZkhEV3hXeVVTc3JJa3hiZE04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgtMTJiMmJjNTgwNTNh
LzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCB6QQCAAEwgeID
BAICONgDBAIFt4QDBAMllLgDBAEtCn4DBAItX/wDBAItgZADBAItjJwDBAItl3QD
BANNSeADBANVuAgDBABbytIDBAJdvEADBABejv0DBAKX+BADBAKrFrADBAC5cEkD
BAK5dAwwDAMEA7nqmAMEALnqmjAMAwQDue+oAwQAue+qAwQCufkoAwQCufmIAwQC
ufuYAwQCuf0wAwQAwj1UAwQAwj1WAwQBw7hWAwQBw7haAwQBw+5WAwQA1BJpAwQF
1BPAAwQF1BrAAwQE1DkwAwQE1ZwAAwQC1a04AwQE2QhgMBQEAgACMA4DBQMgAQbg
AwUDKgIGkDANBgkqhkiG9w0BAQsFAAOCAQEASBC+GAf4UhekQ1e3/rDBQyJc3C+E
pf05//95KYpITcX/5DO6IfRl6KueL4SGfglPy1zHZS82oHf7f6gbBBw6fvpq2Z7F
ojQaGOsIJna/t1AnIDra9u4nXlYenOoL3BAMABfB1oGZ29jn5nEGDQ5/+5KEM0n9
90/Zhqo84Hez0tYwucCVlZwjKYVBd87aFbOsTSWgOfV3Ry8xx801Z/CbQLfFyP3L
UTquf5TmuifPTJv9k3gz7yZEcdjMOFd+3YKMHron4OTSqe0z5r3JCkBsTlxvwbXl
VdRKv7LAnjDbA5id4vLM2ijSDvZIMCa5wt8AauMODY8tT9V1RAleCTZWEA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:54:41 2026 by rpki-client