Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Wk_tHv_Q2J-KR1xJ-Z-Iy3SV_uo.roa
File: Wk_tHv_Q2J-KR1xJ-Z-Iy3SV_uo.roa (raw, json)
Hash identifier: 58PIUJgDY4Md7RFDg58vKTzVyKwlD7GKunnyX3sVfSo=
Subject key identifier: 5A:4F:ED:1E:FF:D0:D8:9F:8A:47:5C:49:F9:9F:88:CB:74:95:FE:EA
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019DB3B6FB73D2DB76CB2D25B40E1936AF44
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Wk_tHv_Q2J-KR1xJ-Z-Iy3SV_uo.roa
Signing time: Wed 22 Apr 2026 05:43:26 +0000
ROA not before: Wed 22 Apr 2026 05:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48040
IP address blocks: 31.172.65.0/24 maxlen: 24
81.85.79.0/24 maxlen: 24
89.127.193.0/24 maxlen: 24
89.127.201.0/24 maxlen: 24
89.127.204.0/24 maxlen: 24
89.127.207.0/24 maxlen: 24
162.248.163.0/24 maxlen: 24
185.21.11.0/24 maxlen: 24
194.154.25.0/24 maxlen: 24
194.154.31.0/24 maxlen: 24
199.68.198.0/24 maxlen: 24
199.68.199.0/24 maxlen: 24
213.239.158.0/24 maxlen: 24
2a02:6b40:800e::/48 maxlen: 48
2a02:6b40:800f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:b6:fb:73:d2:db:76:cb:2d:25:b4:0e:19:36:af:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Apr 22 05:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a4fed1effd0d89f8a475c49f99f88cb7495feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:a0:58:53:b3:e5:56:f4:dd:e8:23:f7:58:
90:3d:e6:45:d4:d4:02:52:60:04:dc:f8:02:f4:8d:
98:68:5c:73:55:61:28:b5:0a:72:29:ea:3e:93:aa:
07:ac:d8:f3:1c:ca:29:da:85:f9:65:8d:cc:64:2a:
16:af:bf:7f:3d:cb:65:96:12:21:48:80:82:7e:1e:
0d:eb:a3:39:81:ee:ed:99:14:20:f0:2e:a6:53:c3:
a0:40:d5:6e:d6:af:18:45:97:43:3a:bc:a3:bf:a6:
9d:91:5a:8a:9c:b9:df:cf:d0:8a:4a:cb:69:4b:2b:
a6:8a:06:bd:cb:20:90:b8:96:be:f1:a1:29:d5:14:
63:87:fe:ce:a6:f6:df:6e:1a:db:22:1c:f7:61:8e:
6d:96:6d:b6:c0:ed:5b:05:fe:95:94:b2:1c:8f:b1:
c4:a4:b5:38:93:8e:7e:93:69:eb:d7:e3:c1:81:4c:
10:e2:69:74:0c:9f:fb:d1:a5:fc:a5:5b:bb:a7:46:
6b:52:0d:51:09:b0:50:41:4f:da:7e:b1:b6:93:55:
1e:98:5b:51:ad:82:0b:4a:44:c7:c7:81:30:7e:e2:
89:1a:27:ae:53:ce:83:3a:c5:a1:00:66:bb:41:de:
95:72:83:3a:4d:89:75:a2:0e:3c:ca:d7:73:b1:71:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:ED:1E:FF:D0:D8:9F:8A:47:5C:49:F9:9F:88:CB:74:95:FE:EA
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Wk_tHv_Q2J-KR1xJ-Z-Iy3SV_uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.65.0/24
81.85.79.0/24
89.127.193.0/24
89.127.201.0/24
89.127.204.0/24
89.127.207.0/24
162.248.163.0/24
185.21.11.0/24
194.154.25.0/24
194.154.31.0/24
199.68.198.0/23
213.239.158.0/24
IPv6:
2a02:6b40:800e::/47
Signature Algorithm: sha256WithRSAEncryption
77:5d:04:67:37:6a:e3:6c:f6:57:0a:ec:e8:dc:2f:a2:68:ec:
f2:3e:33:42:44:fe:ff:3f:51:c0:59:a7:c9:11:c6:88:e4:35:
c7:17:08:58:4f:7c:91:a4:15:5a:70:ff:a4:4a:52:90:83:c6:
be:20:01:e1:10:e7:ae:5b:40:a3:c7:b4:96:5a:7b:fa:3d:23:
7f:9b:91:f9:4b:68:5d:75:1e:2c:6d:35:02:05:86:88:84:83:
bc:1b:f5:16:17:25:78:fa:5f:58:8d:06:26:7b:28:df:5e:a2:
f9:b8:aa:a4:73:1e:b6:75:97:49:e4:27:75:a2:d9:0f:54:78:
64:0f:5a:62:d5:7c:c9:f1:29:01:31:09:33:be:0b:7a:99:38:
1d:fc:2a:8c:8d:fd:b6:77:01:07:a4:ae:ee:62:66:d7:d1:22:
5b:aa:97:8b:33:4c:d3:fe:83:e1:9b:bb:10:e4:7e:1b:4b:c6:
c6:fa:df:de:09:5c:a6:b2:77:c4:d7:1a:a3:0c:1a:78:69:5b:
66:03:ea:8e:e5:ee:e5:62:c6:6b:72:37:3e:6b:6b:3e:11:44:
4a:89:06:1e:ad:90:a9:ed:37:d4:20:9d:3b:d1:82:d3:c1:7a:
f1:90:d1:24:2a:a7:36:8c:4c:c2:8b:a8:f7:c3:e5:cd:96:d1:
64:46:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:20:16 2026 by rpki-client