Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/wNpTaVnPcvSj1HRi75G4KSOnkgs.roa
File: wNpTaVnPcvSj1HRi75G4KSOnkgs.roa (raw, json)
Hash identifier: Qvayj0OyKoed9w2o0NXQ4JAD5fOZl2wDcqSFJsq9rQg=
Subject key identifier: C0:DA:53:69:59:CF:72:F4:A3:D4:74:62:EF:91:B8:29:23:A7:92:0B
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019E3EE85F8DBC2025DAEF6E55814F437CF0
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/wNpTaVnPcvSj1HRi75G4KSOnkgs.roa
Signing time: Tue 19 May 2026 06:24:36 +0000
ROA not before: Tue 19 May 2026 06:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12302
IP address blocks: 46.97.0.0/16 maxlen: 16
46.97.0.0/21 maxlen: 21
46.97.8.0/21 maxlen: 21
46.97.16.0/21 maxlen: 21
46.97.24.0/21 maxlen: 21
46.97.32.0/21 maxlen: 21
46.97.40.0/21 maxlen: 21
46.97.48.0/21 maxlen: 21
46.97.56.0/21 maxlen: 21
46.97.64.0/21 maxlen: 21
46.97.72.0/21 maxlen: 21
46.97.80.0/21 maxlen: 21
46.97.88.0/21 maxlen: 21
46.97.96.0/21 maxlen: 21
46.97.104.0/21 maxlen: 21
46.97.104.0/24 maxlen: 24
46.97.112.0/21 maxlen: 21
46.97.117.0/24 maxlen: 24
46.97.120.0/21 maxlen: 21
46.97.128.0/21 maxlen: 21
46.97.128.0/24 maxlen: 24
46.97.136.0/21 maxlen: 21
46.97.144.0/21 maxlen: 21
46.97.152.0/21 maxlen: 21
46.97.152.0/24 maxlen: 24
46.97.153.0/24 maxlen: 24
46.97.155.0/24 maxlen: 24
46.97.156.0/24 maxlen: 24
46.97.160.0/21 maxlen: 21
46.97.168.0/21 maxlen: 21
46.97.176.0/21 maxlen: 21
46.97.184.0/21 maxlen: 21
46.97.192.0/21 maxlen: 21
46.97.200.0/21 maxlen: 21
46.97.208.0/21 maxlen: 21
46.97.216.0/21 maxlen: 21
46.97.224.0/21 maxlen: 21
46.97.232.0/21 maxlen: 21
46.97.240.0/21 maxlen: 21
46.97.248.0/21 maxlen: 21
81.12.128.0/17 maxlen: 17
81.12.128.0/21 maxlen: 21
81.12.128.0/23 maxlen: 23
81.12.130.0/24 maxlen: 24
81.12.132.0/23 maxlen: 23
81.12.134.0/24 maxlen: 24
81.12.136.0/21 maxlen: 21
81.12.144.0/21 maxlen: 21
81.12.152.0/21 maxlen: 21
81.12.153.0/24 maxlen: 24
81.12.159.0/24 maxlen: 24
81.12.160.0/21 maxlen: 21
81.12.168.0/21 maxlen: 21
81.12.176.0/21 maxlen: 21
81.12.184.0/21 maxlen: 21
81.12.192.0/21 maxlen: 21
81.12.192.0/24 maxlen: 24
81.12.195.0/24 maxlen: 24
81.12.199.0/24 maxlen: 24
81.12.200.0/21 maxlen: 21
81.12.200.0/23 maxlen: 23
81.12.208.0/21 maxlen: 21
81.12.216.0/21 maxlen: 21
81.12.224.0/21 maxlen: 21
81.12.228.0/24 maxlen: 24
81.12.229.0/24 maxlen: 24
81.12.230.0/24 maxlen: 24
81.12.231.0/24 maxlen: 24
81.12.232.0/21 maxlen: 21
81.12.240.0/21 maxlen: 21
81.12.242.0/24 maxlen: 24
81.12.243.0/24 maxlen: 24
81.12.245.0/24 maxlen: 24
81.12.246.0/24 maxlen: 24
81.12.247.0/24 maxlen: 24
81.12.248.0/21 maxlen: 21
91.233.130.0/23 maxlen: 23
136.255.0.0/16 maxlen: 24
136.255.224.0/20 maxlen: 20
136.255.251.0/24 maxlen: 24
165.78.0.0/16 maxlen: 16
165.78.0.0/19 maxlen: 19
165.78.0.0/21 maxlen: 21
165.78.32.0/19 maxlen: 19
165.78.64.0/19 maxlen: 19
165.78.64.0/21 maxlen: 21
165.78.96.0/19 maxlen: 19
165.78.128.0/19 maxlen: 19
165.78.128.0/21 maxlen: 21
165.78.160.0/19 maxlen: 19
165.78.192.0/19 maxlen: 19
165.78.192.0/21 maxlen: 21
165.78.224.0/19 maxlen: 19
185.34.64.0/23 maxlen: 23
192.145.100.0/22 maxlen: 22
213.233.64.0/22 maxlen: 22
213.233.64.0/24 maxlen: 24
213.233.65.0/24 maxlen: 24
213.233.66.0/24 maxlen: 24
213.233.67.0/24 maxlen: 24
213.233.68.0/24 maxlen: 24
213.233.69.0/24 maxlen: 24
213.233.70.0/24 maxlen: 24
213.233.71.0/24 maxlen: 24
213.233.72.0/24 maxlen: 24
213.233.73.0/24 maxlen: 24
213.233.74.0/24 maxlen: 24
213.233.75.0/24 maxlen: 24
213.233.76.0/24 maxlen: 24
213.233.77.0/24 maxlen: 24
213.233.78.0/24 maxlen: 24
213.233.79.0/24 maxlen: 24
213.233.80.0/24 maxlen: 24
213.233.81.0/24 maxlen: 24
213.233.82.0/23 maxlen: 23
213.233.82.0/24 maxlen: 24
213.233.83.0/24 maxlen: 24
213.233.84.0/23 maxlen: 23
213.233.84.0/24 maxlen: 24
213.233.85.0/24 maxlen: 24
213.233.86.0/24 maxlen: 24
213.233.87.0/24 maxlen: 24
213.233.88.0/22 maxlen: 22
213.233.88.0/24 maxlen: 24
213.233.89.0/24 maxlen: 24
213.233.90.0/24 maxlen: 24
213.233.91.0/24 maxlen: 24
213.233.92.0/24 maxlen: 24
213.233.93.0/24 maxlen: 24
213.233.94.0/24 maxlen: 24
213.233.95.0/24 maxlen: 24
213.233.96.0/22 maxlen: 22
213.233.96.0/24 maxlen: 24
213.233.97.0/24 maxlen: 24
213.233.98.0/24 maxlen: 24
213.233.99.0/24 maxlen: 24
213.233.100.0/24 maxlen: 24
213.233.101.0/24 maxlen: 24
213.233.102.0/24 maxlen: 24
213.233.103.0/24 maxlen: 24
213.233.104.0/24 maxlen: 24
213.233.105.0/24 maxlen: 24
213.233.106.0/24 maxlen: 24
213.233.107.0/24 maxlen: 24
213.233.108.0/24 maxlen: 24
213.233.109.0/24 maxlen: 24
213.233.110.0/24 maxlen: 24
213.233.111.0/24 maxlen: 24
213.233.112.0/24 maxlen: 24
213.233.113.0/24 maxlen: 24
213.233.114.0/24 maxlen: 24
213.233.115.0/24 maxlen: 24
213.233.116.0/24 maxlen: 24
213.233.117.0/24 maxlen: 24
213.233.118.0/24 maxlen: 24
213.233.119.0/24 maxlen: 24
213.233.120.0/24 maxlen: 24
213.233.121.0/24 maxlen: 24
213.233.122.0/24 maxlen: 24
213.233.123.0/24 maxlen: 24
213.233.124.0/24 maxlen: 24
213.233.125.0/24 maxlen: 24
213.233.126.0/24 maxlen: 24
213.233.127.0/24 maxlen: 24
217.10.192.0/24 maxlen: 24
217.10.193.0/24 maxlen: 24
217.10.194.0/24 maxlen: 24
217.10.195.0/24 maxlen: 24
217.10.196.0/24 maxlen: 24
217.10.197.0/24 maxlen: 24
217.10.198.0/24 maxlen: 24
217.10.199.0/24 maxlen: 24
217.10.200.0/24 maxlen: 24
217.10.201.0/24 maxlen: 24
217.10.202.0/24 maxlen: 24
217.10.203.0/24 maxlen: 24
217.10.204.0/24 maxlen: 24
217.10.205.0/24 maxlen: 24
217.10.206.0/24 maxlen: 24
217.10.207.0/24 maxlen: 24
217.10.208.0/24 maxlen: 24
217.10.209.0/24 maxlen: 24
217.10.210.0/24 maxlen: 24
217.10.211.0/24 maxlen: 24
217.10.212.0/24 maxlen: 24
217.10.213.0/24 maxlen: 24
217.10.214.0/24 maxlen: 24
217.10.215.0/24 maxlen: 24
217.10.216.0/24 maxlen: 24
217.10.217.0/24 maxlen: 24
217.10.218.0/24 maxlen: 24
217.10.219.0/24 maxlen: 24
217.10.220.0/24 maxlen: 24
217.10.221.0/24 maxlen: 24
217.10.222.0/24 maxlen: 24
217.10.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3e:e8:5f:8d:bc:20:25:da:ef:6e:55:81:4f:43:7c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: May 19 06:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0da536959cf72f4a3d47462ef91b82923a7920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:07:d3:d1:ca:62:c5:32:8f:d4:d7:a5:c9:
7c:71:fc:1c:ab:7b:8d:26:ee:9c:9a:96:67:d3:97:
ba:1c:d0:90:18:39:96:e5:38:2f:71:0b:c1:89:90:
83:51:b3:39:ce:bb:be:22:8a:d7:32:4d:4d:77:a8:
22:a1:81:26:7a:f9:21:c7:a7:dd:a1:2c:1b:5e:72:
d4:f4:fa:77:fb:ac:4e:4d:5d:c7:18:6d:17:b6:48:
af:e8:91:08:98:3f:57:93:37:6a:86:75:2a:f3:ef:
3c:36:01:44:94:65:28:0c:bf:1f:e2:e9:c5:db:a7:
5b:92:f8:70:97:a7:25:56:fa:08:0d:36:aa:1c:f0:
db:5a:73:a0:6c:8a:14:33:1b:32:83:0e:eb:14:29:
43:9c:df:40:39:26:13:7e:bf:59:99:f0:ea:bc:b3:
b0:37:7b:8c:d0:f0:19:e5:dd:03:d0:8e:26:64:d5:
b8:dc:0b:79:12:b0:98:c8:ab:43:0c:af:10:31:77:
e5:1e:6d:bc:84:4b:29:cc:9f:e1:8d:d9:a0:97:6e:
3f:7f:f8:9e:d7:ee:2b:cf:ae:f9:f2:f0:91:00:3d:
68:35:95:72:e2:92:fa:4b:3e:20:69:3b:1e:3b:60:
fd:8e:46:ab:19:16:b8:db:6e:e6:d1:7d:c2:9c:7f:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:53:69:59:CF:72:F4:A3:D4:74:62:EF:91:B8:29:23:A7:92:0B
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/wNpTaVnPcvSj1HRi75G4KSOnkgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.97.0.0/16
81.12.128.0/17
91.233.130.0/23
136.255.0.0/16
165.78.0.0/16
185.34.64.0/23
192.145.100.0/22
213.233.64.0/18
217.10.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:9a:19:f4:bd:3e:db:69:4b:41:0c:2c:e6:76:1d:58:39:68:
dd:af:6c:01:06:bd:de:3a:9b:48:d8:06:8a:76:b4:61:30:c9:
29:e6:66:c6:99:87:0a:1d:b0:cf:80:9e:b1:5d:e4:8a:f2:5a:
4e:fa:59:08:bb:be:d8:3f:23:52:28:62:52:c0:00:51:1e:d1:
78:f2:07:cb:07:85:48:4d:0b:f5:c9:c7:cb:93:3d:15:d9:62:
f9:6e:a4:0c:25:e0:73:27:4d:e5:29:a1:b5:37:1c:79:2a:ec:
f2:e2:7f:50:58:76:1f:af:86:c5:16:8e:ca:8a:7b:16:3d:79:
2c:d6:11:47:70:10:73:fb:22:b9:45:c0:cf:f6:01:dd:1f:b9:
e1:07:43:c6:ae:0a:2f:27:7a:72:42:dd:a5:a1:18:c2:08:03:
d1:4c:54:bb:58:bc:cd:77:42:1a:c1:74:f3:40:eb:9d:ac:01:
33:31:ab:c1:86:7d:17:5d:fe:ff:90:3e:ed:fb:25:d1:dc:11:
02:c6:14:6d:1c:0a:51:66:f3:f8:89:c4:b0:74:5f:e9:49:04:
7d:ac:88:36:4b:fe:a2:2a:17:c4:71:bd:33:ee:99:fa:d5:96:
61:60:28:8f:1d:0d:42:8e:bc:b4:b8:4f:a7:7c:f0:1b:1e:96:
43:6e:a6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:59:00 2026 by rpki-client