Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/2yeC3W-Fi_cJyOdyjgkwSAt1PJI.roa
File: 2yeC3W-Fi_cJyOdyjgkwSAt1PJI.roa (raw, json)
Hash identifier: fQiBkVAigRPmp2gF+hCN3OOwj85mhJYIJxVW4GHbJ0k=
Subject key identifier: DB:27:82:DD:6F:85:8B:F7:09:C8:E7:72:8E:09:30:48:0B:75:3C:92
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019D96740C12F4777FD7BD3914737DB251D6
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/2yeC3W-Fi_cJyOdyjgkwSAt1PJI.roa
Signing time: Thu 16 Apr 2026 13:21:20 +0000
ROA not before: Thu 16 Apr 2026 13:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.119.201.0/24 maxlen: 24
82.119.208.0/23 maxlen: 23
217.22.242.0/23 maxlen: 23
217.22.246.0/23 maxlen: 23
217.22.250.0/23 maxlen: 23
217.22.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:74:0c:12:f4:77:7f:d7:bd:39:14:73:7d:b2:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Apr 16 13:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db2782dd6f858bf709c8e7728e0930480b753c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:60:fc:67:91:8b:d3:df:c5:49:6f:46:e8:
b3:e4:71:54:4f:54:dc:74:81:ab:23:df:8d:5d:5a:
64:66:6c:c7:19:19:67:66:a7:66:79:8a:81:3d:6a:
11:5b:aa:b4:0a:a9:60:66:5e:23:f2:a0:47:fd:db:
8a:d2:97:12:40:32:53:ca:80:99:66:d2:5c:af:c2:
b4:15:f1:cd:7c:90:28:64:25:c6:0e:3f:a9:b9:9d:
84:8b:73:17:ab:21:11:be:30:28:4b:81:29:1c:06:
87:0d:96:88:e6:57:50:87:4b:8a:56:69:61:1b:60:
77:40:93:a3:86:62:4c:85:a1:6b:68:a6:ab:67:95:
86:09:0b:b0:0c:66:34:e6:b7:11:8f:c7:35:17:25:
ba:bd:a6:5e:c5:6a:f7:d3:11:53:ef:cc:50:23:ab:
f5:63:a0:62:03:cd:5b:d9:29:61:47:4e:96:ec:47:
5b:ed:0a:5a:f1:20:08:11:23:ec:5a:ac:5d:06:66:
66:3c:e8:ac:f7:8f:b5:24:d0:33:64:76:b4:87:5c:
a0:10:1c:02:e7:c7:61:09:e8:14:d9:c5:15:22:8d:
0c:1e:2a:1d:a8:38:22:0f:8b:be:23:36:c7:a7:71:
81:44:94:9d:78:52:34:b4:53:47:98:e6:10:98:be:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:27:82:DD:6F:85:8B:F7:09:C8:E7:72:8E:09:30:48:0B:75:3C:92
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/2yeC3W-Fi_cJyOdyjgkwSAt1PJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.201.0/24
82.119.208.0/23
217.22.242.0/23
217.22.246.0/23
217.22.250.0/23
217.22.254.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:f0:aa:b0:97:fc:25:cb:a4:15:81:c1:01:4f:53:cc:93:62:
20:65:f8:28:ac:eb:43:65:49:67:17:76:35:09:cd:2b:14:fb:
fd:90:57:a8:aa:9a:0e:d5:bb:49:cb:79:f1:39:0b:57:64:bc:
31:a2:17:36:b9:5b:92:de:0e:0c:0c:89:45:ea:e5:5f:d2:ba:
2b:71:78:ca:f5:c7:90:d1:f2:4d:fa:ba:1e:38:30:36:1d:53:
f6:f5:5e:d4:b0:ba:5d:00:6a:91:d9:74:c0:50:49:0e:3d:83:
ec:b7:53:9f:2e:0d:d9:f3:1f:25:e3:20:51:c0:08:a2:be:ac:
89:8d:47:dc:a8:69:58:87:e3:82:21:31:7e:5e:dc:eb:0e:f6:
d5:0f:db:79:89:71:09:5d:ba:27:ee:63:83:68:a8:96:3f:d3:
b9:ff:ac:c8:5f:8d:2a:49:17:39:08:95:24:73:66:ec:99:36:
a4:a3:95:83:a4:f9:9c:e9:9c:35:46:e4:84:ee:20:c8:af:0d:
c3:4b:6a:cd:26:80:57:f8:8e:00:25:a4:48:85:8a:86:7f:31:
d2:ac:19:0d:02:f8:5b:88:4e:4f:32:1a:b6:90:f8:d5:ac:67:
ab:66:84:71:5e:50:f4:89:71:8b:fe:4b:9c:9f:85:e5:18:b6:
c8:8f:c5:3d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ2WdAwS9Hd/1705FHN9slHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5
YWY5OWYwHhcNMjYwNDE2MTMyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjI3ODJkZDZmODU4YmY3MDljOGU3NzI4ZTA5MzA0ODBiNzUzYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38Vg/GeRi9PfxUlvRuiz5HFUT1Tc
dIGrI9+NXVpkZmzHGRlnZqdmeYqBPWoRW6q0CqlgZl4j8qBH/duK0pcSQDJTyoCZ
ZtJcr8K0FfHNfJAoZCXGDj+puZ2Ei3MXqyERvjAoS4EpHAaHDZaI5ldQh0uKVmlh
G2B3QJOjhmJMhaFraKarZ5WGCQuwDGY05rcRj8c1FyW6vaZexWr30xFT78xQI6v1
Y6BiA81b2SlhR06W7Edb7Qpa8SAIESPsWqxdBmZmPOis94+1JNAzZHa0h1ygEBwC
58dhCegU2cUVIo0MHiodqDgiD4u+IzbHp3GBRJSdeFI0tFNHmOYQmL4gywIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNsngt1vhYv3Ccjnco4JMEgLdTySMB8GA1UdIwQY
MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt
MzQ2M2I1NmUzNzJjLzEvMnllQzNXLUZpX2NKeU9keWpna3dTQXQxUEpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj
LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUnfJAwQB
UnfQAwQB2RbyAwQB2Rb2AwQB2Rb6AwQB2Rb+MA0GCSqGSIb3DQEBCwUAA4IBAQBK
8Kqwl/wly6QVgcEBT1PMk2IgZfgorOtDZUlnF3Y1Cc0rFPv9kFeoqpoO1btJy3nx
OQtXZLwxohc2uVuS3g4MDIlF6uVf0rorcXjK9ceQ0fJN+roeODA2HVP29V7UsLpd
AGqR2XTAUEkOPYPst1OfLg3Z8x8l4yBRwAiivqyJjUfcqGlYh+OCITF+XtzrDvbV
D9t5iXEJXbon7mODaKiWP9O5/6zIX40qSRc5CJUkc2bsmTako5WDpPmc6Zw1RuSE
7iDIrw3DS2rNJoBX+I4AJaRIhYqGfzHSrBkNAvhbiE5PMhq2kPjVrGerZoRxXlD0
iXGL/kucn4XlGLbIj8U9
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:25 2026 by rpki-client