Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/pf5ZfCxpiTzjBd2ADxzhPYE-eMk.roa
File: pf5ZfCxpiTzjBd2ADxzhPYE-eMk.roa (raw, json)
Hash identifier: XL9drH/BbnMv+HkuzEZvAtq1EYIDfm5AVCdFDeA1zjo=
Subject key identifier: A5:FE:59:7C:2C:69:89:3C:E3:05:DD:80:0F:1C:E1:3D:81:3E:78:C9
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019D96036FE8F96AA99EF8A53AE550AFC9FF
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/pf5ZfCxpiTzjBd2ADxzhPYE-eMk.roa
Signing time: Thu 16 Apr 2026 11:18:20 +0000
ROA not before: Thu 16 Apr 2026 11:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 82.119.200.0/24 maxlen: 24
82.119.202.0/24 maxlen: 24
217.22.240.0/23 maxlen: 23
217.22.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:03:6f:e8:f9:6a:a9:9e:f8:a5:3a:e5:50:af:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Apr 16 11:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5fe597c2c69893ce305dd800f1ce13d813e78c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:59:35:e8:ac:14:fb:2d:88:3b:cb:27:17:
17:95:93:d1:c3:83:e2:26:5b:df:5b:2c:00:77:69:
65:d2:2f:fe:ae:01:45:10:66:24:a9:7e:2f:2f:67:
b3:a2:cd:e3:85:70:8d:3a:32:82:12:25:00:94:bc:
f4:69:f4:71:36:9a:05:30:ff:6e:23:d4:95:c4:29:
61:fa:1a:0a:34:c1:58:d8:09:fe:d2:42:46:07:d1:
d3:b8:84:da:de:af:2e:22:e3:b6:fc:c1:6f:e2:c4:
a7:27:73:ce:14:a5:75:a1:b7:c9:cd:65:a8:8d:75:
56:39:67:c4:c7:b7:82:65:f2:27:3e:40:da:48:8e:
fe:72:2b:20:73:ca:ad:94:6b:e2:eb:42:b0:cd:da:
5f:97:cf:09:78:5e:4d:d9:56:52:93:4b:a4:29:8b:
fc:ff:69:dd:bd:95:44:be:c4:1f:19:7e:8d:70:34:
73:4b:55:65:c3:37:71:bf:7c:b1:e5:71:da:67:11:
e9:50:b8:aa:db:61:9d:f3:11:25:11:82:45:78:81:
70:d9:53:5d:d6:34:e5:a7:18:11:e9:81:cc:c6:5c:
5f:48:f9:f7:0e:c3:37:fb:d1:2a:9b:f0:88:c6:ec:
fd:bc:a9:7a:56:9d:16:ed:ef:31:ed:b6:0f:d6:02:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FE:59:7C:2C:69:89:3C:E3:05:DD:80:0F:1C:E1:3D:81:3E:78:C9
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/pf5ZfCxpiTzjBd2ADxzhPYE-eMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.200.0/24
82.119.202.0/24
217.22.240.0/23
217.22.248.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:20:cb:16:5e:08:19:ec:3b:08:8d:0d:97:93:54:d8:64:8c:
f4:66:6a:26:8d:06:e0:52:60:83:96:32:b3:4a:21:b9:c3:5b:
11:63:37:e2:f6:7a:af:e9:58:fd:37:1b:a6:34:78:93:a8:20:
ad:f1:50:98:40:41:e0:59:a5:c8:a7:78:24:f7:1b:25:f0:76:
cd:5d:6f:5b:09:0c:48:4b:98:7d:e2:04:69:f0:48:92:5e:3c:
d3:4f:2c:3e:25:32:df:53:0e:41:29:1e:54:fd:0a:e9:7e:b1:
cb:61:b7:67:37:77:57:a3:c4:50:fc:ee:83:e1:ac:93:df:0f:
96:af:d5:41:80:8e:73:d8:92:bd:d7:92:8d:76:c8:8b:52:2a:
8d:6a:5b:bb:f9:53:70:6e:a3:27:d0:d9:89:3d:36:bf:86:18:
38:04:e0:75:1d:0c:11:c1:6e:3d:9d:4b:36:91:44:c4:96:e8:
f1:28:5c:95:6c:71:28:2f:64:f6:c8:51:09:c2:72:59:e2:9c:
75:09:49:3a:70:0c:f8:39:3f:b7:ef:8f:dc:ff:a4:3c:11:55:
0b:83:a2:5a:f5:1b:c5:ed:59:f6:4d:08:4a:6b:0c:54:cc:ba:
83:33:c6:17:9e:45:d7:0c:bf:92:83:2e:88:33:e6:3a:0e:c1:
65:0b:56:1f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ2WA2/o+WqpnvilOuVQr8n/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5
YWY5OWYwHhcNMjYwNDE2MTExODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWZlNTk3YzJjNjk4OTNjZTMwNWRkODAwZjFjZTEzZDgxM2U3OGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB9ZNeisFPstiDvLJxcXlZPRw4Pi
JlvfWywAd2ll0i/+rgFFEGYkqX4vL2ezos3jhXCNOjKCEiUAlLz0afRxNpoFMP9u
I9SVxClh+hoKNMFY2An+0kJGB9HTuITa3q8uIuO2/MFv4sSnJ3POFKV1obfJzWWo
jXVWOWfEx7eCZfInPkDaSI7+cisgc8qtlGvi60Kwzdpfl88JeF5N2VZSk0ukKYv8
/2ndvZVEvsQfGX6NcDRzS1Vlwzdxv3yx5XHaZxHpULiq22Gd8xElEYJFeIFw2VNd
1jTlpxgR6YHMxlxfSPn3DsM3+9Eqm/CIxuz9vKl6Vp0W7e8x7bYP1gLwGwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKX+WXwsaYk84wXdgA8c4T2BPnjJMB8GA1UdIwQY
MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt
MzQ2M2I1NmUzNzJjLzEvcGY1WmZDeHBpVHpqQmQyQUR4emhQWUUtZU1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj
LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUnfIAwQA
UnfKAwQB2RbwAwQB2Rb4MA0GCSqGSIb3DQEBCwUAA4IBAQAqIMsWXggZ7DsIjQ2X
k1TYZIz0ZmomjQbgUmCDljKzSiG5w1sRYzfi9nqv6Vj9NxumNHiTqCCt8VCYQEHg
WaXIp3gk9xsl8HbNXW9bCQxIS5h94gRp8EiSXjzTTyw+JTLfUw5BKR5U/QrpfrHL
YbdnN3dXo8RQ/O6D4ayT3w+Wr9VBgI5z2JK915KNdsiLUiqNalu7+VNwbqMn0NmJ
PTa/hhg4BOB1HQwRwW49nUs2kUTElujxKFyVbHEoL2T2yFEJwnJZ4px1CUk6cAz4
OT+374/c/6Q8EVULg6Ja9RvF7Vn2TQhKawxUzLqDM8YXnkXXDL+Sgy6IM+Y6DsFl
C1Yf
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:32:54 2026 by rpki-client