Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mWE26VhH4aZItoNdm61WGalJaz0.roa
File: mWE26VhH4aZItoNdm61WGalJaz0.roa (raw, json)
Hash identifier: TIqDkdsbomTnFHP7AhlEL0WwaxFTYmjyQi7+pzms558=
Subject key identifier: 99:61:36:E9:58:47:E1:A6:48:B6:83:5D:9B:AD:56:19:A9:49:6B:3D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019C9AF3AF4E9F73BBB2D054FC76654AE160
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mWE26VhH4aZItoNdm61WGalJaz0.roa
Signing time: Thu 26 Feb 2026 17:16:27 +0000
ROA not before: Thu 26 Feb 2026 17:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215829
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.152.0/23 maxlen: 24
62.60.154.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.186.0/24 maxlen: 24
62.60.228.0/22 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.249.0/24 maxlen: 24
62.60.251.0/24 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:f3:af:4e:9f:73:bb:b2:d0:54:fc:76:65:4a:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 26 17:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=996136e95847e1a648b6835d9bad5619a9496b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:f8:29:83:45:69:c6:d0:21:20:ed:f8:9d:
ca:6d:6c:f9:37:8e:9c:50:8e:2d:14:4d:cf:75:5e:
46:22:59:17:d6:48:49:ec:f1:a3:0f:57:73:93:7b:
55:ed:ae:56:7a:07:d7:84:8a:21:98:f8:4a:b5:dd:
d1:61:00:d1:8f:27:bb:42:8a:3b:0f:a4:06:0c:f2:
32:a7:56:92:59:0f:c1:45:4d:04:16:91:96:9a:f9:
26:d0:9c:61:5a:26:b6:99:38:e8:5c:3d:bd:95:9f:
6e:12:5b:c0:0e:c2:24:d5:8c:8e:7b:4e:00:0c:8a:
38:85:56:63:22:06:56:4d:dd:03:99:f7:43:cd:45:
df:ba:09:b5:d8:5a:ae:26:72:0a:68:d3:10:13:fc:
ab:16:6c:d2:ba:b8:06:05:56:47:0b:f4:40:70:f5:
17:0d:73:0b:e4:18:d9:54:bc:55:57:63:40:60:d2:
75:c8:58:cb:5d:45:e8:ff:16:0e:38:89:f7:18:70:
64:54:4e:a5:7d:b8:51:b0:b4:2c:cc:d2:b6:71:2d:
ad:d2:58:b0:06:09:99:13:17:54:3a:54:c3:b7:de:
ca:1e:3c:f6:29:ad:c2:1f:f6:6e:d8:67:4e:22:4f:
b4:ed:b2:aa:f1:64:1e:aa:63:6d:33:00:05:66:71:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:61:36:E9:58:47:E1:A6:48:B6:83:5D:9B:AD:56:19:A9:49:6B:3D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mWE26VhH4aZItoNdm61WGalJaz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.159.255
62.60.172.0-62.60.179.255
62.60.186.0/24
62.60.228.0/22
62.60.236.0/22
62.60.249.0/24
62.60.251.0/24
213.176.64.0/22
213.176.112.0/22
Signature Algorithm: sha256WithRSAEncryption
86:7f:d3:92:5b:fa:47:2d:3e:4d:61:cd:f2:20:95:3e:28:ff:
97:51:e5:78:99:e2:2a:84:87:90:2a:97:d0:a5:ea:c8:ef:5a:
52:e6:a2:92:56:a5:80:c3:32:4f:06:1f:78:0c:1c:bd:28:63:
26:21:d3:6b:b2:6a:12:d9:8a:a5:4a:61:67:40:1d:f1:16:2b:
86:81:05:a0:fe:41:3b:98:75:2a:77:c7:ac:a4:32:de:b9:ec:
2f:96:69:aa:5c:71:2a:ed:24:4f:83:7c:2c:83:2b:87:89:78:
f1:3e:70:0f:fb:2c:a4:76:81:b4:67:dd:46:71:84:5e:15:9d:
45:53:42:d5:1c:68:02:70:8d:25:e6:02:51:04:70:70:dc:21:
d3:3f:32:5d:2c:d2:2b:b0:34:0c:57:d9:ca:89:3a:93:95:f0:
ec:b0:18:48:59:a6:a7:c6:84:b8:35:00:f0:e1:3e:29:20:09:
39:0d:6a:6d:42:1b:0f:79:59:8e:03:b6:29:d5:57:2c:d4:6b:
80:a9:55:6d:1e:6c:56:26:fa:3e:1e:2d:85:5a:70:5a:7f:6c:
dd:4d:71:6c:ef:10:07:71:45:b3:14:8a:ae:08:5a:2a:0a:2a:
7d:90:49:3b:16:c4:85:50:4e:ec:74:7d:74:d7:ee:cf:80:01:
3e:e5:0c:2f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZya869On3O7stBU/HZlSuFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjYwMjI2MTcxNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTYxMzZlOTU4NDdlMWE2NDhiNjgzNWQ5YmFkNTYxOWE5NDk2YjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVr4KYNFacbQISDt+J3KbWz5N46c
UI4tFE3PdV5GIlkX1khJ7PGjD1dzk3tV7a5WegfXhIohmPhKtd3RYQDRjye7Qoo7
D6QGDPIyp1aSWQ/BRU0EFpGWmvkm0JxhWia2mTjoXD29lZ9uElvADsIk1YyOe04A
DIo4hVZjIgZWTd0DmfdDzUXfugm12FquJnIKaNMQE/yrFmzSurgGBVZHC/RAcPUX
DXML5BjZVLxVV2NAYNJ1yFjLXUXo/xYOOIn3GHBkVE6lfbhRsLQszNK2cS2t0liw
BgmZExdUOlTDt97KHjz2Ka3CH/Zu2GdOIk+07bKq8WQeqmNtMwAFZnGGYQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFJlhNulYR+GmSLaDXZutVhmpSWs9MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvbVdFMjZWaEg0YVpJdG9OZG02MVdHYWxKYXowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGMAwDBAI+PJQD
BAU+PIAwDAMEAj48rAMEAj48sAMEAD48ugMEAj485AMEAj487AMEAD48+QMEAD48
+wMEAtWwQAMEAtWwcDANBgkqhkiG9w0BAQsFAAOCAQEAhn/Tklv6Ry0+TWHN8iCV
Pij/l1HleJniKoSHkCqX0KXqyO9aUuaiklalgMMyTwYfeAwcvShjJiHTa7JqEtmK
pUphZ0Ad8RYrhoEFoP5BO5h1KnfHrKQy3rnsL5ZpqlxxKu0kT4N8LIMrh4l48T5w
D/sspHaBtGfdRnGEXhWdRVNC1RxoAnCNJeYCUQRwcNwh0z8yXSzSK7A0DFfZyok6
k5Xw7LAYSFmmp8aEuDUA8OE+KSAJOQ1qbUIbD3lZjgO2KdVXLNRrgKlVbR5sVib6
Ph4thVpwWn9s3U1xbO8QB3FFsxSKrghaKgoqfZBJOxbEhVBO7HR9dNfuz4ABPuUM
Lw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:32 2026 by rpki-client