Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/wT4zBHWAKZXvAcKkyIUr6uRAbbA.roa
File: wT4zBHWAKZXvAcKkyIUr6uRAbbA.roa (raw, json)
Hash identifier: ib0iHP7uE5Y5OML0Ye43R9IPy5aU8jLszDsAo4o8MLU=
Subject key identifier: C1:3E:33:04:75:80:29:95:EF:01:C2:A4:C8:85:2B:EA:E4:40:6D:B0
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019C4DDE309054AEF36DD3ED6F3E4EC7CE51
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/wT4zBHWAKZXvAcKkyIUr6uRAbbA.roa
Signing time: Wed 11 Feb 2026 18:02:12 +0000
ROA not before: Wed 11 Feb 2026 18:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51202
IP address blocks: 31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
109.175.211.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
195.234.126.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:de:30:90:54:ae:f3:6d:d3:ed:6f:3e:4e:c7:ce:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Feb 11 18:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c13e330475802995ef01c2a4c8852beae4406db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:33:1e:84:5e:27:c7:d3:99:b6:65:8f:e9:
87:f7:40:93:ca:90:79:3d:0f:75:72:36:ba:fe:60:
55:a2:8e:69:bf:1a:12:ad:10:10:2f:4c:63:71:1d:
6d:f3:40:8e:f0:5a:3f:93:4b:93:6e:cb:a1:48:34:
1d:77:ab:aa:37:a5:91:b5:5c:e9:d3:d4:a3:27:3f:
d1:7a:b7:96:27:dc:35:e3:c8:b0:16:0f:60:13:50:
43:5d:25:9d:ea:7f:15:6f:e7:a9:69:d9:70:1a:56:
5c:94:bc:b6:74:54:14:23:af:91:58:83:e7:75:c9:
4d:69:3a:2e:2b:2d:60:76:8b:8a:bc:9e:6f:55:24:
b8:95:4c:71:8b:6f:9d:94:7e:8e:a5:8d:8a:a8:d5:
2b:9e:a0:0a:ec:9a:39:ec:1e:0e:98:98:79:12:11:
98:24:f5:13:c1:65:07:22:05:34:65:61:08:57:60:
81:4c:d5:6c:f2:a4:6a:d0:b7:a8:cf:cf:52:b8:39:
00:39:1a:aa:89:44:d9:2d:d9:3f:25:64:a4:ff:f1:
cc:91:0d:ac:5b:58:ec:95:37:fe:5f:1f:4c:1d:93:
5d:d2:35:9d:9f:09:0a:66:64:a3:54:bd:44:39:09:
53:bc:48:98:31:eb:fd:2e:0d:5e:bd:28:7e:7b:1e:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:33:04:75:80:29:95:EF:01:C2:A4:C8:85:2B:EA:E4:40:6D:B0
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/wT4zBHWAKZXvAcKkyIUr6uRAbbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
62.169.152.0/24
89.36.32.0/24
89.36.35.0/24
109.175.211.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
195.234.126.0/24
212.232.18.0/23
IPv6:
2a0c:2500::/29
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
14:19:07:c1:09:88:ac:03:10:3d:13:69:5b:6d:cb:ec:2c:a1:
25:19:0c:91:0a:ad:60:49:31:f3:18:0c:d3:4e:2e:38:0c:66:
39:ff:14:69:78:28:f5:ed:c5:84:47:c5:97:22:2d:55:f6:02:
a6:10:b3:94:36:6a:cc:9a:59:a3:d1:3a:32:5f:e8:d0:a9:ff:
ac:59:ef:0c:0d:c1:b0:d8:fb:0d:93:30:1c:e9:d4:30:6e:a0:
e7:2c:fd:ec:0e:8d:b4:9a:74:f5:08:f4:fb:d1:b6:92:2b:10:
1d:42:e4:97:4d:86:2c:d8:df:dd:d0:88:24:4d:cd:1a:e3:01:
c1:33:52:7a:c4:45:c6:75:a9:cd:07:32:df:3a:60:fb:ec:94:
55:6a:c6:5a:85:0b:2e:15:3a:b1:2f:54:2e:c9:5f:6d:25:9c:
53:ee:54:82:1b:f1:69:b0:d6:86:3a:82:38:25:8c:f9:b7:b2:
cd:80:cc:d0:44:6f:99:bf:94:0d:b8:a7:37:2c:ef:33:9c:1e:
cf:c6:65:0b:bf:84:c9:fa:a3:9a:0b:3b:78:5c:ba:f8:65:72:
ad:ff:c9:d1:01:ba:a4:8a:11:11:95:e7:fa:00:ab:9d:8e:02:
b6:19:2f:9e:78:b1:e2:c7:fc:0d:cc:b9:57:bf:d8:9f:28:10:
59:91:98:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:59 2026 by rpki-client