Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/WrCSnmO3TptCu12D-7QukIGoskU.roa
File: WrCSnmO3TptCu12D-7QukIGoskU.roa (raw, json)
Hash identifier: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=
Subject key identifier: 5A:B0:92:9E:63:B7:4E:9B:42:BB:5D:83:FB:B4:2E:90:81:A8:B2:45
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 019B78A2A00FFB4A7B7DA2BFDB5EACF44E78
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/WrCSnmO3TptCu12D-7QukIGoskU.roa
Signing time: Thu 01 Jan 2026 08:18:02 +0000
ROA not before: Thu 01 Jan 2026 08:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42965
IP address blocks: 77.246.112.0/20 maxlen: 20
84.21.184.0/22 maxlen: 22
91.196.204.0/22 maxlen: 22
93.181.0.0/18 maxlen: 21
95.214.224.0/22 maxlen: 22
185.201.84.0/22 maxlen: 22
194.50.244.0/22 maxlen: 22
2a02:2f0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:a0:0f:fb:4a:7b:7d:a2:bf:db:5e:ac:f4:4e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Jan 1 08:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab0929e63b74e9b42bb5d83fbb42e9081a8b245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:a7:06:5d:2e:79:6d:cb:bc:46:1d:9e:cf:
af:b5:f5:0e:63:bd:14:d1:40:a7:9e:30:e4:0c:45:
d4:45:ea:8a:c7:48:2c:a3:19:0b:dc:67:28:7c:c6:
6d:d6:49:be:64:51:a2:0d:41:c1:35:9d:0d:3d:0e:
ee:f5:cf:c1:1b:a6:69:d5:01:64:5a:0f:f7:27:60:
f7:d4:36:f6:e6:4f:14:3f:fc:ec:d6:4e:d8:09:d1:
8e:3a:b6:d2:62:d1:19:79:e4:62:ae:fb:e1:20:52:
37:3a:c9:95:4c:36:d6:e1:4a:67:e1:3c:cd:75:dd:
b4:24:40:e6:16:76:fe:78:5f:77:39:dd:6e:68:da:
e6:81:99:a2:5b:7f:ee:70:c9:b8:b6:20:ea:2c:71:
67:83:d7:80:bb:23:46:ee:f6:f3:03:53:54:5e:2c:
79:e7:fc:91:2d:1f:2c:50:b0:b4:8c:3a:0e:3d:fd:
fa:d6:9d:49:63:b9:c9:75:77:cd:b2:d0:94:ee:21:
40:f9:e5:d7:65:2e:22:ec:44:3c:28:fc:d4:a9:77:
bb:56:05:00:3d:24:ce:6d:f0:ab:8f:24:7c:d1:2e:
df:85:1f:76:bf:10:f7:d3:f6:a8:7c:5e:d3:bb:e8:
6a:23:b1:2c:df:df:52:b1:7a:52:53:87:dd:f4:31:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B0:92:9E:63:B7:4E:9B:42:BB:5D:83:FB:B4:2E:90:81:A8:B2:45
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/WrCSnmO3TptCu12D-7QukIGoskU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.112.0/20
84.21.184.0/22
91.196.204.0/22
93.181.0.0/18
95.214.224.0/22
185.201.84.0/22
194.50.244.0/22
IPv6:
2a02:2f0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:d5:f2:80:95:e4:59:1e:a6:6c:78:00:47:ee:3f:0f:cf:2a:
10:ba:e3:db:d8:58:39:f9:5c:ef:4a:45:c6:81:6b:33:19:67:
d4:99:71:b3:56:ce:7a:81:2f:10:7b:01:87:49:b4:89:fa:00:
38:ac:64:c4:bf:41:22:75:cc:df:6d:95:5c:1d:93:dd:d9:15:
76:cd:43:4f:0b:68:68:9c:9f:d3:39:0b:73:7b:95:27:cf:36:
1b:0c:38:12:a2:6e:f9:79:d1:72:ab:ae:cd:5e:1f:aa:2a:7c:
e6:d5:39:b8:80:15:9d:a6:35:3a:33:6b:e3:9f:1e:a7:23:3e:
e6:a7:06:44:cc:81:4a:63:09:a1:c7:9b:cc:22:23:74:7e:2d:
14:94:c7:44:70:bf:8e:d8:57:4b:30:fc:e0:9f:bf:43:97:4c:
8f:11:63:4b:02:16:76:09:1f:01:dd:12:47:14:08:08:9c:51:
fa:b1:3e:64:22:aa:1d:95:c4:3c:be:13:f0:ae:c5:07:be:b1:
98:a1:d1:8d:a8:7f:ac:3f:36:e3:00:df:18:8d:6d:a0:39:c7:
36:63:1d:3b:62:4d:0b:3d:4d:70:f5:9f:bb:c7:63:3b:ac:c4:
fc:40:a2:62:a2:df:1e:d0:bd:77:65:6d:8c:ef:20:f9:0e:7b:
fe:ab:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:49:34 2026 by rpki-client