Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WJO7iOBt2yb47cRd1CldRy07fJ4.roa
File: WJO7iOBt2yb47cRd1CldRy07fJ4.roa (raw, json)
Hash identifier: 90lCPJDVEY0rNEO+aRWHK3f9IE9ZPjOlBtThA3N8I/s=
Subject key identifier: 58:93:BB:88:E0:6D:DB:26:F8:ED:C4:5D:D4:29:5D:47:2D:3B:7C:9E
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0F772031093D42E3C8520F9B65ACF0F80
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WJO7iOBt2yb47cRd1CldRy07fJ4.roa
Signing time: Thu 01 Oct 2026 12:30:39 +0000
ROA not before: Thu 01 Oct 2026 12:30:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 134.49.65.0/24 maxlen: 24
147.90.202.0/24 maxlen: 24
158.173.240.0/24 maxlen: 24
170.62.239.0/24 maxlen: 24
170.62.244.0/24 maxlen: 24
170.62.245.0/24 maxlen: 24
173.209.0.0/24 maxlen: 24
193.142.58.0/24 maxlen: 24
212.32.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:72:03:10:93:d4:2e:3c:85:20:f9:b6:5a:cf:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 1 12:30:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5893bb88e06ddb26f8edc45dd4295d472d3b7c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:20:5a:99:a8:e6:f3:11:73:08:f9:c1:85:58:
dc:89:d6:db:0e:ba:90:b4:4a:a3:61:ec:4f:9f:6c:
1b:a1:54:29:86:6f:33:ad:a6:32:ec:84:cd:3d:cd:
ba:a5:c5:d7:d6:90:b2:79:d1:c1:f6:91:30:d5:fc:
02:f8:a8:f1:87:62:87:ad:00:96:8d:85:66:d0:f5:
52:de:ab:6c:89:45:31:c6:98:29:fe:ae:16:5d:55:
35:22:9d:2b:6e:c0:aa:90:5e:54:0b:a4:d3:c2:c5:
10:0e:13:d5:93:33:64:b7:9c:08:3a:91:bb:47:4c:
95:6b:81:d4:cf:32:e7:e2:ab:d8:1f:76:78:c5:87:
70:6d:50:c4:45:a9:b2:ea:7c:bc:26:b7:da:25:97:
10:54:d0:c6:c7:83:f2:27:d2:01:73:8c:18:fb:31:
bf:6b:05:cd:5f:e0:a5:bc:c4:89:77:ba:16:dd:0e:
bb:75:f8:84:44:f3:94:a7:f1:98:80:e6:14:b0:2c:
de:c5:1c:43:94:a1:fa:6e:58:25:bd:a3:56:c7:42:
0b:42:13:a1:42:e7:56:f1:43:2c:ba:a0:7c:a6:c0:
03:a2:5e:27:1c:7b:bd:0e:45:68:b3:cf:83:f4:bd:
6d:16:bc:11:37:28:c6:2c:e2:4c:03:24:07:cc:d8:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:93:BB:88:E0:6D:DB:26:F8:ED:C4:5D:D4:29:5D:47:2D:3B:7C:9E
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WJO7iOBt2yb47cRd1CldRy07fJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.49.65.0/24
147.90.202.0/24
158.173.240.0/24
170.62.239.0/24
170.62.244.0/23
173.209.0.0/24
193.142.58.0/24
212.32.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:77:22:db:a4:7c:6a:f3:f5:2a:69:4d:89:9a:7e:48:90:ed:
b6:e5:7f:84:30:0c:00:da:79:66:37:16:e6:a9:86:b7:4c:f0:
25:ee:2e:df:65:c2:3a:0d:26:20:60:9a:1b:a2:ec:11:69:06:
55:45:f9:00:81:41:7b:ad:59:a8:57:5e:b7:57:5f:10:ac:db:
1d:bd:11:cf:34:34:9e:80:1b:b8:5e:bd:c7:e4:16:8f:06:9b:
57:83:4c:b0:e2:e5:24:5f:fd:53:32:cc:70:23:f4:cf:ed:58:
32:3c:9b:73:ab:a0:91:5f:48:f3:27:cc:9b:68:22:2e:39:a8:
01:16:6c:02:c3:8e:c7:dd:9e:a7:4b:d1:aa:24:01:d3:2e:22:
d3:ca:74:13:74:ba:ec:77:36:53:fa:69:de:b7:9a:dc:a8:71:
59:d3:74:4a:b5:8b:4a:6c:f7:e8:0d:17:fd:dc:8e:5b:c9:37:
77:a8:c1:1b:0c:13:ba:69:c4:22:9e:34:00:9c:f5:6a:08:f7:
71:98:a4:6f:ef:ea:aa:56:3e:ea:23:3f:73:10:fc:7f:fd:24:
14:ea:13:5b:f6:e3:b8:5f:63:c1:73:8e:be:c7:6f:99:2e:00:
87:eb:28:83:88:bb:de:00:2f:93:16:3a:98:65:62:2d:71:0e:
60:aa:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:32:11 2026 by rpki-client