Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Dw46snj8BLrIhwDB66klcEI-vKI.roa
File: Dw46snj8BLrIhwDB66klcEI-vKI.roa (raw, json)
Hash identifier: Cnt2s/7c+tK9kMK+YgL+6fahI0cXxqYcX12xkvBmrfk=
Subject key identifier: 0F:0E:3A:B2:78:FC:04:BA:C8:87:00:C1:EB:A9:25:70:42:3E:BC:A2
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 019D448803DD6ECBD705678C2B9448605E6D
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Dw46snj8BLrIhwDB66klcEI-vKI.roa
Signing time: Tue 31 Mar 2026 15:34:17 +0000
ROA not before: Tue 31 Mar 2026 15:34:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49902
IP address blocks: 77.137.224.0/19 maxlen: 20
77.143.0.0/16 maxlen: 18
77.143.17.0/24 maxlen: 24
195.115.116.0/22 maxlen: 22
213.222.64.0/18 maxlen: 19
213.222.96.0/19 maxlen: 19
213.223.46.0/23 maxlen: 24
213.223.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:88:03:dd:6e:cb:d7:05:67:8c:2b:94:48:60:5e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Mar 31 15:34:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f0e3ab278fc04bac88700c1eba92570423ebca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:88:2f:2a:0a:5c:43:22:5b:98:4e:6a:9f:
10:40:50:0e:16:99:e9:f8:fd:73:60:e0:eb:da:9c:
a1:0b:b1:c9:a6:e5:fa:cb:c0:a7:ad:dc:52:a9:60:
a8:e0:b0:b4:24:a7:f6:6f:2a:0c:0c:94:e8:93:65:
23:79:ad:2a:e3:f2:d2:3c:c4:5b:2e:e7:33:ca:c1:
d4:58:de:66:84:5e:9c:cf:51:fe:da:ba:96:1d:a1:
d7:e7:a2:25:34:70:12:35:d1:0d:2f:f7:2e:93:4a:
6c:9e:60:13:54:a8:e0:97:96:b9:91:ee:ee:1c:1a:
ed:b7:41:dc:1d:72:37:6a:f5:be:50:97:4c:11:cb:
a5:74:00:5d:39:9f:f6:2e:59:66:0f:40:cd:24:de:
47:f4:b5:7b:2c:35:8a:ca:ba:80:01:92:48:94:30:
6a:40:1f:35:16:1c:64:35:85:91:69:bc:d4:f7:9f:
69:6f:15:12:a7:03:85:2a:20:e1:80:01:98:3c:c7:
7e:18:c3:31:f1:b3:13:12:f6:f8:69:31:4f:e7:de:
2d:a0:92:c1:70:59:60:12:28:58:0c:d9:e2:46:cc:
53:bb:1d:85:0e:22:2b:80:e3:5b:0b:2e:9f:60:1e:
2b:e7:49:11:3b:64:f5:7d:32:2b:bf:0d:af:3d:9c:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0E:3A:B2:78:FC:04:BA:C8:87:00:C1:EB:A9:25:70:42:3E:BC:A2
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Dw46snj8BLrIhwDB66klcEI-vKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.224.0/19
77.143.0.0/16
195.115.116.0/22
213.222.64.0/18
213.223.46.0/23
213.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fe:15:28:ee:bc:72:89:0b:2e:07:03:0c:06:eb:7f:4c:07:
6e:1b:43:40:7e:55:a5:8e:7f:8a:cc:76:53:95:2c:41:0a:45:
e0:58:e9:94:bf:58:ab:07:89:8a:fe:1c:5f:47:fd:d2:a5:24:
e3:8c:e6:b9:90:9b:c8:9a:93:9a:2d:34:f0:50:5c:35:6a:93:
5f:a5:5c:7f:95:12:f3:1f:b4:fc:1e:5c:36:9c:bc:33:b0:66:
ef:04:69:87:ba:77:4e:04:58:19:f7:70:32:5c:fa:e7:3c:60:
45:ea:07:6c:15:54:86:7a:62:b3:b5:6b:6c:aa:a9:d7:16:30:
a6:b9:f8:39:1c:1f:e1:55:62:04:37:68:89:bd:ac:a2:c4:ae:
36:eb:88:db:c6:b8:bf:31:cc:ae:d0:51:b1:cf:9e:d7:ac:45:
fd:3d:f9:6f:10:dd:94:a5:16:f2:ab:2e:50:d7:d8:82:e3:66:
7b:67:60:f6:44:60:a8:e0:56:de:ce:6a:49:60:55:21:e3:5a:
e2:bc:a4:8c:13:b7:95:d5:42:0c:28:79:6b:17:0e:72:85:2b:
1b:49:eb:1c:0a:fd:5b:f3:b6:32:0c:98:65:6b:39:e8:c8:71:
47:b1:b1:aa:45:ac:fc:45:4e:ed:a0:e9:27:8e:5d:8a:87:64:
8c:19:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:16 2026 by rpki-client