Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/wsv3RhVPC0LRVw4Iv-_qJ-xb_MA.roa
File: wsv3RhVPC0LRVw4Iv-_qJ-xb_MA.roa (raw, json)
Hash identifier: htIN8qHXgg74PxltVLjdHQI1GM5oys81YrYBTFBjHyw=
Subject key identifier: C2:CB:F7:46:15:4F:0B:42:D1:57:0E:08:BF:EF:EA:27:EC:5B:FC:C0
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019D96AAF990395260D193E973337D4B64C0
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/wsv3RhVPC0LRVw4Iv-_qJ-xb_MA.roa
Signing time: Thu 16 Apr 2026 14:21:20 +0000
ROA not before: Thu 16 Apr 2026 14:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7979
IP address blocks: 134.82.64.0/24 maxlen: 24
134.82.65.0/24 maxlen: 24
134.82.66.0/24 maxlen: 24
134.82.67.0/24 maxlen: 24
205.147.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:aa:f9:90:39:52:60:d1:93:e9:73:33:7d:4b:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Apr 16 14:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2cbf746154f0b42d1570e08bfefea27ec5bfcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:15:5a:f6:e5:05:34:41:71:91:17:2a:d3:
7e:43:cf:55:f2:52:0f:25:34:ad:cc:1d:01:90:de:
8d:a7:3b:b9:ed:d7:cb:4a:8a:98:f0:e3:b3:d0:b6:
b6:e2:af:61:bf:c2:81:d1:5e:15:9a:5a:2d:c8:14:
91:ef:14:e7:4d:99:fd:fe:66:e8:af:0f:8a:63:ee:
bb:00:d4:8b:00:fe:3c:55:2e:07:e9:fe:8d:92:6d:
56:2b:6c:42:92:7e:77:14:90:5d:4e:de:9f:da:ce:
5f:41:39:d0:e9:76:7d:b3:bf:56:77:55:93:9c:34:
b5:9a:10:6e:53:e1:8e:08:44:96:57:44:0b:9d:20:
a6:d8:43:20:72:b7:49:e2:b4:fa:75:cf:09:cd:e5:
49:ce:d3:59:1a:4f:07:e8:ea:cf:6c:a1:7a:fa:79:
d1:fb:98:b2:6c:81:0e:33:1a:d5:a8:b0:1c:82:84:
cf:db:82:58:91:b0:75:c0:fb:c8:0e:fe:49:cb:02:
39:55:f1:1f:c2:03:f7:5d:ca:7f:fc:73:93:fd:46:
4d:85:ed:53:7b:c6:1a:2c:26:37:ab:0b:51:f3:4c:
f3:6c:b8:b6:35:e1:5f:cd:57:0a:f9:25:7f:7e:3e:
03:1e:ac:8f:45:03:1e:be:fa:07:cf:e6:65:e5:73:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:F7:46:15:4F:0B:42:D1:57:0E:08:BF:EF:EA:27:EC:5B:FC:C0
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/wsv3RhVPC0LRVw4Iv-_qJ-xb_MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.82.64.0/22
205.147.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b3:c4:cf:43:63:84:d7:7f:f8:45:ef:e2:7e:c3:8b:30:df:
34:41:e4:46:97:82:7c:fa:ab:d4:73:f6:60:97:ff:70:a1:11:
5e:cc:f8:1f:9e:af:f3:48:84:ca:96:91:9d:25:1a:84:91:1c:
11:ce:ed:8e:08:83:a1:04:37:84:3f:4d:26:8d:a6:45:cc:07:
78:0f:62:b2:6f:27:7a:e4:bc:b0:62:5a:7c:ce:6d:57:29:6a:
20:3b:ce:97:34:0e:f2:5e:83:be:9d:43:43:41:f1:60:19:9e:
db:73:79:64:20:d4:95:10:e2:c1:41:b8:47:9f:5d:51:7a:d2:
3e:b4:2a:5c:ea:3f:95:cd:fd:e2:b6:10:42:1a:7e:b5:96:6d:
cb:92:b2:30:81:80:1d:69:05:b8:2e:71:2f:72:5b:4a:76:2c:
55:fc:ae:2b:40:48:34:9d:bf:03:5a:83:35:47:ae:08:47:96:
5a:0a:a7:33:1d:45:4e:76:92:7a:37:69:39:ad:a4:b3:0b:81:
ad:a8:34:18:4e:53:6a:f8:db:cf:53:e1:42:1d:ad:66:88:75:
11:1b:42:83:cb:e0:b7:3f:11:00:e2:d3:48:df:d0:4b:fe:72:
d2:d2:ee:3c:39:d2:1b:c0:14:4f:51:1d:af:49:f9:c1:a8:db:
5a:65:fd:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ2WqvmQOVJg0ZPpczN9S2TAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz
NWUyMmIwHhcNMjYwNDE2MTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmNiZjc0NjE1NGYwYjQyZDE1NzBlMDhiZmVmZWEyN2VjNWJmY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBoVWvblBTRBcZEXKtN+Q89V8lIP
JTStzB0BkN6Npzu57dfLSoqY8OOz0La24q9hv8KB0V4VmlotyBSR7xTnTZn9/mbo
rw+KY+67ANSLAP48VS4H6f6Nkm1WK2xCkn53FJBdTt6f2s5fQTnQ6XZ9s79Wd1WT
nDS1mhBuU+GOCESWV0QLnSCm2EMgcrdJ4rT6dc8JzeVJztNZGk8H6OrPbKF6+nnR
+5iybIEOMxrVqLAcgoTP24JYkbB1wPvIDv5JywI5VfEfwgP3Xcp//HOT/UZNhe1T
e8YaLCY3qwtR80zzbLi2NeFfzVcK+SV/fj4DHqyPRQMevvoHz+Zl5XMnAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMLL90YVTwtC0VcOCL/v6ifsW/zAMB8GA1UdIwQY
MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt
MWE4MGEyZjdkN2VhLzEvd3N2M1JoVlBDMExSVnc0SXYtX3FKLXhiX01BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh
LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQChlJAAwQA
zZMaMA0GCSqGSIb3DQEBCwUAA4IBAQA7s8TPQ2OE13/4Re/ifsOLMN80QeRGl4J8
+qvUc/Zgl/9woRFezPgfnq/zSITKlpGdJRqEkRwRzu2OCIOhBDeEP00mjaZFzAd4
D2Kybyd65LywYlp8zm1XKWogO86XNA7yXoO+nUNDQfFgGZ7bc3lkINSVEOLBQbhH
n11RetI+tCpc6j+Vzf3ithBCGn61lm3LkrIwgYAdaQW4LnEvcltKdixV/K4rQEg0
nb8DWoM1R64IR5ZaCqczHUVOdpJ6N2k5raSzC4GtqDQYTlNq+NvPU+FCHa1miHUR
G0KDy+C3PxEA4tNI39BL/nLS0u48OdIbwBRPUR2vSfnBqNtaZf1/
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:30 2026 by rpki-client