Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/Wf4b69W2HIyydqZuj7Hmrgl5Tok.roa
File: Wf4b69W2HIyydqZuj7Hmrgl5Tok.roa (raw, json)
Hash identifier: nql6Y+KJSPOOX+Nx26GOdRZM62yY1NZG15EA+Lo/1qg=
Subject key identifier: 59:FE:1B:EB:D5:B6:1C:8C:B2:76:A6:6E:8F:B1:E6:AE:09:79:4E:89
Certificate issuer: /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial: 019C717758F73EE38D0348C80C2EDC26FB1F
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/Wf4b69W2HIyydqZuj7Hmrgl5Tok.roa
Signing time: Wed 18 Feb 2026 15:56:12 +0000
ROA not before: Wed 18 Feb 2026 15:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25291
IP address blocks: 31.99.192.0/21 maxlen: 24
37.44.0.0/21 maxlen: 24
37.49.152.0/21 maxlen: 24
37.123.104.0/21 maxlen: 24
77.247.80.0/21 maxlen: 24
109.68.224.0/21 maxlen: 24
147.93.208.0/22 maxlen: 24
151.252.40.0/21 maxlen: 24
176.74.56.0/21 maxlen: 24
185.46.136.0/22 maxlen: 24
185.54.232.0/22 maxlen: 24
185.56.104.0/23 maxlen: 24
185.56.128.0/21 maxlen: 24
195.192.128.0/18 maxlen: 24
2a00:13c8::/32 maxlen: 48
2a00:7fc0::/32 maxlen: 48
2a00:7fc0::/33 maxlen: 48
2a04:d480::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:77:58:f7:3e:e3:8d:03:48:c8:0c:2e:dc:26:fb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Validity
Not Before: Feb 18 15:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59fe1bebd5b61c8cb276a66e8fb1e6ae09794e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:59:73:51:b0:ed:14:64:34:48:d4:56:86:
e1:02:90:bc:42:41:cb:53:e5:12:a4:c5:a0:4d:70:
0e:72:d7:a1:38:7a:98:c9:aa:3c:7e:2e:e0:7d:73:
61:8a:3c:70:49:93:5d:41:97:01:2e:0c:8c:19:62:
32:4e:4b:57:ce:41:24:60:4e:a0:b0:b0:80:38:72:
6f:ac:89:7a:ce:59:62:16:90:b1:d2:bf:ce:07:f8:
64:59:71:94:12:4a:3a:ec:2b:fb:b3:65:27:a9:c9:
90:89:82:c7:64:5d:d9:93:97:03:c6:ae:42:4f:fc:
e7:78:0e:fc:25:76:39:de:c4:6b:8c:ff:34:e9:1c:
4f:b1:43:56:81:07:3a:e2:99:0a:47:39:eb:95:70:
fd:51:71:78:30:75:9d:85:e7:a9:c9:6b:44:c1:ed:
87:b0:b6:f8:f0:94:4f:53:46:c0:55:ce:53:44:2c:
55:0e:09:6c:3d:6b:1b:bb:cf:4a:91:88:89:c6:37:
60:5f:bc:5b:98:05:50:9f:c1:5f:40:ac:42:80:f9:
04:cd:c3:0c:99:ce:9d:d8:a3:70:8b:8c:9f:05:f4:
6a:2b:44:76:f6:b7:dc:3b:ad:62:8d:59:2e:64:84:
74:ee:e7:58:f6:c5:df:f1:23:41:6f:70:05:86:0d:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FE:1B:EB:D5:B6:1C:8C:B2:76:A6:6E:8F:B1:E6:AE:09:79:4E:89
X509v3 Authority Key Identifier:
keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/Wf4b69W2HIyydqZuj7Hmrgl5Tok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.99.192.0/21
37.44.0.0/21
37.49.152.0/21
37.123.104.0/21
77.247.80.0/21
109.68.224.0/21
147.93.208.0/22
151.252.40.0/21
176.74.56.0/21
185.46.136.0/22
185.54.232.0/22
185.56.104.0/23
185.56.128.0/21
195.192.128.0/18
IPv6:
2a00:13c8::/32
2a00:7fc0::/32
2a04:d480::/29
Signature Algorithm: sha256WithRSAEncryption
73:c2:b0:21:88:c3:3e:54:c6:57:d6:a9:26:41:f0:c7:b8:fa:
4c:a1:d6:16:75:db:51:09:29:be:18:d2:aa:bf:3c:ea:22:16:
e4:2c:f4:e1:5c:14:6d:b1:77:8c:3a:5e:49:29:65:da:04:83:
d1:09:5a:04:d9:5e:f3:c3:be:14:33:59:48:4e:0c:95:63:ce:
56:83:28:c6:1c:83:df:3a:a6:9d:7e:02:98:7e:5d:92:1d:2c:
98:89:b7:60:c0:36:79:04:98:db:f7:5f:2f:a6:1f:9c:2b:6b:
58:03:07:18:22:ba:5b:8f:3e:b4:96:ba:30:30:33:e2:fb:cf:
b7:9f:cb:6b:bc:af:9b:fc:c6:21:ac:c2:66:c5:16:c0:b2:ce:
7d:e6:62:7c:29:0b:81:a1:89:d6:21:f4:eb:fb:4c:fc:62:1d:
c6:dc:a5:2c:e5:63:b8:07:f1:d6:60:af:cd:2c:82:3a:e5:69:
f1:43:b6:34:18:c6:df:73:76:53:9e:57:f6:e0:07:28:eb:3c:
fc:a4:ea:e0:96:1e:9b:42:fd:ee:7c:42:df:51:28:29:53:63:
ae:c6:2a:b4:95:d9:3d:c0:36:02:96:7c:91:83:3d:68:8b:84:
8f:6b:ba:04:0f:92:a8:03:2e:0c:fb:68:2e:7b:12:55:52:80:
1d:20:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:45 2026 by rpki-client