Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/wZh9B2G5inJahv0ftHSnCHX_-u8.roa
File: wZh9B2G5inJahv0ftHSnCHX_-u8.roa (raw, json)
Hash identifier: w+DHmKNzVqvV97CuN2V9W7IR0BKIs/JdPTg9dgcDZXY=
Subject key identifier: C1:98:7D:07:61:B9:8A:72:5A:86:FD:1F:B4:74:A7:08:75:FF:FA:EF
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 019F934FD6ED3AACA2DECC4AD4D564B5EB74
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/wZh9B2G5inJahv0ftHSnCHX_-u8.roa
Signing time: Fri 24 Jul 2026 08:48:30 +0000
ROA not before: Fri 24 Jul 2026 08:48:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210099
IP address blocks: 46.31.78.0/24 maxlen: 24
85.117.236.0/24 maxlen: 24
85.117.237.0/24 maxlen: 24
85.117.238.0/24 maxlen: 24
185.17.112.0/24 maxlen: 24
185.17.113.0/24 maxlen: 24
185.17.114.0/24 maxlen: 24
185.17.115.0/24 maxlen: 24
185.73.200.0/24 maxlen: 24
185.73.201.0/24 maxlen: 24
185.73.202.0/24 maxlen: 24
185.73.203.0/24 maxlen: 24
2a04:7c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:4f:d6:ed:3a:ac:a2:de:cc:4a:d4:d5:64:b5:eb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jul 24 08:48:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1987d0761b98a725a86fd1fb474a70875fffaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:e8:35:79:ad:e1:c6:4f:7b:d7:40:d1:a3:
ed:49:ff:b5:7e:3e:23:74:46:54:8e:0f:15:96:f2:
52:12:6e:82:8d:8a:0c:bc:bf:3d:eb:e9:50:94:82:
e0:b5:67:0e:0f:3b:1b:87:38:9b:22:73:65:ec:20:
6f:33:db:c9:99:f9:50:f8:58:4b:6d:48:73:a5:86:
5a:bb:b4:38:2d:9d:a7:78:6d:2d:af:c5:09:85:84:
79:2d:0d:9f:3e:60:b7:25:0c:f0:1e:f8:3e:ca:f6:
77:6c:1d:85:18:f2:60:db:d3:69:e4:09:30:2c:b2:
4b:77:89:01:bf:1b:2c:a8:57:46:92:5f:b0:6b:c9:
5d:95:a0:de:a0:f5:4c:e0:26:df:ef:2d:91:ab:68:
ef:7a:af:88:4f:2a:6c:1e:53:da:7a:83:e0:39:e1:
ab:29:29:70:a1:1e:3f:04:ff:74:e3:7f:ce:08:9d:
d8:b6:d9:61:8f:d1:fd:0a:69:2d:81:15:28:08:3f:
45:96:12:3d:88:d8:67:44:75:a3:80:16:95:e9:94:
cd:34:78:c6:11:1d:1d:56:0a:dc:2d:ef:e9:49:5f:
e7:cc:8b:1e:4a:e4:38:69:20:cb:db:ad:3c:9c:fe:
12:87:71:f4:16:f5:d1:09:c4:5a:b5:ab:0f:f7:7c:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:98:7D:07:61:B9:8A:72:5A:86:FD:1F:B4:74:A7:08:75:FF:FA:EF
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/wZh9B2G5inJahv0ftHSnCHX_-u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.78.0/24
85.117.236.0-85.117.238.255
185.17.112.0/22
185.73.200.0/22
IPv6:
2a04:7c1::/32
Signature Algorithm: sha256WithRSAEncryption
05:26:74:7a:7c:ab:75:41:1b:36:b3:34:94:00:6e:f7:41:6a:
5d:75:3a:39:b2:af:3c:7c:bf:56:cd:00:04:0d:93:6f:d9:88:
77:1d:73:32:41:ed:cb:7d:6b:08:3c:44:78:87:21:4c:db:9d:
d2:4e:d8:45:91:a3:f8:9f:9a:12:e2:9d:eb:f6:88:9b:a9:25:
a7:3d:70:5e:20:27:ec:7f:d9:b6:b8:fd:ef:8d:94:b8:78:a7:
0d:12:ef:6a:8c:9d:a7:07:f6:5a:3c:6b:01:56:73:34:cf:f2:
99:2c:5e:32:97:a3:16:f1:67:13:86:da:97:47:4d:60:a9:2c:
a6:e7:f6:bc:b3:4f:f3:6e:af:24:a0:9e:cd:2f:9d:56:68:7c:
c2:82:55:ee:98:0e:aa:84:3e:c4:d8:c4:f2:2d:04:b7:49:81:
47:f5:66:61:6b:07:e8:46:10:34:2e:d1:68:3c:d6:e3:c8:f6:
9b:14:a2:c6:43:37:7e:eb:88:56:e3:cf:e0:fa:75:c8:68:60:
91:e1:74:ed:fc:a6:6a:19:ef:44:80:fb:87:af:a7:bc:b5:bd:
d8:e6:b3:a9:9e:44:4d:f5:1b:2e:bb:c7:48:8e:04:e8:8a:25:
1c:e9:6c:e9:69:8e:d3:3b:88:a1:bb:d1:6d:fb:c9:7e:7a:b9:
f7:37:ea:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:08 2026 by rpki-client