Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/wWaQX5rvrS24Hznd7N3fDWXJd9I.roa
File: wWaQX5rvrS24Hznd7N3fDWXJd9I.roa (raw, json)
Hash identifier: fT4yvetY/MA9WwLBmvhYQk4S1AH3yU1r+ty6ON2yEVY=
Subject key identifier: C1:66:90:5F:9A:EF:AD:2D:B8:1F:39:DD:EC:DD:DF:0D:65:C9:77:D2
Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial: 019D69AE8C24FCEE94997C98014960580717
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/wWaQX5rvrS24Hznd7N3fDWXJd9I.roa
Signing time: Tue 07 Apr 2026 20:42:19 +0000
ROA not before: Tue 07 Apr 2026 20:42:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204121
IP address blocks: 185.114.0.0/22 maxlen: 22
212.48.184.0/22 maxlen: 22
2a06:6cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:ae:8c:24:fc:ee:94:99:7c:98:01:49:60:58:07:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Validity
Not Before: Apr 7 20:42:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c166905f9aefad2db81f39ddecdddf0d65c977d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:b0:36:c4:29:ed:aa:ff:7c:e5:4b:09:38:
1d:85:ac:ad:1f:ca:d7:2e:e1:8e:0e:0b:50:45:dc:
bf:19:96:7b:ca:a6:7f:e5:95:b3:9a:7f:b7:ed:ed:
f0:97:fc:2e:4a:d7:80:5c:53:7f:be:a3:63:4e:5f:
30:73:72:41:17:1c:64:d7:3f:24:27:d9:2b:01:4f:
f1:76:93:93:9b:3d:40:33:71:70:ba:2e:66:ac:17:
0d:7a:f4:af:3c:92:4f:e1:b9:b2:a0:3d:54:82:84:
2d:cf:87:3a:72:69:24:7d:53:df:50:81:6e:c9:81:
58:55:f0:89:a5:a2:83:f5:48:ed:90:95:6f:23:da:
29:c0:b6:a3:5d:f7:90:b3:83:14:51:8f:a6:2a:a7:
b2:7f:f5:79:f0:9f:54:43:a6:a1:f2:23:9e:88:9a:
63:c6:43:76:90:e4:28:36:50:53:87:ff:b6:ef:3c:
61:8e:27:92:f5:7b:8b:da:33:c4:2e:78:ee:95:3b:
94:4d:0b:68:62:7b:42:38:17:bb:70:0f:8f:c4:70:
22:4f:14:f5:dd:f4:44:d2:b2:51:65:de:eb:1c:e4:
0e:6c:e7:29:39:88:44:7f:6d:68:89:4f:a0:30:d6:
d2:4f:6e:b5:3b:d5:50:d4:69:17:82:fe:39:a9:3c:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:90:5F:9A:EF:AD:2D:B8:1F:39:DD:EC:DD:DF:0D:65:C9:77:D2
X509v3 Authority Key Identifier:
keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/wWaQX5rvrS24Hznd7N3fDWXJd9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.0.0/22
212.48.184.0/22
IPv6:
2a06:6cc0::/29
Signature Algorithm: sha256WithRSAEncryption
38:27:e6:b1:a8:ab:15:d6:95:c9:85:47:c2:d0:6e:1e:8d:db:
a5:88:84:69:d8:11:ce:2f:7d:a3:c6:c9:8b:ea:cf:e7:b5:5f:
71:af:9a:60:ba:c7:45:7e:be:71:77:09:50:fa:90:7c:75:db:
88:75:e9:8e:51:d3:94:80:a8:24:38:61:36:8b:88:40:ae:e6:
52:41:71:01:d9:c9:e7:05:23:ac:71:9c:f9:aa:60:59:8c:17:
ff:b8:8a:7b:30:09:58:b8:e6:49:0b:75:63:07:01:06:10:36:
63:b3:9f:78:c0:55:dd:94:6f:5e:9e:39:3e:b6:cf:e0:d3:68:
5a:c5:dd:ce:16:46:bd:66:c4:a8:2b:95:38:0a:61:97:a1:cb:
11:69:89:2f:e0:0f:a2:30:3a:13:0b:15:07:bc:30:54:53:18:
82:16:08:7e:29:2c:4a:2a:1f:5c:4c:99:4a:2d:d2:ea:a8:1b:
8c:0b:d9:a9:25:f0:00:66:47:c9:6b:87:b4:85:a7:a8:34:ab:
c4:b8:42:5c:bf:10:7d:70:c2:17:86:ef:9d:b7:0b:6d:63:b0:
d7:c4:09:3e:45:1a:f3:97:0c:b0:e1:dd:7c:42:d9:54:fd:6e:
d0:b9:91:db:db:df:b8:80:ee:2c:73:c6:ae:01:72:b3:39:87:
10:e5:82:56
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ1prowk/O6UmXyYAUlgWAcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YmIyNGM0Yjk3ODNjYTIzYjZlZDVlNzUwNDQzZWVkM2E3
MmY5M2IwHhcNMjYwNDA3MjA0MjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTY2OTA1ZjlhZWZhZDJkYjgxZjM5ZGRlY2RkZGYwZDY1Yzk3N2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nqwNsQp7ar/fOVLCTgdhaytH8rX
LuGODgtQRdy/GZZ7yqZ/5ZWzmn+37e3wl/wuSteAXFN/vqNjTl8wc3JBFxxk1z8k
J9krAU/xdpOTmz1AM3Fwui5mrBcNevSvPJJP4bmyoD1UgoQtz4c6cmkkfVPfUIFu
yYFYVfCJpaKD9UjtkJVvI9opwLajXfeQs4MUUY+mKqeyf/V58J9UQ6ah8iOeiJpj
xkN2kOQoNlBTh/+27zxhjieS9XuL2jPELnjulTuUTQtoYntCOBe7cA+PxHAiTxT1
3fRE0rJRZd7rHOQObOcpOYhEf21oiU+gMNbST261O9VQ1GkXgv45qTwHwQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMFmkF+a760tuB853ezd3w1lyXfSMB8GA1UdIwQY
MBaAFMe7JMS5eDyiO27V51BEPu06cvk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzIt
NGI1OTU3YWE3NDdmLzEvd1dhUVg1cnZyUzI0SHpuZDdOM2ZEV1hKZDlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzItNGI1OTU3YWE3NDdm
LzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuXIAAwQC
1DC4MA0EAgACMAcDBQMqBmzAMA0GCSqGSIb3DQEBCwUAA4IBAQA4J+axqKsV1pXJ
hUfC0G4ejduliIRp2BHOL32jxsmL6s/ntV9xr5pgusdFfr5xdwlQ+pB8dduIdemO
UdOUgKgkOGE2i4hAruZSQXEB2cnnBSOscZz5qmBZjBf/uIp7MAlYuOZJC3VjBwEG
EDZjs594wFXdlG9enjk+ts/g02haxd3OFka9ZsSoK5U4CmGXocsRaYkv4A+iMDoT
CxUHvDBUUxiCFgh+KSxKKh9cTJlKLdLqqBuMC9mpJfAAZkfJa4e0haeoNKvEuEJc
vxB9cMIXhu+dtwttY7DXxAk+RRrzlwyw4d18QtlU/W7QuZHb29+4gO4sc8auAXKz
OYcQ5YJW
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:56:48 2026 by rpki-client