Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/Wy3MqlXsTXf1u_lkMDx771HHpfU.roa
File: Wy3MqlXsTXf1u_lkMDx771HHpfU.roa (raw, json)
Hash identifier: BrkGhKWt+EFDEWZeg8fqIEdjEe1yuUnDX6BThl1mWV0=
Subject key identifier: 5B:2D:CC:AA:55:EC:4D:77:F5:BB:F9:64:30:3C:7B:EF:51:C7:A5:F5
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 01A011476933A6341F09ED4C612B54C116DF
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/Wy3MqlXsTXf1u_lkMDx771HHpfU.roa
Signing time: Mon 17 Aug 2026 19:51:27 +0000
ROA not before: Mon 17 Aug 2026 19:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16186
IP address blocks: 89.105.48.0/20 maxlen: 20
151.249.112.0/21 maxlen: 21
185.88.10.0/24 maxlen: 24
185.115.252.0/22 maxlen: 22
185.116.4.0/22 maxlen: 22
185.206.48.0/22 maxlen: 22
185.234.92.0/22 maxlen: 22
194.156.192.0/22 maxlen: 22
213.179.32.0/21 maxlen: 21
213.179.40.0/21 maxlen: 21
2001:820::/32 maxlen: 32
2a01:160::/32 maxlen: 32
2a01:a840::/32 maxlen: 32
2a07:40::/29 maxlen: 29
2a0d:f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:47:69:33:a6:34:1f:09:ed:4c:61:2b:54:c1:16:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Aug 17 19:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b2dccaa55ec4d77f5bbf964303c7bef51c7a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:ac:b0:7d:54:dc:3a:95:f0:93:e2:6c:11:
fd:22:75:49:2e:94:ec:a5:5a:ce:e3:9f:b7:4f:c7:
82:d3:6b:82:63:ae:50:4d:d6:c9:f1:ac:1f:38:20:
a5:4b:fb:32:22:d3:c4:8d:c6:07:78:fa:06:6c:95:
2f:63:ff:1f:30:17:b7:19:6c:7f:a8:a6:d9:1c:f9:
6b:cd:44:8c:90:d3:4e:74:c5:3b:a5:44:a5:dc:ee:
ad:56:b4:f5:00:d8:21:44:3a:95:63:be:90:7b:0e:
f6:44:ca:c3:f0:c2:0b:4a:a9:09:66:22:32:87:eb:
0e:21:e2:3c:73:53:0f:8f:37:25:dd:03:16:a7:42:
04:e2:e6:2d:72:66:52:fe:c5:ee:b7:1b:6c:e8:7b:
80:1d:c1:da:bc:49:ed:ef:52:66:55:0a:37:86:47:
d8:4a:4b:8f:27:1d:f5:33:4d:1f:74:05:9b:c6:e6:
13:2d:ae:51:c3:8d:5f:29:e7:fd:bd:86:fa:36:fc:
d9:e0:3e:72:a5:19:fa:df:d8:cf:3f:20:3d:79:47:
07:5f:9e:af:c7:52:ad:c9:68:57:4a:20:d7:39:29:
19:16:58:b4:87:f3:5b:4b:15:e8:69:b2:a3:91:12:
36:9d:25:87:7c:5a:c7:8f:d9:c0:90:de:83:33:74:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2D:CC:AA:55:EC:4D:77:F5:BB:F9:64:30:3C:7B:EF:51:C7:A5:F5
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/Wy3MqlXsTXf1u_lkMDx771HHpfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.48.0/20
151.249.112.0/21
185.88.10.0/24
185.115.252.0/22
185.116.4.0/22
185.206.48.0/22
185.234.92.0/22
194.156.192.0/22
213.179.32.0/20
IPv6:
2001:820::/32
2a01:160::/32
2a01:a840::/32
2a07:40::/29
2a0d:f00::/29
Signature Algorithm: sha256WithRSAEncryption
a5:9e:7d:fa:ba:ab:1a:8f:4a:82:c7:0b:d1:8f:ef:49:e5:cb:
87:df:3e:c9:42:da:80:3b:a5:9f:1d:bf:0b:fc:59:2a:1f:55:
e2:af:7e:ee:c0:7e:49:d3:09:bf:0b:5b:a5:48:d7:68:67:14:
f6:86:dc:63:3a:94:0b:98:b1:a7:e8:21:9a:1e:c4:66:2b:85:
9f:19:bd:a0:d5:7d:5f:4c:21:59:9a:a5:83:38:06:49:d6:e3:
eb:67:f3:fa:ca:38:07:8c:ec:c3:11:7a:cc:0a:06:ed:d2:4a:
1c:61:16:47:99:e3:ea:5e:9a:d9:48:e1:66:38:b4:fd:56:7a:
0b:4a:a1:49:89:a7:96:e2:62:d1:d1:4a:e3:47:3f:9c:fc:5e:
4a:ce:f4:c4:c4:40:9a:75:52:ab:6a:2c:60:85:2c:9b:5f:12:
7e:ad:e0:c4:7c:9e:4d:9a:5e:b2:07:91:12:24:e4:27:2b:3b:
23:b2:3d:69:21:a6:0b:45:1c:48:05:1f:16:28:91:cf:ef:fc:
78:1e:c7:8a:cf:3c:42:de:a7:2f:f3:53:1f:a7:da:24:ec:16:
a0:49:c1:b8:c6:8a:25:05:70:5e:e7:30:6d:44:e9:64:07:aa:
86:61:3c:f4:a6:21:59:71:8c:91:20:4a:de:42:f6:62:32:e6:
34:90:78:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:23:03 2026 by rpki-client