Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/wmmnD99fWi4VUybgO705ekl7zTw.roa
File: wmmnD99fWi4VUybgO705ekl7zTw.roa (raw, json)
Hash identifier: VG6vy1cTBHOLK/uIPe7y7qS8xAPjtN3l17x/O6Ocsgw=
Subject key identifier: C2:69:A7:0F:DF:5F:5A:2E:15:53:26:E0:3B:BD:39:7A:49:7B:CD:3C
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 019C462B102524CABA2E9CC1021CC8E860E1
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/wmmnD99fWi4VUybgO705ekl7zTw.roa
Signing time: Tue 10 Feb 2026 06:09:13 +0000
ROA not before: Tue 10 Feb 2026 06:09:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211970
IP address blocks: 185.234.245.0/24 maxlen: 24
188.72.0.0/24 maxlen: 24
188.72.1.0/24 maxlen: 24
188.72.2.0/24 maxlen: 24
188.72.3.0/24 maxlen: 24
188.72.51.0/24 maxlen: 24
188.72.52.0/24 maxlen: 24
188.72.56.0/24 maxlen: 24
188.72.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:2b:10:25:24:ca:ba:2e:9c:c1:02:1c:c8:e8:60:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Feb 10 06:09:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c269a70fdf5f5a2e155326e03bbd397a497bcd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:1e:69:a0:a7:07:b8:5c:bc:be:aa:2e:c8:
d4:12:6f:af:d8:de:0a:e7:10:4e:60:28:cc:bc:9c:
29:45:8e:47:02:11:ae:76:8c:27:b2:e4:a5:ac:e6:
a5:d0:e5:a3:20:06:c9:15:2e:e8:04:61:35:c8:4a:
7d:ab:89:1f:07:d1:c5:90:a1:c7:1a:ce:75:fa:f9:
bc:27:ff:02:d9:4d:a5:7e:38:0c:e4:78:3b:8a:32:
68:99:10:c7:1f:57:67:0c:96:f8:d0:f7:5d:fb:fe:
48:0e:8a:6a:ff:b6:14:36:3e:a8:a7:db:1a:0f:3b:
8e:46:92:d0:6b:3b:70:33:d7:9d:02:d2:dc:0b:20:
e8:00:99:a9:1b:1b:69:46:f5:74:94:0a:bd:ed:00:
85:de:1e:23:ae:a4:7e:e5:31:c1:70:1d:1f:41:90:
bb:d0:5d:69:dc:44:72:4a:81:fd:35:8d:9e:07:d8:
84:8f:a2:ef:2f:ae:43:2b:51:b3:be:d0:fc:f1:05:
ae:f7:ca:dd:57:10:f7:92:7d:e5:35:d1:46:d1:a3:
2a:65:c1:1e:eb:37:86:a9:60:d6:b6:f1:6e:b7:89:
d1:30:7e:56:72:0c:97:37:6a:db:7f:a6:dc:ee:c3:
20:11:cf:4e:12:0a:05:b3:dd:97:b4:f6:bb:a7:8a:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:A7:0F:DF:5F:5A:2E:15:53:26:E0:3B:BD:39:7A:49:7B:CD:3C
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/wmmnD99fWi4VUybgO705ekl7zTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.245.0/24
188.72.0.0/22
188.72.51.0-188.72.52.255
188.72.56.0/23
Signature Algorithm: sha256WithRSAEncryption
41:21:b6:b6:c5:38:eb:1b:6a:de:cc:f6:99:47:8e:cc:26:70:
3b:44:55:a1:6b:cc:56:2c:1f:db:9a:89:e9:50:a1:9c:77:af:
3c:a7:fd:3f:2a:f6:5e:26:36:01:57:a4:b1:15:2b:84:34:1e:
3a:2d:11:be:34:be:ee:85:9b:45:73:89:5c:c8:28:e1:b7:cb:
c1:3d:f3:42:53:6e:db:90:6f:8d:a7:66:97:30:eb:b5:11:9e:
3e:44:2d:55:91:5e:18:49:c6:7f:88:34:2b:3c:da:02:b7:98:
58:c8:cf:b5:09:c7:d2:9c:09:34:14:a4:d7:d2:ad:e1:2a:84:
71:b3:f5:3d:4b:21:b4:00:99:c9:7d:68:ed:94:31:72:15:c7:
aa:75:01:57:e6:86:0c:02:7e:96:f9:99:ae:45:c0:84:47:97:
23:08:e3:e0:54:c5:e1:42:86:e8:2a:a8:79:4f:6f:a7:83:ac:
a0:5d:ea:11:aa:26:ff:45:c8:69:14:3d:00:58:43:80:45:8b:
bd:2a:0f:64:91:dc:af:47:db:da:a3:eb:01:bc:5f:cd:8b:f0:
57:b6:ab:04:f6:36:b8:d5:cd:16:79:96:42:27:b8:32:b3:ec:
fc:3e:71:89:53:09:ed:a8:d8:4c:af:c1:6d:51:db:94:ab:7d:
23:1b:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:34 2026 by rpki-client