Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/w3DCowazjgMi9gjwGAJIhM5qJJs.roa
File: w3DCowazjgMi9gjwGAJIhM5qJJs.roa (raw, json)
Hash identifier: lA7zts8IbAcCFB2NtgjPdkbP+GYnfp5CJxUEtKeYrhI=
Subject key identifier: C3:70:C2:A3:06:B3:8E:03:22:F6:08:F0:18:02:48:84:CE:6A:24:9B
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019C2317D5565574F691F442EA745DC339DA
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/w3DCowazjgMi9gjwGAJIhM5qJJs.roa
Signing time: Tue 03 Feb 2026 10:41:30 +0000
ROA not before: Tue 03 Feb 2026 10:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 45.11.56.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.134.174.0/24 maxlen: 24
45.134.175.0/24 maxlen: 24
91.222.172.0/22 maxlen: 24
91.234.198.0/23 maxlen: 24
91.234.199.0/24 maxlen: 24
176.97.120.0/23 maxlen: 23
176.97.125.0/24 maxlen: 24
176.97.126.0/23 maxlen: 23
176.97.126.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.196.0/23 maxlen: 23
194.42.198.0/24 maxlen: 24
194.42.199.0/24 maxlen: 24
194.42.206.0/23 maxlen: 24
195.26.86.0/23 maxlen: 24
195.66.212.0/24 maxlen: 24
195.66.213.0/24 maxlen: 24
195.160.220.0/22 maxlen: 24
212.86.120.0/23 maxlen: 23
212.86.125.0/24 maxlen: 24
212.86.126.0/23 maxlen: 23
2a09:2dc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:17:d5:56:55:74:f6:91:f4:42:ea:74:5d:c3:39:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Feb 3 10:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c370c2a306b38e0322f608f018024884ce6a249b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:c1:46:43:89:00:76:68:f4:26:ff:58:39:
b7:2c:70:dc:5e:9b:bb:b3:af:44:3f:eb:55:8a:de:
55:65:41:69:ae:c7:5c:48:f4:9a:c5:10:3a:da:81:
c4:90:ea:97:17:c9:cb:c6:43:b5:8f:02:7d:21:3e:
81:6b:fc:c7:10:8c:76:eb:d6:a4:af:ec:f8:c6:ee:
c9:35:72:db:74:7d:6c:5f:b4:43:2a:cc:90:c6:41:
d9:ea:e4:c0:ca:d8:7e:cd:e8:43:b9:9c:e0:30:ce:
f9:83:39:9e:f5:88:8a:73:7f:be:27:9c:b9:fd:86:
d0:cb:98:96:50:dd:40:68:d4:a6:82:04:91:94:ba:
15:95:ae:25:f0:0a:0d:93:84:3b:18:09:5e:58:da:
33:77:9e:df:a3:fa:3d:30:e6:8a:83:ef:42:06:18:
24:9d:0b:1b:a1:6d:25:9d:13:4b:55:dc:7e:eb:08:
c7:96:5d:5c:d1:34:c9:fb:45:79:a1:1d:1f:89:b6:
64:3b:ba:a6:51:f9:2e:7f:a4:ec:7b:ae:6c:dc:20:
22:7d:53:f2:cd:c6:2b:79:00:30:1e:e3:61:b5:ca:
4f:8a:33:d6:c1:70:47:36:55:0a:9f:5e:aa:a4:fe:
fd:d5:26:29:0c:0a:1f:b7:b5:1b:d6:da:c3:20:0c:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:C2:A3:06:B3:8E:03:22:F6:08:F0:18:02:48:84:CE:6A:24:9B
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/w3DCowazjgMi9gjwGAJIhM5qJJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.56.0/24
45.11.59.0/24
45.134.174.0/23
91.222.172.0/22
91.234.198.0/23
176.97.120.0/23
176.97.125.0-176.97.127.255
185.254.199.0/24
194.42.196.0/22
194.42.206.0/23
195.26.86.0/23
195.66.212.0/23
195.160.220.0/22
212.86.120.0/23
212.86.125.0-212.86.127.255
IPv6:
2a09:2dc1::/32
Signature Algorithm: sha256WithRSAEncryption
1e:90:0e:5b:4d:e8:e2:fa:c9:5b:8b:01:6d:fc:fd:11:49:63:
fb:78:10:92:06:11:87:ad:76:ba:04:ef:a8:fb:ca:e8:79:14:
92:af:ef:5f:2f:17:b0:fe:04:2f:3e:cf:08:ea:51:18:1f:d1:
db:79:24:de:08:1a:5f:69:a7:e1:ad:0d:ed:ea:14:e6:11:34:
87:79:bd:ca:89:49:7b:45:48:af:5c:cf:18:23:bf:f3:40:c9:
d5:4c:b8:71:37:76:28:69:b3:e2:8b:4f:a3:c9:fe:e6:4b:2a:
c5:3f:d4:87:29:18:70:fc:f9:0c:77:12:dd:95:93:72:75:a4:
f9:81:b8:63:41:cf:4b:aa:b3:84:5d:d3:1e:51:b5:d2:a1:52:
f1:0e:6e:8d:33:00:43:4f:7d:61:cf:59:6e:90:30:00:0d:a2:
98:31:e1:2a:6e:e2:2a:99:5c:20:f7:01:37:b6:ab:94:d9:9e:
f2:ff:90:20:6a:b8:57:ad:43:bf:84:04:44:a6:47:53:10:12:
ba:0b:5e:45:97:0c:04:83:75:24:77:c7:8d:07:12:25:cf:d8:
b0:d1:2f:91:7b:07:03:ac:a5:7b:93:b5:4f:74:15:43:79:8e:
07:b1:1a:76:02:29:68:94:47:36:5f:d7:93:ea:25:40:e9:ec:
6b:45:22:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:01 2026 by rpki-client