Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa
File: WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa (raw, json)
Hash identifier: 8xLda/bRGDPhlqY86QUEIR+DAlGhY+eQ/Yy7FCK+A6E=
Subject key identifier: 59:3D:C6:C7:62:07:F9:43:90:C4:C1:5E:D0:37:03:22:4D:3F:DA:0B
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019D9B462D40102C2904C382E2E22F32446C
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa
Signing time: Fri 17 Apr 2026 11:49:20 +0000
ROA not before: Fri 17 Apr 2026 11:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62040
IP address blocks: 185.49.240.0/24 maxlen: 24
185.49.241.0/24 maxlen: 24
185.49.242.0/24 maxlen: 24
185.49.243.0/24 maxlen: 24
193.176.80.0/24 maxlen: 24
193.176.83.0/24 maxlen: 24
2a04:bb80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:46:2d:40:10:2c:29:04:c3:82:e2:e2:2f:32:44:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Apr 17 11:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=593dc6c76207f94390c4c15ed03703224d3fda0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:c8:68:b5:fd:65:12:84:ba:0b:ba:9e:54:
eb:3f:c7:68:05:56:b8:33:bc:df:fc:43:84:ae:02:
80:84:ae:54:de:94:11:1b:08:de:c1:b4:33:7f:7c:
7e:5b:56:38:85:59:ff:26:47:74:55:df:ef:d1:69:
c0:da:ec:6c:d7:fe:2b:7c:a3:86:4e:35:3c:d0:fc:
66:38:2f:c2:b9:03:9b:f0:05:61:ae:7f:a0:90:52:
51:6a:eb:d7:45:44:f5:c3:a0:e9:5d:b9:93:02:3a:
f9:00:1a:dc:5b:81:2a:b6:ed:62:b4:10:67:df:70:
e7:e9:cc:5e:3d:1d:68:19:85:08:f9:c2:3d:72:7b:
24:b5:80:89:73:3e:1d:73:eb:76:af:08:78:ff:66:
fc:61:9f:6a:b6:bd:9e:50:d3:37:69:af:02:9d:4e:
4c:d5:96:ad:b2:b0:1b:9c:4a:a1:8d:f8:63:7b:46:
d6:c7:ff:63:f7:c5:24:22:77:6c:23:bd:76:0a:23:
7e:d2:b1:8e:1e:e2:a9:28:eb:5f:20:eb:3d:e9:78:
45:54:b7:c8:0a:81:86:64:bb:19:da:f5:a6:46:84:
57:d5:80:9f:83:f5:a0:33:7a:67:c4:2a:30:63:20:
9a:d7:64:7d:c9:50:bd:47:5d:a7:5b:41:81:c9:cc:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3D:C6:C7:62:07:F9:43:90:C4:C1:5E:D0:37:03:22:4D:3F:DA:0B
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.240.0/22
193.176.80.0/24
193.176.83.0/24
IPv6:
2a04:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
d6:b2:a2:3b:2d:b2:18:3d:db:3f:1c:54:ee:e1:89:f1:c6:8c:
04:44:ec:5c:fd:a4:9e:4c:7d:5d:82:a9:4a:64:ce:de:29:d0:
d2:4f:4c:cd:1b:ff:96:9f:53:33:2c:bb:00:c2:50:bd:d8:a5:
02:b8:e0:a2:9b:9e:f3:93:e7:f9:7d:99:55:dd:b8:6a:7a:6f:
88:fa:3a:4a:ae:f8:2e:ce:a2:4d:6c:5c:b3:1b:3d:c5:34:ee:
d6:02:58:2c:07:21:6b:ca:52:1b:89:17:3b:01:40:54:56:61:
4c:a0:86:9c:cf:c6:d5:bd:57:dd:3d:6b:3b:83:b9:5b:c4:74:
89:67:cb:88:f5:ac:74:e5:ac:b8:6c:75:7c:26:b9:c4:f2:1a:
28:42:d5:80:d7:86:a4:7b:8d:2c:6c:05:1d:97:27:4a:a0:80:
59:b8:c4:89:8b:4c:e0:c1:e8:7a:69:db:27:3e:41:d9:62:2a:
84:c0:0e:1d:d3:b3:a2:52:d0:7a:12:05:58:19:0b:3b:8e:44:
5a:e7:5a:e0:68:17:89:c9:ec:83:49:4c:08:6b:68:9d:a8:b1:
a8:77:12:75:cc:11:13:04:40:40:96:0f:36:59:69:2b:8a:6e:
52:fa:00:b7:82:bd:b7:d9:ac:c7:50:25:3b:b3:2a:83:02:e2:
24:49:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:53 2026 by rpki-client