Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/woe_PWntHmfIzmayVL0eeLoXkz4.roa
File: woe_PWntHmfIzmayVL0eeLoXkz4.roa (raw, json)
Hash identifier: uvrlOvH9LtQ+CGVJWkwu+KqnSl7EYGeyum3/AySDMpg=
Subject key identifier: C2:87:BF:3D:69:ED:1E:67:C8:CE:66:B2:54:BD:1E:78:BA:17:93:3E
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A1895681062252B4A08DA9B1ED7B7B0F2A
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/woe_PWntHmfIzmayVL0eeLoXkz4.roa
Signing time: Thu 29 Oct 2026 20:25:09 +0000
ROA not before: Thu 29 Oct 2026 20:25:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210387
IP address blocks: 185.148.241.0/24 maxlen: 24
185.148.242.0/24 maxlen: 24
185.169.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:56:81:06:22:52:b4:a0:8d:a9:b1:ed:7b:7b:0f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Oct 29 20:25:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c287bf3d69ed1e67c8ce66b254bd1e78ba17933e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1e:33:bf:6f:ba:91:12:f1:76:aa:48:dd:28:
78:41:16:ca:c4:3c:d5:b6:cf:d7:38:78:f5:7e:a6:
bd:f4:be:f3:e0:55:dc:1f:62:74:8a:85:55:e5:84:
8a:54:32:d4:a0:d0:10:b3:76:24:98:51:b0:12:1c:
d9:11:35:ca:bc:d7:e7:3c:a0:b0:bb:3e:bf:35:22:
d7:cb:0c:b9:9b:ff:d2:5b:07:e3:46:c7:af:a0:de:
b4:7c:2e:95:d2:a4:5c:4e:53:ba:71:ef:01:21:62:
eb:fe:4f:54:5a:3e:52:1a:b2:76:de:2e:13:a2:e2:
7c:da:28:2d:1c:f1:41:fd:64:ed:ee:ce:90:c4:eb:
fc:e9:08:ea:ac:d9:c9:05:48:3d:b0:2b:be:11:7c:
38:1b:77:c4:d3:fa:54:d6:a1:a4:8f:4d:29:00:1c:
a7:4d:7e:d2:7f:cd:04:b3:a3:77:6c:45:fd:f5:d1:
39:2f:b6:5a:bc:0b:c1:39:bd:89:c8:04:3c:1f:32:
a0:af:b9:48:43:5b:b8:46:ae:c8:18:30:aa:54:81:
8f:71:fd:2a:e7:e8:77:67:ff:20:8c:a1:0b:bf:c2:
be:cf:9d:94:c4:d4:5a:74:ce:11:99:0d:be:ee:f7:
5f:01:a5:6d:4c:2d:12:e1:c0:00:a2:60:9c:5d:c7:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:87:BF:3D:69:ED:1E:67:C8:CE:66:B2:54:BD:1E:78:BA:17:93:3E
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/woe_PWntHmfIzmayVL0eeLoXkz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.241.0-185.148.242.255
185.169.181.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1d:f7:2a:76:ea:db:72:60:a7:4f:c6:91:0e:c2:44:d7:a7:
16:2d:ba:74:2b:b0:ff:32:c9:da:a2:6b:9d:23:19:cd:5e:ba:
2b:43:9e:b1:f3:98:ac:4b:d4:13:06:a3:6c:5b:a5:96:3a:f7:
fa:ac:c0:67:00:ba:1d:41:10:41:0c:0d:6d:d5:2b:8d:e6:29:
06:2c:06:7b:75:f8:f5:35:ec:0c:28:fa:b5:c3:21:ec:7b:08:
9b:b2:18:67:1f:86:a3:80:f1:33:6f:b8:9d:f6:b2:03:28:7c:
83:c0:74:2f:dd:5d:07:ac:8f:26:76:7a:61:ac:9b:0f:24:10:
15:ca:55:12:71:f3:e7:b5:c3:4c:d5:d1:69:46:1b:30:7f:a4:
76:f7:dd:cd:ae:07:c0:be:d2:36:a0:f1:8a:d0:79:cf:81:dc:
f2:66:cd:22:47:06:f5:0e:0c:92:67:43:38:d4:5c:41:33:ae:
47:70:56:b8:c3:18:63:b6:e1:ef:91:5a:25:5f:bc:bc:d9:62:
8a:55:ee:4b:69:6c:44:cc:3b:d8:e7:06:7f:c9:34:81:83:1a:
8c:f7:f7:45:96:ef:13:4d:e9:20:a7:f2:1b:fc:3f:82:12:35:
db:3d:a3:81:5b:f3:79:91:12:e4:57:4d:9a:39:6a:6a:02:5b:
4e:85:ab:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:59:45 2026 by rpki-client