Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/wLvmDuYgph_xW_HmKa5TI2eFe8g.roa
File: wLvmDuYgph_xW_HmKa5TI2eFe8g.roa (raw, json)
Hash identifier: qmBeschUBslaG7/fRSSItMAUXj1DcvRjrdWGWCgrhXg=
Subject key identifier: C0:BB:E6:0E:E6:20:A6:1F:F1:5B:F1:E6:29:AE:53:23:67:85:7B:C8
Certificate issuer: /CN=bfec74390b9bfe146b7e93e92e9895042098e643
Certificate serial: 01A0CE0FF5AD4AD2EE2ECEF0D039B5BCAC23
Authority key identifier: BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/wLvmDuYgph_xW_HmKa5TI2eFe8g.roa
Signing time: Wed 23 Sep 2026 11:39:07 +0000
ROA not before: Wed 23 Sep 2026 11:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196851
IP address blocks: 46.18.0.0/24 maxlen: 24
81.90.231.0/24 maxlen: 24
81.90.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:0f:f5:ad:4a:d2:ee:2e:ce:f0:d0:39:b5:bc:ac:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfec74390b9bfe146b7e93e92e9895042098e643
Validity
Not Before: Sep 23 11:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0bbe60ee620a61ff15bf1e629ae532367857bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:02:28:95:cc:58:75:7b:1e:59:ec:9d:62:
47:47:46:41:31:f6:70:7b:d9:4d:3f:95:95:40:8f:
33:ee:ab:40:a5:87:bd:fb:d0:4f:f0:e6:e2:37:2f:
78:cc:e6:8f:32:cf:60:9c:d0:0a:ba:e5:ae:e1:95:
e5:6b:25:9a:58:dc:87:e7:3b:83:fd:c3:be:8f:b8:
38:4d:7d:35:2c:0d:d8:67:2b:60:5e:9f:dd:c5:d7:
ca:9b:55:3e:a5:43:14:7d:7a:1a:25:3c:b5:07:e3:
bb:4e:df:7c:3f:3c:55:26:07:9b:4a:1c:e1:b9:77:
0b:7d:14:fd:79:17:a8:8e:d7:a1:a5:5b:7d:6f:f2:
56:c0:e0:81:a2:4f:61:08:70:16:3e:a3:11:9f:bf:
3c:d4:80:25:cf:01:17:25:a9:2a:af:cf:39:bd:aa:
e9:fb:62:5e:cf:78:a0:25:10:e9:49:2c:46:3f:0d:
b7:46:92:4b:33:91:4b:29:23:3c:31:c1:98:71:3c:
25:19:e8:b1:22:cd:ca:c6:69:cc:55:6a:70:f0:0e:
ec:2e:5c:0a:a9:f1:5d:fe:1d:90:a9:ba:e9:ea:9b:
6b:33:40:cd:b6:8d:c0:fb:ce:2b:be:9d:2f:37:a3:
73:39:a7:95:8b:d5:46:d9:2b:ee:ec:01:c6:96:29:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:E6:0E:E6:20:A6:1F:F1:5B:F1:E6:29:AE:53:23:67:85:7B:C8
X509v3 Authority Key Identifier:
keyid:BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/wLvmDuYgph_xW_HmKa5TI2eFe8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.0.0/24
81.90.231.0-81.90.232.255
Signature Algorithm: sha256WithRSAEncryption
57:29:a1:5e:0d:c6:59:2d:1f:1a:a9:c9:75:d2:56:f7:dc:54:
06:69:1d:58:e1:c6:c9:fa:8e:b4:c5:37:33:fe:79:48:8b:ef:
a2:65:a0:9f:f4:88:96:13:d5:96:0b:41:ec:9a:a6:03:64:c5:
3f:5f:48:1c:60:f6:cd:37:08:29:6e:1f:cb:54:d9:bf:1d:07:
b3:bf:80:1a:c3:01:86:b6:f1:3d:7d:b2:12:32:14:c6:3a:c3:
fd:a0:fe:74:86:a6:6d:8e:03:a7:87:3d:81:6e:6c:6a:48:21:
02:6b:c8:01:a2:46:96:e5:4b:2f:a8:58:10:7b:d9:ed:a2:b7:
1d:75:29:f2:62:84:99:c0:16:e6:cf:bd:27:7f:a0:ea:b8:02:
24:09:69:8d:e4:a3:30:0e:2d:b2:36:aa:0d:17:4c:13:d3:7c:
ec:69:7d:d0:0d:66:50:43:0c:69:72:f6:62:77:1c:15:d7:3d:
dc:78:a8:49:95:f9:4d:4d:6d:b5:bb:2b:c6:6f:24:a0:45:2c:
f6:67:a4:4a:cc:1a:e0:d8:17:68:1f:31:29:08:14:f8:ac:c1:
8d:34:26:79:3c:a3:02:2a:04:82:b1:bc:ef:91:d9:c1:40:27:
71:6d:d8:80:da:69:0c:4e:fb:32:12:2d:13:40:f7:15:ab:ba:
ca:fb:b9:84
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaDOD/WtStLuLs7w0Dm1vKwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZWM3NDM5MGI5YmZlMTQ2YjdlOTNlOTJlOTg5NTA0MjA5
OGU2NDMwHhcNMjYwOTIzMTEzOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGJiZTYwZWU2MjBhNjFmZjE1YmYxZTYyOWFlNTMyMzY3ODU3YmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6gCKJXMWHV7HlnsnWJHR0ZBMfZw
e9lNP5WVQI8z7qtApYe9+9BP8ObiNy94zOaPMs9gnNAKuuWu4ZXlayWaWNyH5zuD
/cO+j7g4TX01LA3YZytgXp/dxdfKm1U+pUMUfXoaJTy1B+O7Tt98PzxVJgebShzh
uXcLfRT9eReojtehpVt9b/JWwOCBok9hCHAWPqMRn7881IAlzwEXJakqr885varp
+2Jez3igJRDpSSxGPw23RpJLM5FLKSM8McGYcTwlGeixIs3KxmnMVWpw8A7sLlwK
qfFd/h2Qqbrp6ptrM0DNto3A+84rvp0vN6NzOaeVi9VG2Svu7AHGlilP7wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMC75g7mIKYf8Vvx5imuUyNnhXvIMB8GA1UdIwQY
MBaAFL/sdDkLm/4Ua36T6S6YlQQgmOZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi14ME9RdWJfaFJyZnBQcExwaVZCQ0NZNWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84ZjA2NGUtMDliNC00NzJjLTlhYTQt
NTJjOWFmNjYwYjM3LzEvd0x2bUR1WWdwaF94V19IbUthNVRJMmVGZThnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84ZjA2NGUtMDliNC00NzJjLTlhYTQtNTJjOWFmNjYwYjM3
LzEvdi14ME9RdWJfaFJyZnBQcExwaVZCQ0NZNWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALhIAMAwD
BABRWucDBABRWugwDQYJKoZIhvcNAQELBQADggEBAFcpoV4NxlktHxqpyXXSVvfc
VAZpHVjhxsn6jrTFNzP+eUiL76JloJ/0iJYT1ZYLQeyapgNkxT9fSBxg9s03CClu
H8tU2b8dB7O/gBrDAYa28T19shIyFMY6w/2g/nSGpm2OA6eHPYFubGpIIQJryAGi
RpblSy+oWBB72e2itx11KfJihJnAFubPvSd/oOq4AiQJaY3kozAOLbI2qg0XTBPT
fOxpfdANZlBDDGly9mJ3HBXXPdx4qEmV+U1NbbW7K8ZvJKBFLPZnpErMGuDYF2gf
MSkIFPiswY00Jnk8owIqBIKxvO+R2cFAJ3Ft2IDaaQxO+zISLRNA9xWrusr7uYQ=
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:28:56 2026 by rpki-client