Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/WqvF3xaAU5g9ZqYeaGr7TNyDSPg.roa
File: WqvF3xaAU5g9ZqYeaGr7TNyDSPg.roa (raw, json)
Hash identifier: 8K9lIrtuYoWxMoTshzYwykTSdth4hFzLqIUp7nfiqiw=
Subject key identifier: 5A:AB:C5:DF:16:80:53:98:3D:66:A6:1E:68:6A:FB:4C:DC:83:48:F8
Certificate issuer: /CN=f482bae58eb745543ad5196781028108a7075ec3
Certificate serial: 019F23685BEAA4EFE9783DFA77094B7401A9
Authority key identifier: F4:82:BA:E5:8E:B7:45:54:3A:D5:19:67:81:02:81:08:A7:07:5E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IK65Y63RVQ61RlngQKBCKcHXsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/WqvF3xaAU5g9ZqYeaGr7TNyDSPg.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213513
IP address blocks: 91.198.40.0/24 maxlen: 24
2a13:5700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IK65Y63RVQ61RlngQKBCKcHXsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5b:ea:a4:ef:e9:78:3d:fa:77:09:4b:74:01:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f482bae58eb745543ad5196781028108a7075ec3
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5aabc5df168053983d66a61e686afb4cdc8348f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:ea:d1:0a:0c:4c:95:2e:9c:54:0b:82:d6:
0d:12:67:24:52:d0:82:f0:11:00:d4:c2:50:35:3a:
74:f7:c2:0f:04:c8:6c:86:4c:f6:af:56:65:2b:b0:
b2:20:15:ae:cb:e2:88:09:8d:1e:50:fe:88:73:51:
7b:4f:e8:b7:2f:da:d7:9f:d1:7a:38:5f:a7:a7:9b:
26:49:11:6b:35:d9:6c:4c:95:e1:26:62:c2:a7:06:
db:47:64:b1:88:89:f3:9d:e2:83:23:90:1f:2f:a4:
df:2f:8c:fb:05:35:15:7c:d0:87:a5:00:a4:7f:9e:
50:f0:bb:a2:07:45:22:80:27:8b:49:e3:27:bc:54:
27:5e:b5:a2:76:1a:14:7a:da:ca:ed:21:2b:8d:4c:
fc:58:fc:a7:14:ad:0d:88:89:96:bc:83:ec:cd:ad:
ad:7a:84:2f:ae:b8:48:2b:d4:04:11:22:22:86:2a:
15:f8:23:65:11:5d:81:96:14:96:72:03:88:20:0b:
d4:78:29:fb:db:e2:24:d5:23:77:62:17:4b:b4:f8:
a8:36:55:d1:f4:59:73:a5:ee:ea:a8:3f:20:da:db:
93:59:92:e4:43:e3:87:b6:fa:1a:5d:8c:c5:32:30:
28:7c:f5:12:0d:99:43:df:04:da:6f:21:f8:0e:f2:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AB:C5:DF:16:80:53:98:3D:66:A6:1E:68:6A:FB:4C:DC:83:48:F8
X509v3 Authority Key Identifier:
keyid:F4:82:BA:E5:8E:B7:45:54:3A:D5:19:67:81:02:81:08:A7:07:5E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IK65Y63RVQ61RlngQKBCKcHXsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/WqvF3xaAU5g9ZqYeaGr7TNyDSPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.40.0/24
IPv6:
2a13:5700::/29
Signature Algorithm: sha256WithRSAEncryption
95:f7:d0:34:79:6a:c2:a6:e9:0e:dd:89:1a:2d:5a:57:b1:02:
2b:7a:d9:14:3b:9c:0b:de:98:dd:e8:8e:06:85:27:cb:d8:17:
2b:fa:bc:7c:bf:52:de:5b:ee:c1:16:c2:f3:73:bb:35:37:26:
a7:17:d9:3a:55:95:df:79:b8:ce:e7:b3:80:2e:09:07:cc:d4:
7b:14:9d:5b:49:a4:2c:11:1e:af:64:59:79:7c:f2:61:48:a2:
3c:c4:12:23:fb:73:f6:f6:1b:a9:f6:62:c6:76:71:ed:2b:12:
9a:28:7e:12:ae:6e:17:80:b3:d9:22:bd:82:49:0f:62:46:da:
38:c9:5b:0b:11:f9:4f:b2:cd:10:62:49:13:07:64:b3:6a:f0:
dc:dd:65:c7:de:5e:f7:45:fc:21:11:63:5f:b3:17:6e:69:74:
b3:dc:04:0a:51:b6:b4:60:2a:c9:de:26:64:fc:54:30:63:ea:
53:61:73:0e:b5:27:b0:d6:84:41:e5:ce:f8:85:2c:cf:9c:28:
23:b0:bf:1e:b2:a5:ac:ce:d0:99:e7:7b:73:99:64:00:8f:fe:
3a:61:53:2c:7c:37:a3:1f:9d:07:49:01:bd:8a:f2:0f:dc:db:
e8:74:77:6e:aa:30:ed:7c:34:5e:58:60:a1:63:dc:b0:0b:6c:
5e:69:a5:67
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaFvqpO/peD36dwlLdAGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODJiYWU1OGViNzQ1NTQzYWQ1MTk2NzgxMDI4MTA4YTcw
NzVlYzMwHhcNMjYwNzAyMTUxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWFiYzVkZjE2ODA1Mzk4M2Q2NmE2MWU2ODZhZmI0Y2RjODM0OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q3q0QoMTJUunFQLgtYNEmckUtCC
8BEA1MJQNTp098IPBMhshkz2r1ZlK7CyIBWuy+KICY0eUP6Ic1F7T+i3L9rXn9F6
OF+np5smSRFrNdlsTJXhJmLCpwbbR2SxiInzneKDI5AfL6TfL4z7BTUVfNCHpQCk
f55Q8LuiB0UigCeLSeMnvFQnXrWidhoUetrK7SErjUz8WPynFK0NiImWvIPsza2t
eoQvrrhIK9QEESIihioV+CNlEV2BlhSWcgOIIAvUeCn72+Ik1SN3YhdLtPioNlXR
9Flzpe7qqD8g2tuTWZLkQ+OHtvoaXYzFMjAofPUSDZlD3wTabyH4DvI2jQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFqrxd8WgFOYPWamHmhq+0zcg0j4MB8GA1UdIwQY
MBaAFPSCuuWOt0VUOtUZZ4ECgQinB17DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlLNjVZNjNSVlE2MVJsbmdRS0JDS2NIWHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUt
MzkxNzY4NTczNDk2LzEvV3F2RjN4YUFVNWc5WnFZZWFHcjdUTnlEU1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUtMzkxNzY4NTczNDk2
LzEvOUlLNjVZNjNSVlE2MVJsbmdRS0JDS2NIWHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8YoMA0E
AgACMAcDBQMqE1cAMA0GCSqGSIb3DQEBCwUAA4IBAQCV99A0eWrCpukO3YkaLVpX
sQIretkUO5wL3pjd6I4GhSfL2Bcr+rx8v1LeW+7BFsLzc7s1NyanF9k6VZXfebjO
57OALgkHzNR7FJ1bSaQsER6vZFl5fPJhSKI8xBIj+3P29hup9mLGdnHtKxKaKH4S
rm4XgLPZIr2CSQ9iRto4yVsLEflPss0QYkkTB2SzavDc3WXH3l73RfwhEWNfsxdu
aXSz3AQKUba0YCrJ3iZk/FQwY+pTYXMOtSew1oRB5c74hSzPnCgjsL8esqWsztCZ
53tzmWQAj/46YVMsfDejH50HSQG9ivIP3NvodHduqjDtfDReWGChY9ywC2xeaaVn
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:46 2026 by rpki-client