Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/WsLepHQuO4-EW1_SiMrm7B1nxng.roa
File: WsLepHQuO4-EW1_SiMrm7B1nxng.roa (raw, json)
Hash identifier: O1DEm/rKJEQCqBhj2LNbUY0epOkzQ7TMANqA5+dZe6Q=
Subject key identifier: 5A:C2:DE:A4:74:2E:3B:8F:84:5B:5F:D2:88:CA:E6:EC:1D:67:C6:78
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A1CBF6EF0053618DD4A9D2EA38935C1B48
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/WsLepHQuO4-EW1_SiMrm7B1nxng.roa
Signing time: Wed 11 Nov 2026 18:55:20 +0000
ROA not before: Wed 11 Nov 2026 18:55:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6282
IP address blocks: 84.236.134.0/23 maxlen: 23
93.119.29.0/24 maxlen: 24
176.227.159.0/24 maxlen: 24
217.61.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:f6:ef:00:53:61:8d:d4:a9:d2:ea:38:93:5c:1b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Nov 11 18:55:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ac2dea4742e3b8f845b5fd288cae6ec1d67c678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:5e:24:74:df:5d:9c:79:ad:4e:92:6a:b9:
18:3b:41:49:53:ef:61:3b:46:5e:3d:fb:e6:ad:3f:
aa:90:2f:e7:dd:0f:ef:cd:61:d7:24:93:39:99:9f:
bd:6a:c9:33:47:22:fd:46:09:a9:c7:1d:49:b5:0f:
df:96:01:13:b3:7a:f8:8a:27:fb:2e:69:db:b8:8b:
36:77:1c:67:f1:5a:c4:2a:c5:b4:fe:3b:c5:1e:53:
4e:5c:0f:29:71:89:52:5b:72:b7:ac:68:da:80:da:
11:5a:86:40:ac:2e:38:c2:27:8e:b9:ab:d6:de:67:
6b:5e:8d:81:2c:d8:6b:99:0f:8c:d7:5f:42:b1:cb:
8e:82:d3:98:9c:5d:90:a9:3a:ff:5b:75:84:c5:ef:
a6:d3:44:be:6f:85:4f:db:ad:f7:69:52:4f:82:b7:
c8:cc:94:ac:32:32:23:db:32:8e:71:da:ae:f8:f2:
09:26:11:3f:43:86:1f:8f:3e:e9:45:ab:7b:1d:f7:
2f:21:93:64:04:b5:9f:1e:c3:fc:08:fe:fb:f4:e3:
9a:8b:27:32:45:b7:74:3c:02:ba:7d:7f:41:e7:07:
15:2a:d0:e6:f3:e2:e6:b4:b6:81:1e:d5:30:3a:da:
74:56:cc:f3:d3:70:98:f1:f2:97:18:e9:59:05:ea:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:DE:A4:74:2E:3B:8F:84:5B:5F:D2:88:CA:E6:EC:1D:67:C6:78
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/WsLepHQuO4-EW1_SiMrm7B1nxng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.134.0/23
93.119.29.0/24
176.227.159.0/24
217.61.86.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:4f:8c:fe:c5:b0:50:6e:9a:aa:d9:83:8d:51:14:48:60:6c:
6c:ce:b8:cb:0f:8c:98:f0:4f:7a:01:99:16:ca:34:ad:31:97:
2b:1f:89:23:69:ab:6b:61:72:13:94:9b:c3:36:09:ec:4e:1b:
04:e1:d2:f2:37:d0:2b:99:bc:a2:f0:e5:9c:0c:f0:10:a2:4f:
72:53:59:57:17:7e:4f:bc:73:9d:b5:27:97:3b:c8:95:87:df:
ad:35:9c:de:78:a8:8c:71:3c:86:eb:14:cf:b0:88:d4:c5:ba:
94:e2:8b:69:4f:13:23:83:f1:4a:bf:ae:07:32:06:0b:0c:39:
a7:d0:c9:fd:74:20:a6:71:0e:db:e1:af:37:ed:fc:b5:c6:3c:
33:df:fb:98:d4:57:45:8a:bc:fd:28:a8:37:b8:5d:89:ef:a4:
eb:26:20:ab:1c:60:e7:cd:f6:d0:75:83:ec:ec:58:eb:ca:71:
fa:a0:f6:65:af:8d:b7:a0:d9:f1:33:af:86:d2:af:92:99:4c:
f1:a1:de:12:e6:eb:67:fd:2c:b4:f5:19:ee:4b:ed:c8:d6:28:
ca:f0:28:01:7a:54:c6:19:8b:54:4a:58:c9:d3:49:a9:06:9c:
47:fb:b3:bb:14:e7:67:a0:83:09:ad:5e:aa:25:98:c4:45:b2:
50:88:66:9b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaHL9u8AU2GN1KnS6jiTXBtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjYxMTExMTg1NTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWMyZGVhNDc0MmUzYjhmODQ1YjVmZDI4OGNhZTZlYzFkNjdjNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYNeJHTfXZx5rU6SarkYO0FJU+9h
O0ZePfvmrT+qkC/n3Q/vzWHXJJM5mZ+9askzRyL9Rgmpxx1JtQ/flgETs3r4iif7
LmnbuIs2dxxn8VrEKsW0/jvFHlNOXA8pcYlSW3K3rGjagNoRWoZArC44wieOuavW
3mdrXo2BLNhrmQ+M119CscuOgtOYnF2QqTr/W3WExe+m00S+b4VP2633aVJPgrfI
zJSsMjIj2zKOcdqu+PIJJhE/Q4Yfjz7pRat7HfcvIZNkBLWfHsP8CP779OOaiycy
Rbd0PAK6fX9B5wcVKtDm8+LmtLaBHtUwOtp0Vszz03CY8fKXGOlZBeocBQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFrC3qR0LjuPhFtf0ojK5uwdZ8Z4MB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvV3NMZXBIUXVPNC1FVzFfU2lNcm03QjFueG5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBVOyGAwQA
XXcdAwQAsOOfAwQA2T1WMA0GCSqGSIb3DQEBCwUAA4IBAQDLT4z+xbBQbpqq2YON
URRIYGxszrjLD4yY8E96AZkWyjStMZcrH4kjaatrYXITlJvDNgnsThsE4dLyN9Ar
mbyi8OWcDPAQok9yU1lXF35PvHOdtSeXO8iVh9+tNZzeeKiMcTyG6xTPsIjUxbqU
4otpTxMjg/FKv64HMgYLDDmn0Mn9dCCmcQ7b4a837fy1xjwz3/uY1FdFirz9KKg3
uF2J76TrJiCrHGDnzfbQdYPs7FjrynH6oPZlr423oNnxM6+G0q+SmUzxod4S5utn
/Sy09RnuS+3I1ijK8CgBelTGGYtUSljJ00mpBpxH+7O7FOdnoIMJrV6qJZjERbJQ
iGab
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:50 2026 by rpki-client