Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CWSmEluQCj7MpeRF_VxnuQVT-ew.roa
File: CWSmEluQCj7MpeRF_VxnuQVT-ew.roa (raw, json)
Hash identifier: FuKw7s1OCGAYc1lKVFbzop2ft3sTRj3PIwIvG5DdlBI=
Subject key identifier: 09:64:A6:12:5B:90:0A:3E:CC:A5:E4:45:FD:5C:67:B9:05:53:F9:EC
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01A1AC2CDD53582A47AB812705AFB04F0AC5
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CWSmEluQCj7MpeRF_VxnuQVT-ew.roa
Signing time: Thu 05 Nov 2026 14:46:23 +0000
ROA not before: Thu 05 Nov 2026 14:46:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43215
IP address blocks: 37.230.251.0/24 maxlen: 24
178.170.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:2c:dd:53:58:2a:47:ab:81:27:05:af:b0:4f:0a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Nov 5 14:46:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0964a6125b900a3ecca5e445fd5c67b90553f9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:6d:b4:73:20:1b:48:34:63:0e:66:2f:c1:
c0:05:f6:9b:99:e6:c8:fb:28:9f:c6:a8:9b:b2:5c:
3a:4c:71:84:bb:01:69:d7:bc:a5:b5:55:f8:33:73:
5f:d4:28:f1:72:c2:2e:f8:10:6b:f0:61:59:38:98:
cb:50:26:4f:42:60:90:3f:9b:89:42:5b:c7:a2:21:
67:43:5b:36:04:09:d1:4b:e9:50:a6:f0:3c:da:fe:
0f:17:9a:6a:52:fa:72:fa:48:fe:58:99:16:53:34:
3b:f7:2e:66:9a:87:15:3e:7b:96:f7:9f:97:d8:76:
93:33:27:b4:e7:cd:4a:ab:41:9c:ac:cc:da:4f:0d:
1e:a6:a9:0e:00:2d:4c:2b:d9:b1:c0:0f:6f:bb:9c:
ee:e6:57:75:1e:50:cf:f9:4b:1d:6b:82:24:2f:9e:
b8:84:39:c2:c2:b7:83:6c:ec:69:76:29:68:5a:30:
95:49:2c:51:c5:ca:5b:9f:3a:6e:7a:d6:1f:59:28:
7a:10:12:aa:4a:3e:a1:09:4a:54:a2:1f:2a:49:be:
b3:60:ba:be:d1:a6:81:6e:b7:3f:fa:6b:f1:08:33:
27:f9:cf:53:12:27:e5:a1:3c:aa:f1:88:6d:8c:8f:
cc:d1:78:30:7e:cf:f3:d3:e7:ab:15:b2:15:95:7b:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:64:A6:12:5B:90:0A:3E:CC:A5:E4:45:FD:5C:67:B9:05:53:F9:EC
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CWSmEluQCj7MpeRF_VxnuQVT-ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.251.0/24
178.170.236.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e2:be:b5:06:1b:49:e1:16:58:d4:f8:82:80:7c:2e:5a:58:
6a:30:70:9c:dd:f4:61:85:b2:26:e5:3e:00:52:81:79:30:3e:
2f:17:16:44:52:b0:de:33:51:bc:25:f3:9b:ff:18:c6:81:53:
b7:0e:dd:66:16:ce:ae:42:76:90:85:5e:b7:73:80:89:bd:02:
74:ff:94:29:f6:fa:fc:6b:d5:98:c3:2a:05:6a:6d:49:18:27:
a7:1d:c6:ab:43:41:0c:8d:f5:6b:5f:44:79:b2:fd:7e:22:27:
4e:fb:14:e2:af:3a:6a:9c:f0:34:98:00:07:b4:72:32:c5:bf:
c2:20:b9:98:69:00:9f:63:c1:de:c5:b3:38:f3:e2:35:9b:d1:
b4:91:d1:80:c1:56:25:d3:5c:13:3b:fd:5a:35:c3:c4:b2:59:
90:f0:c5:78:f8:10:74:e1:7f:4c:7c:f7:3e:b2:36:bd:78:b0:
d4:b0:c9:03:30:8d:a6:cb:d4:80:7f:d2:40:ce:0b:c8:68:4d:
e8:83:f8:93:62:04:8c:93:7f:70:f7:e3:39:14:f8:0c:0f:e1:
85:50:57:dd:29:63:1d:e7:74:0c:86:9b:04:ef:f2:9f:ad:e6:
63:3e:97:85:61:da:47:9a:9a:13:8f:3f:bc:1f:d7:8c:44:2f:
8f:f4:24:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGsLN1TWCpHq4EnBa+wTwrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjYxMTA1MTQ0NjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTY0YTYxMjViOTAwYTNlY2NhNWU0NDVmZDVjNjdiOTA1NTNmOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArphttHMgG0g0Yw5mL8HABfabmebI
+yifxqibslw6THGEuwFp17yltVX4M3Nf1CjxcsIu+BBr8GFZOJjLUCZPQmCQP5uJ
QlvHoiFnQ1s2BAnRS+lQpvA82v4PF5pqUvpy+kj+WJkWUzQ79y5mmocVPnuW95+X
2HaTMye0581Kq0GcrMzaTw0epqkOAC1MK9mxwA9vu5zu5ld1HlDP+Usda4IkL564
hDnCwreDbOxpdiloWjCVSSxRxcpbnzpuetYfWSh6EBKqSj6hCUpUoh8qSb6zYLq+
0aaBbrc/+mvxCDMn+c9TEifloTyq8YhtjI/M0Xgwfs/z0+erFbIVlXtEUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAlkphJbkAo+zKXkRf1cZ7kFU/nsMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvQ1dTbUVsdVFDajdNcGVSRl9WeG51UVZULWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJeb7AwQA
sqrsMA0GCSqGSIb3DQEBCwUAA4IBAQAo4r61BhtJ4RZY1PiCgHwuWlhqMHCc3fRh
hbIm5T4AUoF5MD4vFxZEUrDeM1G8JfOb/xjGgVO3Dt1mFs6uQnaQhV63c4CJvQJ0
/5Qp9vr8a9WYwyoFam1JGCenHcarQ0EMjfVrX0R5sv1+IidO+xTirzpqnPA0mAAH
tHIyxb/CILmYaQCfY8HexbM48+I1m9G0kdGAwVYl01wTO/1aNcPEslmQ8MV4+BB0
4X9MfPc+sja9eLDUsMkDMI2my9SAf9JAzgvIaE3og/iTYgSMk39w9+M5FPgMD+GF
UFfdKWMd53QMhpsE7/KfreZjPpeFYdpHmpoTjz+8H9eMRC+P9CR2
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:41 2026 by rpki-client