Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/WsI_nW9qnPLCtVlHzCVaQsetLCU.roa
File: WsI_nW9qnPLCtVlHzCVaQsetLCU.roa (raw, json)
Hash identifier: QJQPXZjkqKKA5+2yTbyoIEgkVJbrTiSKP+ep+7dHv6E=
Subject key identifier: 5A:C2:3F:9D:6F:6A:9C:F2:C2:B5:59:47:CC:25:5A:42:C7:AD:2C:25
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 01A0C4837F9ECD81C6BC227A5426D0905803
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/WsI_nW9qnPLCtVlHzCVaQsetLCU.roa
Signing time: Mon 21 Sep 2026 15:09:07 +0000
ROA not before: Mon 21 Sep 2026 15:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209974
IP address blocks: 46.243.180.0/24 maxlen: 24
46.243.181.0/24 maxlen: 24
46.243.182.0/24 maxlen: 24
46.243.184.0/24 maxlen: 24
46.243.185.0/24 maxlen: 24
77.105.148.0/24 maxlen: 24
77.105.149.0/24 maxlen: 24
77.105.152.0/23 maxlen: 23
77.105.154.0/23 maxlen: 23
78.140.240.0/22 maxlen: 22
89.169.20.0/24 maxlen: 24
89.169.21.0/24 maxlen: 24
89.169.22.0/24 maxlen: 24
89.169.23.0/24 maxlen: 24
93.183.72.0/24 maxlen: 24
93.183.73.0/24 maxlen: 24
93.183.74.0/24 maxlen: 24
93.183.75.0/24 maxlen: 24
93.183.76.0/24 maxlen: 24
93.183.78.0/24 maxlen: 24
178.170.224.0/24 maxlen: 24
185.5.204.0/24 maxlen: 24
185.5.205.0/24 maxlen: 24
188.227.32.0/24 maxlen: 24
188.227.33.0/24 maxlen: 24
188.227.34.0/24 maxlen: 24
195.88.192.0/23 maxlen: 23
2a0e:aac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:83:7f:9e:cd:81:c6:bc:22:7a:54:26:d0:90:58:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Sep 21 15:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ac23f9d6f6a9cf2c2b55947cc255a42c7ad2c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:fa:fa:86:15:93:1c:5b:03:c9:ee:f9:22:
48:37:20:cb:8e:d2:1b:09:44:ba:a4:e0:95:71:63:
c9:28:75:b3:65:01:e6:ab:19:b4:31:0b:05:4d:55:
58:55:fa:5d:1c:0a:05:2a:14:8d:68:91:c7:89:18:
4d:a9:e8:21:59:f6:7f:98:a1:db:2c:2b:1a:08:6e:
c7:db:d1:63:af:c5:0a:d4:78:d9:fa:57:1f:a0:53:
51:35:6f:41:2b:02:34:c8:20:4f:ea:fc:77:fb:ca:
04:a3:a2:a5:dd:51:52:7b:ab:1e:24:f0:fc:7d:de:
9b:93:92:ec:27:11:03:d3:0d:0d:38:e3:fc:87:07:
64:25:04:46:0d:8a:cf:c2:8e:c1:d7:3a:71:b8:74:
83:8e:58:3f:e0:d2:93:2f:85:3b:70:8a:4e:de:f6:
52:ae:92:4a:1c:5c:a9:2c:ce:ef:98:44:62:0e:1c:
a5:45:0e:93:d2:a7:de:b8:5e:5d:8d:a4:97:5b:cb:
6a:28:ea:e9:21:c7:89:f3:f9:cf:27:a1:17:9b:3b:
0d:3e:77:3f:aa:8e:44:b5:19:f2:0d:68:bc:37:e9:
fc:85:86:30:ff:39:5f:08:7b:b1:1b:96:f5:66:f1:
a4:9b:f8:0c:30:3f:65:a8:1f:a6:16:02:a6:1a:c9:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:3F:9D:6F:6A:9C:F2:C2:B5:59:47:CC:25:5A:42:C7:AD:2C:25
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/WsI_nW9qnPLCtVlHzCVaQsetLCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.180.0-46.243.182.255
46.243.184.0/23
77.105.148.0/23
77.105.152.0/22
78.140.240.0/22
89.169.20.0/22
93.183.72.0-93.183.76.255
93.183.78.0/24
178.170.224.0/24
185.5.204.0/23
188.227.32.0-188.227.34.255
195.88.192.0/23
IPv6:
2a0e:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
46:46:bd:65:11:85:5e:43:f4:10:68:1f:58:13:28:37:36:e6:
15:f6:f3:d8:82:4b:f1:34:03:66:ce:f8:7c:d0:06:47:b5:93:
7f:12:fe:e1:c9:1b:de:31:65:fe:81:56:7b:a4:c4:ac:17:be:
26:77:e7:64:bf:c5:c4:ff:ed:fa:8e:73:55:1a:b3:11:ca:19:
dc:67:42:fd:30:5e:2b:a6:7a:44:d1:8b:a1:d8:13:b4:42:f0:
ba:4f:9f:0c:1d:65:c5:5f:d6:b8:b7:bf:43:10:9c:05:ba:49:
18:de:8d:3c:60:63:fa:42:70:cc:78:9d:f4:0e:35:8a:f3:74:
f7:d1:99:37:10:9f:fd:0d:c4:d8:70:17:b5:0e:24:a4:4c:e9:
79:7b:a8:57:72:7b:a6:3c:7f:47:7d:fe:bf:ce:68:dd:b5:32:
c3:c5:41:1f:02:a1:37:4c:22:47:ba:c8:48:fd:c8:02:85:40:
c7:93:82:06:e6:e7:15:07:ec:7b:b9:da:c9:b0:12:3f:aa:3d:
06:a8:b8:91:ad:98:75:88:5e:93:65:72:d1:ba:36:5a:fc:79:
92:44:74:ed:c0:41:97:8e:78:bf:39:40:60:67:8e:69:c3:40:
89:7d:c1:68:93:ca:f3:dd:aa:e4:e5:3e:b9:bd:39:51:10:cc:
28:82:5f:8c
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgISAaDEg3+ezYHGvCJ6VCbQkFgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm
YmFhMDAwHhcNMjYwOTIxMTUwOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWMyM2Y5ZDZmNmE5Y2YyYzJiNTU5NDdjYzI1NWE0MmM3YWQyYzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8X6+oYVkxxbA8nu+SJINyDLjtIb
CUS6pOCVcWPJKHWzZQHmqxm0MQsFTVVYVfpdHAoFKhSNaJHHiRhNqeghWfZ/mKHb
LCsaCG7H29Fjr8UK1HjZ+lcfoFNRNW9BKwI0yCBP6vx3+8oEo6Kl3VFSe6seJPD8
fd6bk5LsJxED0w0NOOP8hwdkJQRGDYrPwo7B1zpxuHSDjlg/4NKTL4U7cIpO3vZS
rpJKHFypLM7vmERiDhylRQ6T0qfeuF5djaSXW8tqKOrpIceJ8/nPJ6EXmzsNPnc/
qo5EtRnyDWi8N+n8hYYw/zlfCHuxG5b1ZvGkm/gMMD9lqB+mFgKmGslEUQIDAQAB
o4ICczCCAm8wHQYDVR0OBBYEFFrCP51vapzywrVZR8wlWkLHrSwlMB8GA1UdIwQY
MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt
NzcwMGUyNWZmNzY5LzEvV3NJX25XOXFuUExDdFZsSHpDVmFRc2V0TENVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5
LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYDAMAwQCLvO0
AwQALvO2AwQBLvO4AwQBTWmUAwQCTWmYAwQCTozwAwQCWakUMAwDBANdt0gDBABd
t0wDBABdt04DBACyquADBAG5BcwwDAMEBbzjIAMEALzjIgMEAcNYwDANBAIAAjAH
AwUAKg6qwDANBgkqhkiG9w0BAQsFAAOCAQEARka9ZRGFXkP0EGgfWBMoNzbmFfbz
2IJL8TQDZs74fNAGR7WTfxL+4ckb3jFl/oFWe6TErBe+JnfnZL/FxP/t+o5zVRqz
EcoZ3GdC/TBeK6Z6RNGLodgTtELwuk+fDB1lxV/WuLe/QxCcBbpJGN6NPGBj+kJw
zHid9A41ivN099GZNxCf/Q3E2HAXtQ4kpEzpeXuoV3J7pjx/R33+v85o3bUyw8VB
HwKhN0wiR7rISP3IAoVAx5OCBubnFQfse7naybASP6o9Bqi4ka2YdYhek2Vy0bo2
Wvx5kkR07cBBl454vzlAYGeOacNAiX3BaJPK892q5OU+ub05URDMKIJfjA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:47:58 2026 by rpki-client