Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W5We-vsW99dvMvXlcJ9k_PtVzgQ.roa
File: W5We-vsW99dvMvXlcJ9k_PtVzgQ.roa (raw, json)
Hash identifier: IVJbc61j8Ek+I/LHbDBVMkMAoHtmD14UpnRfFy6uyJI=
Subject key identifier: 5B:95:9E:FA:FB:16:F7:D7:6F:32:F5:E5:70:9F:64:FC:FB:55:CE:04
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0CD16F0BBEDA7A640EEE1946624DE3786
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W5We-vsW99dvMvXlcJ9k_PtVzgQ.roa
Signing time: Wed 23 Sep 2026 07:07:07 +0000
ROA not before: Wed 23 Sep 2026 07:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199899
IP address blocks: 5.181.43.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.118.250.0/24 maxlen: 24
45.137.84.0/24 maxlen: 24
45.139.86.0/24 maxlen: 24
45.146.89.0/24 maxlen: 24
45.151.104.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.91.146.0/24 maxlen: 24
103.229.28.0/24 maxlen: 24
167.94.162.0/24 maxlen: 24
185.9.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:16:f0:bb:ed:a7:a6:40:ee:e1:94:66:24:de:37:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 23 07:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b959efafb16f7d76f32f5e5709f64fcfb55ce04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:7a:ed:aa:be:97:22:f5:f3:6b:fc:a0:36:
98:37:a2:29:d9:44:78:d4:d0:8a:ce:bb:f0:20:92:
ea:74:76:76:76:92:a2:7e:b4:5d:38:b7:e9:f2:63:
76:b3:ca:ee:6c:b1:bc:2c:b7:48:80:1c:4a:ec:10:
6b:67:02:d1:8e:ab:3d:b0:a0:3f:c5:6f:bb:e8:f0:
1c:34:7a:06:dd:c4:4d:37:74:b8:7c:59:6e:55:44:
9d:36:3e:31:15:51:e2:68:4e:95:7e:44:b1:58:bc:
68:22:18:9e:df:b0:9d:d2:4e:f8:ca:cb:4d:9c:a8:
19:fd:91:29:6b:c7:f2:a1:d0:2c:ff:64:63:03:b4:
cd:1a:68:18:d3:91:94:eb:de:04:8c:ab:b8:36:cc:
a7:ea:04:1b:8e:6f:42:5c:1b:c6:1e:a4:c5:10:b6:
3c:b2:48:c6:8e:c3:4c:db:bf:b1:ed:b0:46:cc:50:
11:75:49:94:82:02:60:47:f7:8b:ee:31:c4:9a:c6:
f8:a8:1b:3a:c6:2a:be:08:73:d1:af:d4:14:89:e8:
8d:a1:a6:a7:c6:63:c9:22:93:49:b2:30:ec:be:9b:
e2:6f:61:0a:4b:cc:de:2d:21:be:cc:b8:d0:b8:91:
d5:bc:3c:25:4c:0a:7f:e3:43:96:75:c3:44:0d:8b:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:9E:FA:FB:16:F7:D7:6F:32:F5:E5:70:9F:64:FC:FB:55:CE:04
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W5We-vsW99dvMvXlcJ9k_PtVzgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.43.0/24
45.9.122.0/24
45.118.250.0/24
45.137.84.0/24
45.139.86.0/24
45.146.89.0/24
45.151.104.0/24
85.209.128.0/24
103.91.146.0/24
103.229.28.0/24
167.94.162.0/24
185.9.52.0/24
Signature Algorithm: sha256WithRSAEncryption
94:00:2b:11:6c:5f:28:51:ca:57:46:6b:ca:ff:c5:72:8d:14:
f2:97:b7:ab:7c:80:cf:10:da:c1:7f:81:40:81:eb:40:9a:09:
c0:c8:52:39:de:8a:67:33:29:42:b4:b2:c5:6e:9e:8c:75:18:
80:37:89:d4:10:1e:b1:b1:9d:26:72:d0:97:d5:1b:4e:e9:4a:
11:4e:b1:3a:d9:17:59:ad:5c:5e:56:0b:cc:66:4f:a3:6d:c8:
1c:d8:37:ed:59:c5:25:a7:fb:ea:5c:fb:c9:00:83:20:94:05:
31:41:99:01:0e:0d:06:8c:e1:c4:0c:93:8f:15:39:74:f8:49:
9e:63:be:49:bb:f7:5d:47:04:6e:55:4f:8d:d0:ad:94:5d:a2:
8f:d3:32:8a:fe:e5:ef:1b:09:da:d1:35:b6:3d:44:36:f0:d1:
44:9a:5d:f9:1f:04:f1:f8:19:7e:ba:45:7e:8a:4d:d8:93:97:
82:bd:f3:2e:34:19:1a:b4:e7:df:58:fe:53:68:e4:0b:1c:9b:
96:c0:05:46:03:cd:3a:15:4c:cf:bd:0d:0b:d2:16:5e:02:18:
ab:b5:af:6a:4d:3e:5b:d1:9a:48:70:7e:e8:75:4d:12:49:e3:
7a:61:b5:f2:df:e4:58:10:d9:9f:62:ce:bc:b5:6c:46:38:d2:
90:92:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:33:26 2026 by rpki-client