Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/WlSa4s52rbN1YrdI2sTxISuXgVs.roa
File: WlSa4s52rbN1YrdI2sTxISuXgVs.roa (raw, json)
Hash identifier: UFrSiCT3Ok3mVBZnw8kOQNxyLA+lThdQN1709llpw+A=
Subject key identifier: 5A:54:9A:E2:CE:76:AD:B3:75:62:B7:48:DA:C4:F1:21:2B:97:81:5B
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 019CB4126CA50675D0CC4489D4E59233F17A
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/WlSa4s52rbN1YrdI2sTxISuXgVs.roa
Signing time: Tue 03 Mar 2026 14:20:32 +0000
ROA not before: Tue 03 Mar 2026 14:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24641
IP address blocks: 77.240.176.0/20 maxlen: 24
81.19.0.0/20 maxlen: 24
85.132.144.0/20 maxlen: 24
95.129.96.0/21 maxlen: 21
185.146.4.0/22 maxlen: 22
193.200.251.0/24 maxlen: 24
2a02:e98::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:12:6c:a5:06:75:d0:cc:44:89:d4:e5:92:33:f1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Mar 3 14:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a549ae2ce76adb37562b748dac4f1212b97815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:fa:18:48:48:45:5e:a1:26:43:ff:cf:97:
75:08:3f:94:ff:3e:39:68:58:82:c6:38:ef:e3:2c:
0d:e6:84:ba:66:62:41:af:16:09:28:52:75:57:46:
7e:95:5b:45:17:97:dc:28:6d:6b:40:73:28:74:21:
eb:99:5a:7d:f6:c7:de:c7:86:8d:82:68:1a:bb:c1:
55:9d:45:9f:e1:f6:68:1d:50:9e:ca:db:21:df:58:
75:2d:e4:7e:95:8b:51:ff:aa:c2:af:5e:37:7a:59:
c6:99:fc:c2:36:8f:22:23:57:95:f6:47:d1:fa:6d:
e0:4e:71:42:5a:c8:d1:a4:e3:d7:f9:1c:0a:e5:b5:
63:90:92:52:b2:0b:3f:ee:7e:e9:ae:28:a6:f6:40:
da:61:27:f9:ae:c0:65:27:6a:9a:fc:f0:27:19:09:
86:84:ac:96:51:7a:2f:2c:bd:73:57:db:02:c2:b8:
b7:a6:c2:39:47:72:07:a7:9d:91:76:99:47:c1:77:
7e:8a:50:3e:c5:97:b6:34:68:ed:6e:ab:1a:f1:21:
3e:e0:54:fa:5f:9b:75:98:36:89:4e:3f:48:f5:0e:
6c:f5:d4:92:b3:fb:1c:c3:d2:f4:b3:e0:94:71:51:
56:75:05:31:6d:da:bd:cf:44:00:6a:32:a1:36:2d:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:9A:E2:CE:76:AD:B3:75:62:B7:48:DA:C4:F1:21:2B:97:81:5B
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/WlSa4s52rbN1YrdI2sTxISuXgVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.176.0/20
81.19.0.0/20
85.132.144.0/20
95.129.96.0/21
185.146.4.0/22
193.200.251.0/24
IPv6:
2a02:e98::/32
Signature Algorithm: sha256WithRSAEncryption
65:f6:76:74:05:43:a7:06:ad:c5:e0:bb:23:eb:56:2c:1f:9d:
b0:e4:d9:00:f5:47:60:66:0f:d1:57:5f:96:57:a1:ce:ad:0f:
ef:89:03:ff:fd:bb:ab:19:90:d7:82:83:9b:3c:56:f8:34:2d:
3e:72:8d:bc:56:ae:1a:cb:dd:00:cc:65:c4:26:f6:44:6d:99:
45:9d:f7:32:ed:2a:ec:24:ab:15:8c:e5:d8:18:82:50:8a:a1:
cd:7f:2d:a1:62:cf:db:b4:2f:5a:f5:99:2d:8b:8d:90:a1:99:
2b:4e:65:32:a0:92:6f:4a:50:c1:57:d2:a3:9c:25:13:60:df:
1f:a9:10:fe:8b:e6:12:81:13:32:aa:7e:52:6a:9e:dd:87:ce:
e5:cb:4f:3f:5d:a6:7b:51:41:27:d2:51:56:87:fa:d5:1a:c9:
bc:1d:75:92:b6:ed:b8:a0:f4:13:8e:43:c4:e0:e9:70:52:39:
80:2c:f1:7e:e0:7e:ae:71:0d:58:e4:fb:59:19:22:6e:cd:cc:
6d:20:8e:da:19:02:7a:2a:bb:23:ea:59:8d:40:96:cb:92:83:
d9:e8:55:f7:5b:c1:7f:6e:ab:7e:d4:8a:b1:97:dc:7a:04:a1:
28:80:80:4b:c0:5b:ed:9c:76:8e:a7:68:f2:18:45:2f:01:11:
39:d1:81:2b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZy0EmylBnXQzESJ1OWSM/F6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy
NGI0NDEwHhcNMjYwMzAzMTQyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTU0OWFlMmNlNzZhZGIzNzU2MmI3NDhkYWM0ZjEyMTJiOTc4MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMb6GEhIRV6hJkP/z5d1CD+U/z45
aFiCxjjv4ywN5oS6ZmJBrxYJKFJ1V0Z+lVtFF5fcKG1rQHModCHrmVp99sfex4aN
gmgau8FVnUWf4fZoHVCeytsh31h1LeR+lYtR/6rCr143elnGmfzCNo8iI1eV9kfR
+m3gTnFCWsjRpOPX+RwK5bVjkJJSsgs/7n7priim9kDaYSf5rsBlJ2qa/PAnGQmG
hKyWUXovLL1zV9sCwri3psI5R3IHp52RdplHwXd+ilA+xZe2NGjtbqsa8SE+4FT6
X5t1mDaJTj9I9Q5s9dSSs/scw9L0s+CUcVFWdQUxbdq9z0QAajKhNi2nfwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFFpUmuLOdq2zdWK3SNrE8SErl4FbMB8GA1UdIwQY
MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt
OWQ5NDM2NzFhOGEzLzEvV2xTYTRzNTJyYk4xWXJkSTJzVHhJU3VYZ1ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz
LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQETfCwAwQE
URMAAwQEVYSQAwQDX4FgAwQCuZIEAwQAwcj7MA0EAgACMAcDBQAqAg6YMA0GCSqG
SIb3DQEBCwUAA4IBAQBl9nZ0BUOnBq3F4Lsj61YsH52w5NkA9UdgZg/RV1+WV6HO
rQ/viQP//burGZDXgoObPFb4NC0+co28Vq4ay90AzGXEJvZEbZlFnfcy7SrsJKsV
jOXYGIJQiqHNfy2hYs/btC9a9Zkti42QoZkrTmUyoJJvSlDBV9KjnCUTYN8fqRD+
i+YSgRMyqn5Sap7dh87ly08/XaZ7UUEn0lFWh/rVGsm8HXWStu24oPQTjkPE4Olw
UjmALPF+4H6ucQ1Y5PtZGSJuzcxtII7aGQJ6Krsj6lmNQJbLkoPZ6FX3W8F/bqt+
1Iqxl9x6BKEogIBLwFvtnHaOp2jyGEUvARE50YEr
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:33:28 2026 by rpki-client