Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/w61E1hCplndQaYwgJPGhVmejCtk.roa
File: w61E1hCplndQaYwgJPGhVmejCtk.roa (raw, json)
Hash identifier: wq5aLPBuYqi3rwbmx6kjxZRM9VucY+nCs2mt9SSWsC4=
Subject key identifier: C3:AD:44:D6:10:A9:96:77:50:69:8C:20:24:F1:A1:56:67:A3:0A:D9
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 01A0CD9286CC0AA3ECA1F1D39D7925A44303
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/w61E1hCplndQaYwgJPGhVmejCtk.roa
Signing time: Wed 23 Sep 2026 09:22:07 +0000
ROA not before: Wed 23 Sep 2026 09:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51248
IP address blocks: 85.137.25.0/24 maxlen: 24
85.137.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:92:86:cc:0a:a3:ec:a1:f1:d3:9d:79:25:a4:43:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Sep 23 09:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3ad44d610a9967750698c2024f1a15667a30ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:b8:00:76:1c:81:64:07:da:2d:8c:e1:21:
2d:20:97:cf:10:2b:21:85:48:4a:77:71:e3:4d:61:
87:80:d9:be:bc:72:02:a6:4a:c1:2c:12:8d:f7:c8:
1d:99:2d:6f:ce:03:d4:c2:03:31:bd:9e:e5:61:f8:
d9:7a:96:af:fe:ad:0b:e4:0e:10:90:b5:5a:bf:38:
db:1c:cd:f6:bd:dd:5b:a7:0c:77:7e:df:42:7e:f2:
c2:47:60:80:e8:9d:dd:7b:d5:d7:00:c2:27:3a:c5:
27:28:66:b1:20:3c:46:05:ae:46:aa:0c:47:6e:fe:
77:b5:a5:73:f7:dc:5d:fb:79:ab:32:5c:ba:dc:b4:
a1:e2:3c:f9:18:84:83:72:09:7b:f2:49:2e:b6:54:
e5:3b:41:70:b9:cf:b6:1f:e9:bd:d2:3e:c4:02:f1:
f6:65:d7:34:10:29:69:d4:71:26:86:87:8d:5b:0d:
60:7c:73:7a:85:fc:ee:e2:eb:8d:16:ce:42:a9:c4:
e5:c0:08:fb:d2:ef:b4:ed:1a:32:19:15:f4:06:c7:
f6:91:31:40:72:05:0a:d9:82:53:fd:27:d7:3e:45:
d3:9a:28:3d:32:9d:c7:cc:89:33:a3:0a:c0:89:dc:
93:79:6b:6e:11:ac:00:77:07:8a:52:23:cd:32:9a:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AD:44:D6:10:A9:96:77:50:69:8C:20:24:F1:A1:56:67:A3:0A:D9
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/w61E1hCplndQaYwgJPGhVmejCtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.25.0-85.137.26.255
Signature Algorithm: sha256WithRSAEncryption
0c:35:50:7b:8b:f6:d4:a4:e5:74:95:50:00:85:4e:12:4f:e5:
e9:c9:7c:33:d3:d9:09:de:0b:85:06:8f:cd:87:30:32:12:33:
f6:e2:68:fb:76:25:97:6c:b4:80:00:0c:0e:7f:f7:ee:51:04:
cb:d8:70:e4:0e:64:06:f5:64:5f:0b:28:50:05:8f:18:0c:78:
c6:42:98:98:f1:76:0b:1b:3f:54:76:4a:e2:c0:37:2b:9c:15:
7d:02:46:f5:d4:85:a7:03:8a:c0:7b:32:7f:2a:76:9d:c1:40:
bc:2a:e7:3b:28:ff:52:c0:35:51:d6:b4:3b:f1:e1:4a:54:33:
18:ae:ba:d4:31:36:85:d8:e0:97:85:ff:49:08:a8:f7:6d:6e:
1f:09:22:1b:0f:3a:f9:61:99:e0:0e:78:74:b5:6f:61:91:9a:
61:d9:19:b5:41:d5:a3:1f:22:1f:ea:cb:b3:d8:6d:19:28:68:
f0:25:e5:60:3c:d2:8d:30:90:7d:ed:d5:2f:64:d8:d2:fd:47:
94:d7:52:02:17:4c:83:b4:8c:c7:35:ca:fd:0b:17:42:3e:8e:
09:fc:22:41:81:fc:95:ec:1d:69:43:b1:bc:01:0d:c0:75:68:
81:ac:3c:5a:61:3a:9f:e6:de:17:7a:40:be:a6:b8:f4:96:6a:
03:b9:f5:b1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaDNkobMCqPsofHTnXklpEMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGFiMTk2YTViMTEzNjYwZDQwMWY4MDZiMzJiZTY2NjI1
YWZiYWEwHhcNMjYwOTIzMDkyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2FkNDRkNjEwYTk5Njc3NTA2OThjMjAyNGYxYTE1NjY3YTMwYWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05G4AHYcgWQH2i2M4SEtIJfPECsh
hUhKd3HjTWGHgNm+vHICpkrBLBKN98gdmS1vzgPUwgMxvZ7lYfjZepav/q0L5A4Q
kLVavzjbHM32vd1bpwx3ft9CfvLCR2CA6J3de9XXAMInOsUnKGaxIDxGBa5GqgxH
bv53taVz99xd+3mrMly63LSh4jz5GISDcgl78kkutlTlO0Fwuc+2H+m90j7EAvH2
Zdc0EClp1HEmhoeNWw1gfHN6hfzu4uuNFs5CqcTlwAj70u+07RoyGRX0Bsf2kTFA
cgUK2YJT/SfXPkXTmig9Mp3HzIkzowrAidyTeWtuEawAdweKUiPNMprHZQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMOtRNYQqZZ3UGmMICTxoVZnowrZMB8GA1UdIwQY
MBaAFAVKsZalsRNmDUAfgGsyvmZiWvuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgt
ZDJkYTUxN2E5NmZkLzEvdzYxRTFoQ3BsbmRRYVl3Z0pQR2hWbWVqQ3RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgtZDJkYTUxN2E5NmZk
LzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABViRkD
BABViRowDQYJKoZIhvcNAQELBQADggEBAAw1UHuL9tSk5XSVUACFThJP5enJfDPT
2QneC4UGj82HMDISM/biaPt2JZdstIAADA5/9+5RBMvYcOQOZAb1ZF8LKFAFjxgM
eMZCmJjxdgsbP1R2SuLANyucFX0CRvXUhacDisB7Mn8qdp3BQLwq5zso/1LANVHW
tDvx4UpUMxiuutQxNoXY4JeF/0kIqPdtbh8JIhsPOvlhmeAOeHS1b2GRmmHZGbVB
1aMfIh/qy7PYbRkoaPAl5WA80o0wkH3t1S9k2NL9R5TXUgIXTIO0jMc1yv0LF0I+
jgn8IkGB/JXsHWlDsbwBDcB1aIGsPFphOp/m3hd6QL6muPSWagO59bE=
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:47:10 2026 by rpki-client