Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WW2fFWOSgNipjaPdzHKI5xkpcfY.roa
File: WW2fFWOSgNipjaPdzHKI5xkpcfY.roa (raw, json)
Hash identifier: qjNCqkNEPbhOgEaXsaJOG9wFtN3MGUfDas4jJIsn9qI=
Subject key identifier: 59:6D:9F:15:63:92:80:D8:A9:8D:A3:DD:CC:72:88:E7:19:29:71:F6
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01A0CD919D1CA87E3C338F1CFDD98978C937
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WW2fFWOSgNipjaPdzHKI5xkpcfY.roa
Signing time: Wed 23 Sep 2026 09:21:07 +0000
ROA not before: Wed 23 Sep 2026 09:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39246
IP address blocks: 85.187.204.0/24 maxlen: 24
85.187.205.0/24 maxlen: 24
85.187.206.0/24 maxlen: 24
85.187.207.0/24 maxlen: 24
85.187.250.0/24 maxlen: 24
85.187.251.0/24 maxlen: 24
85.187.252.0/24 maxlen: 24
85.187.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:91:9d:1c:a8:7e:3c:33:8f:1c:fd:d9:89:78:c9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Sep 23 09:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=596d9f15639280d8a98da3ddcc7288e7192971f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:24:e3:3c:90:72:d9:38:6d:d8:a2:cd:6c:
e5:28:d5:56:2f:c2:d2:4a:c8:d0:01:02:41:04:67:
95:ee:6b:23:c4:3a:45:04:26:00:7f:97:1c:0d:61:
31:3a:01:ff:86:38:9e:2e:a9:8f:2c:50:2d:c2:7b:
4b:08:59:84:de:ac:0b:40:23:ca:73:77:33:30:9f:
79:71:74:2a:0f:2a:fa:e5:bb:cd:82:b1:b9:f8:c6:
72:2d:fe:69:04:c7:ce:54:6e:38:ea:c9:fe:40:09:
00:57:43:f6:a7:ac:aa:d8:03:e4:a7:68:aa:6f:57:
e2:51:bd:f8:7e:8f:6f:d5:22:ee:d7:10:70:c3:c9:
f2:47:16:a8:54:78:e4:4b:f2:50:7e:1e:c5:24:71:
23:47:8f:e8:ff:de:04:a6:5a:fe:ed:81:d2:da:f8:
c3:c0:3c:09:ef:91:45:f9:4c:d7:26:62:c4:e7:51:
c0:0a:1d:51:80:4b:c2:cd:40:65:bb:fb:16:46:c6:
1a:a2:96:5b:81:36:ca:b8:e7:b0:4c:65:a1:e4:b9:
50:33:49:67:6c:95:6d:4b:82:2e:ad:24:06:a5:e0:
1c:41:c8:ac:04:96:be:52:87:08:41:fe:e5:55:a9:
f6:44:de:34:93:d7:cb:c0:12:f4:6f:61:c9:f4:56:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6D:9F:15:63:92:80:D8:A9:8D:A3:DD:CC:72:88:E7:19:29:71:F6
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WW2fFWOSgNipjaPdzHKI5xkpcfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.204.0/22
85.187.250.0-85.187.253.255
Signature Algorithm: sha256WithRSAEncryption
12:5f:88:9e:e7:c2:2d:54:61:62:0f:42:8a:9e:d2:df:77:f0:
f1:8b:fd:8d:eb:72:bb:41:31:17:5b:a7:07:1e:e3:83:e9:85:
08:58:06:a2:59:f1:85:1a:c0:fe:d8:42:5d:6c:92:7d:09:53:
71:3e:ec:73:b2:4d:50:9f:3f:9f:ff:f1:07:fc:a7:c7:51:c6:
c3:1d:6b:6a:88:e0:6c:47:5a:55:15:2c:64:0d:40:04:e6:ca:
ef:ad:f9:81:95:0a:da:d2:ca:bd:e8:b7:c4:9f:71:cc:62:cc:
4c:0f:b1:2e:bd:a2:36:ea:eb:30:3a:4b:02:7b:22:f5:fa:b6:
88:bc:f9:15:3e:5e:3b:91:f7:4d:d4:f4:1b:5a:5d:55:9b:ca:
98:c7:90:bb:f3:21:36:2b:a7:b8:95:ed:57:c4:79:11:f8:b5:
18:c8:a5:4b:65:3f:25:88:5d:8c:3f:94:df:98:86:96:17:6d:
5a:d6:1c:74:10:be:89:97:41:9f:3f:d6:22:58:c9:ab:75:92:
e6:23:ca:f6:1f:aa:de:0d:85:d3:98:cb:4c:6f:ea:d5:c7:ae:
4c:4a:1b:c3:47:41:99:60:64:0e:16:3b:c2:8a:68:a2:3e:fd:
6a:d9:0a:21:6e:53:cd:2e:9f:69:6f:1b:37:73:18:a0:fe:f8:
50:e2:88:63
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaDNkZ0cqH48M48c/dmJeMk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjYwOTIzMDkyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTZkOWYxNTYzOTI4MGQ4YTk4ZGEzZGRjYzcyODhlNzE5Mjk3MWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrQk4zyQctk4bdiizWzlKNVWL8LS
SsjQAQJBBGeV7msjxDpFBCYAf5ccDWExOgH/hjieLqmPLFAtwntLCFmE3qwLQCPK
c3czMJ95cXQqDyr65bvNgrG5+MZyLf5pBMfOVG446sn+QAkAV0P2p6yq2APkp2iq
b1fiUb34fo9v1SLu1xBww8nyRxaoVHjkS/JQfh7FJHEjR4/o/94Eplr+7YHS2vjD
wDwJ75FF+UzXJmLE51HACh1RgEvCzUBlu/sWRsYaopZbgTbKuOewTGWh5LlQM0ln
bJVtS4IurSQGpeAcQcisBJa+UocIQf7lVan2RN40k9fLwBL0b2HJ9FadDwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFltnxVjkoDYqY2j3cxyiOcZKXH2MB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvV1cyZkZXT1NnTmlwamFQZHpIS0k1eGtwY2ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCVbvMMAwD
BAFVu/oDBAFVu/wwDQYJKoZIhvcNAQELBQADggEBABJfiJ7nwi1UYWIPQoqe0t93
8PGL/Y3rcrtBMRdbpwce44PphQhYBqJZ8YUawP7YQl1skn0JU3E+7HOyTVCfP5//
8Qf8p8dRxsMda2qI4GxHWlUVLGQNQATmyu+t+YGVCtrSyr3ot8SfccxizEwPsS69
ojbq6zA6SwJ7IvX6toi8+RU+XjuR903U9BtaXVWbypjHkLvzITYrp7iV7VfEeRH4
tRjIpUtlPyWIXYw/lN+YhpYXbVrWHHQQvomXQZ8/1iJYyat1kuYjyvYfqt4NhdOY
y0xv6tXHrkxKG8NHQZlgZA4WO8KKaKI+/WrZCiFuU80un2lvGzdzGKD++FDiiGM=
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:27:58 2026 by rpki-client