Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/w0FTzYu9lEEJMF0xfwC4xC_4C0E.roa
File: w0FTzYu9lEEJMF0xfwC4xC_4C0E.roa (raw, json)
Hash identifier: MlQf4dO10LVKAg2H1rcsvG5+Ypb1N2L/LIyx4hEK1XA=
Subject key identifier: C3:41:53:CD:8B:BD:94:41:09:30:5D:31:7F:00:B8:C4:2F:F8:0B:41
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019D289927093A2EB26560B51472A2F2068D
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/w0FTzYu9lEEJMF0xfwC4xC_4C0E.roa
Signing time: Thu 26 Mar 2026 05:23:38 +0000
ROA not before: Thu 26 Mar 2026 05:23:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.254.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:99:27:09:3a:2e:b2:65:60:b5:14:72:a2:f2:06:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 26 05:23:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c34153cd8bbd944109305d317f00b8c42ff80b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:cb:77:eb:b0:5a:64:b4:0f:f9:c3:9a:4d:
53:03:c7:d5:7c:56:62:32:8f:69:d9:e2:4e:ac:16:
2b:41:d2:0a:4c:e4:d8:6a:fe:cc:9a:71:62:c7:81:
dd:07:49:71:eb:e5:85:43:32:28:51:8e:d8:b2:90:
4b:0e:3f:9f:ce:0a:dc:da:97:d2:d1:1d:2a:f2:4f:
ba:09:32:17:7c:9c:85:44:14:7f:4d:a3:26:62:9b:
d1:e1:2a:9c:1c:62:3c:74:bd:cd:6c:c3:78:95:9b:
16:84:24:bb:6e:3d:cf:54:47:73:91:7c:09:69:bb:
b7:a4:95:c2:c5:d8:fc:48:6d:58:05:97:fa:8f:3b:
f1:f2:d8:5f:a4:5b:06:d9:ef:06:95:96:6b:f8:37:
60:56:01:ae:81:1f:b8:b2:c2:3c:61:66:f7:be:1c:
2a:d7:c1:ed:60:b1:ae:6b:a5:4f:71:00:ca:98:22:
46:88:21:cc:90:87:a8:32:3e:00:d4:5d:73:68:77:
c5:17:5c:8b:4e:15:4d:dc:d8:f6:1b:ee:e0:fb:9e:
2e:8a:be:8b:a2:63:61:25:41:00:43:fb:b7:34:19:
33:70:1c:fc:51:8d:1e:cc:8a:c1:64:b8:23:99:62:
0f:88:27:5e:e0:47:6c:c0:52:8e:f2:cd:13:83:3b:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:41:53:CD:8B:BD:94:41:09:30:5D:31:7F:00:B8:C4:2F:F8:0B:41
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/w0FTzYu9lEEJMF0xfwC4xC_4C0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0-45.141.234.255
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.159.255
91.92.34.0/24
91.92.40.0/24
91.92.42.0/24
91.92.44.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.207.0-93.152.208.255
93.152.210.0/23
93.152.214.0-93.152.218.255
93.152.221.0-93.152.223.255
93.152.226.0/23
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/22
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6d:9b:8d:ec:13:79:89:a7:0d:22:fb:1d:37:0f:7e:03:65:
ed:be:28:12:ff:64:97:06:5f:eb:6f:14:69:52:80:1d:25:d6:
9b:d4:e7:f4:0f:e3:48:74:36:63:5d:85:8a:6b:cf:77:17:d4:
08:3e:b3:e0:ca:b3:8a:54:3a:29:7c:c3:e1:37:5c:aa:71:a0:
5a:c7:3c:17:57:10:6b:72:4a:43:83:a2:6e:d6:a7:e5:98:d2:
7f:64:61:b4:47:fa:86:34:09:1d:d1:98:65:ac:e1:7c:48:02:
9e:eb:50:fa:6b:a9:4d:32:30:5b:b9:2b:c1:a3:03:17:e7:c7:
60:06:49:25:16:fb:fc:05:56:51:b3:98:82:43:95:e7:df:1d:
14:7f:77:db:6b:3d:72:5e:b6:90:7e:7e:bb:08:9c:1b:50:c3:
55:d1:92:ec:30:f8:35:17:cc:e6:d1:95:3d:79:a0:b4:11:83:
60:89:74:4e:90:21:4e:36:20:91:c7:54:f4:2e:97:6b:b9:37:
dc:5f:46:e5:9a:f5:36:f8:2a:80:11:5a:38:f5:20:4b:2d:55:
27:cb:9a:7c:2a:f1:71:d0:46:33:80:a1:69:32:cd:c5:b6:dd:
59:f5:e8:44:f3:0b:05:c4:f6:33:7d:fd:0e:0c:47:41:dc:2c:
c2:fe:21:ba
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAZ0omScJOi6yZWC1FHKi8gaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjYwMzI2MDUyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzQxNTNjZDhiYmQ5NDQxMDkzMDVkMzE3ZjAwYjhjNDJmZjgwYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PDLd+uwWmS0D/nDmk1TA8fVfFZi
Mo9p2eJOrBYrQdIKTOTYav7MmnFix4HdB0lx6+WFQzIoUY7YspBLDj+fzgrc2pfS
0R0q8k+6CTIXfJyFRBR/TaMmYpvR4SqcHGI8dL3NbMN4lZsWhCS7bj3PVEdzkXwJ
abu3pJXCxdj8SG1YBZf6jzvx8thfpFsG2e8GlZZr+DdgVgGugR+4ssI8YWb3vhwq
18HtYLGua6VPcQDKmCJGiCHMkIeoMj4A1F1zaHfFF1yLThVN3Nj2G+7g+54uir6L
omNhJUEAQ/u3NBkzcBz8UY0ezIrBZLgjmWIPiCde4EdswFKO8s0Tgztv9QIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFMNBU82LvZRBCTBdMX8AuMQv+AtBMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvdzBGVHpZdTlsRUVKTUYweGZ3QzR4Q180QzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgwDAME
AC2N6QMEAC2N6gMEAU6fgAMEAE6fgwMEAk6fiDAMAwQATp+VAwQATp+WAwQCTp+Y
MAwDBABOn50DBAVOn4ADBABbXCIDBABbXCgDBABbXCowDAMEAltcLAMEAFtcLjAM
AwQAW1wxAwQBW1w0MAwDBABdmM8DBABdmNADBAFdmNIwDAMEAV2Y1gMEAF2Y2jAM
AwQAXZjdAwQFXZjAAwQBXZjiAwQBXhocAwQCXhpMMAwDBABeGlkDBABeGloDBABe
vsMDBAK5YPwDBADUZmkDBADUZmswDQYJKoZIhvcNAQELBQADggEBAJttm43sE3mJ
pw0i+x03D34DZe2+KBL/ZJcGX+tvFGlSgB0l1pvU5/QP40h0NmNdhYprz3cX1Ag+
s+DKs4pUOil8w+E3XKpxoFrHPBdXEGtySkODom7Wp+WY0n9kYbRH+oY0CR3RmGWs
4XxIAp7rUPprqU0yMFu5K8GjAxfnx2AGSSUW+/wFVlGzmIJDleffHRR/d9trPXJe
tpB+frsInBtQw1XRkuww+DUXzObRlT15oLQRg2CJdE6QIU42IJHHVPQul2u5N9xf
RuWa9Tb4KoARWjj1IEstVSfLmnwq8XHQRjOAoWkyzcW23Vn16ETzCwXE9jN9/Q4M
R0HcLML+Ibo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:27:25 2026 by rpki-client