Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa
File: WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa (raw, json)
Hash identifier: THX2fKKKnX9yBs9zY/imZHrBKciUjAfyILqIM2Dr8Yo=
Subject key identifier: 59:A6:08:FC:C5:B2:DE:14:49:6D:16:06:DC:F7:4D:F1:8F:D1:31:80
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019DFBFA34F4F44C0389B82604BDB9780A5D
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa
Signing time: Wed 06 May 2026 06:29:31 +0000
ROA not before: Wed 06 May 2026 06:29:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202611
IP address blocks: 91.107.80.0/22 maxlen: 32
188.72.103.0/24 maxlen: 32
188.72.104.0/24 maxlen: 32
188.72.105.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:fa:34:f4:f4:4c:03:89:b8:26:04:bd:b9:78:0a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: May 6 06:29:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59a608fcc5b2de14496d1606dcf74df18fd13180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:8f:7b:38:40:52:81:4c:21:f2:d9:a1:60:
42:d7:24:ec:7b:b5:b6:68:b2:d0:bb:f3:e3:2b:d4:
52:fd:2d:58:1f:3e:88:7c:19:31:ab:3c:13:14:82:
fd:29:d9:37:d5:2f:6e:17:9a:f0:12:f1:48:7a:f8:
68:93:31:7b:71:e0:c8:7c:4a:09:6a:a1:68:fb:f8:
23:b6:6d:aa:e5:70:1d:fb:1c:d9:d2:7a:c8:02:8c:
6c:19:8e:9a:bc:be:34:16:8b:81:60:c7:e5:b0:8e:
cb:98:25:ab:c2:aa:12:7e:e3:49:6a:b5:27:5f:03:
f1:a3:30:9a:0c:50:33:70:25:58:5f:32:46:2b:47:
69:45:fc:65:e2:4e:84:48:ea:f7:d6:19:d9:34:90:
65:f2:35:f5:d8:9a:56:aa:f7:03:76:71:8c:eb:2a:
51:3b:16:c5:35:73:26:fe:3d:bf:5f:a6:bf:a6:8e:
71:b4:aa:00:f2:a4:32:56:d5:54:be:36:6f:6c:7b:
54:1f:32:f6:3e:62:86:87:fc:2f:f6:f4:14:54:ee:
6d:ab:f7:76:c7:be:99:c5:69:9a:9d:b7:03:1f:a8:
8e:76:5c:91:9b:0d:48:09:1c:52:65:d2:d8:71:1d:
30:8e:45:19:4a:cc:96:05:e4:92:d5:07:11:1f:10:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:08:FC:C5:B2:DE:14:49:6D:16:06:DC:F7:4D:F1:8F:D1:31:80
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.80.0/22
188.72.103.0-188.72.105.255
Signature Algorithm: sha256WithRSAEncryption
49:46:2a:71:4c:10:6e:47:a2:5b:05:7a:53:10:3b:ef:45:7d:
c5:fc:16:32:9d:ad:ea:3a:69:ef:6c:ee:35:1d:9a:c0:0b:95:
92:ec:6d:1c:ec:de:a7:14:5a:4a:1c:43:18:13:72:45:93:d8:
17:3e:e3:81:51:1a:a6:c7:15:66:6f:44:c3:6e:25:f0:f8:8d:
79:f3:10:3e:36:be:c8:40:a0:8c:1b:86:b7:92:e1:ce:a2:b2:
8a:ac:d6:30:4b:4e:9a:ab:7e:3c:75:3d:a1:3e:87:6d:14:c7:
90:94:11:50:36:20:6d:61:0e:9d:25:14:38:bd:e8:02:5d:75:
fb:02:fd:46:7b:1b:16:b9:6a:8e:3f:43:ee:64:c9:45:9a:c8:
c3:73:ed:ed:8f:70:2e:f8:33:70:ec:ea:d1:ca:24:5b:cf:b4:
9e:c7:18:5f:b9:41:2a:89:52:8a:2e:f1:3c:cf:12:7e:b0:e9:
fb:ef:39:17:8a:8e:3d:b2:a4:5d:c7:98:67:98:39:3c:93:90:
84:d1:d7:b2:93:ae:2a:0e:45:99:e6:37:80:ba:36:fa:b2:c6:
49:5c:94:57:91:5f:53:d7:17:3b:f6:38:a8:27:c6:36:aa:6c:
f1:fa:0f:a7:bf:f2:7a:8a:34:94:7d:b7:db:1f:2b:ce:c4:7d:
51:96:cb:61
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ37+jT09EwDibgmBL25eApdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl
ZTQzYzAwHhcNMjYwNTA2MDYyOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWE2MDhmY2M1YjJkZTE0NDk2ZDE2MDZkY2Y3NGRmMThmZDEzMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4SPezhAUoFMIfLZoWBC1yTse7W2
aLLQu/PjK9RS/S1YHz6IfBkxqzwTFIL9Kdk31S9uF5rwEvFIevhokzF7ceDIfEoJ
aqFo+/gjtm2q5XAd+xzZ0nrIAoxsGY6avL40FouBYMflsI7LmCWrwqoSfuNJarUn
XwPxozCaDFAzcCVYXzJGK0dpRfxl4k6ESOr31hnZNJBl8jX12JpWqvcDdnGM6ypR
OxbFNXMm/j2/X6a/po5xtKoA8qQyVtVUvjZvbHtUHzL2PmKGh/wv9vQUVO5tq/d2
x76ZxWmanbcDH6iOdlyRmw1ICRxSZdLYcR0wjkUZSsyWBeSS1QcRHxAMBwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFmmCPzFst4USW0WBtz3TfGP0TGAMB8GA1UdIwQY
MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt
OWM4ZTU5YzI3NzFjLzEvV2FZSV9NV3kzaFJKYlJZRzNQZE44WV9STVlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj
LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCW2tQMAwD
BAC8SGcDBAG8SGgwDQYJKoZIhvcNAQELBQADggEBAElGKnFMEG5HolsFelMQO+9F
fcX8FjKdreo6ae9s7jUdmsALlZLsbRzs3qcUWkocQxgTckWT2Bc+44FRGqbHFWZv
RMNuJfD4jXnzED42vshAoIwbhreS4c6isoqs1jBLTpqrfjx1PaE+h20Ux5CUEVA2
IG1hDp0lFDi96AJddfsC/UZ7Gxa5ao4/Q+5kyUWayMNz7e2PcC74M3Ds6tHKJFvP
tJ7HGF+5QSqJUoou8TzPEn6w6fvvOReKjj2ypF3HmGeYOTyTkITR17KTrioORZnm
N4C6NvqyxklclFeRX1PXFzv2OKgnxjaqbPH6D6e/8nqKNJR9t9sfK87EfVGWy2E=
-----END CERTIFICATE-----
Generated at Wed May 13 01:11:45 2026 by rpki-client