Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/W9NokyXaMzMGQz2rT0ueVLsJj_c.roa
File: W9NokyXaMzMGQz2rT0ueVLsJj_c.roa (raw, json)
Hash identifier: H8qWbLTHoDh177+NLvlgjLRNqnjZkh6wnZIU1T8Kptk=
Subject key identifier: 5B:D3:68:93:25:DA:33:33:06:43:3D:AB:4F:4B:9E:54:BB:09:8F:F7
Certificate issuer: /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial: 019EDFE72B4EF18D798FA9E6DCBC9AECEC12
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/W9NokyXaMzMGQz2rT0ueVLsJj_c.roa
Signing time: Fri 19 Jun 2026 12:42:09 +0000
ROA not before: Fri 19 Jun 2026 12:42:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44066
IP address blocks: 80.173.138.0/23 maxlen: 23
85.137.31.0/24 maxlen: 24
2a0d:3c0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:e7:2b:4e:f1:8d:79:8f:a9:e6:dc:bc:9a:ec:ec:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Validity
Not Before: Jun 19 12:42:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bd3689325da333306433dab4f4b9e54bb098ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:96:3c:f7:e2:79:b0:8e:bc:e5:85:08:e0:
c7:7d:05:fd:54:67:78:e4:d4:d8:ed:7c:e0:d3:9a:
3b:a9:3f:87:b4:83:b9:18:c3:3d:ce:a4:89:e2:cd:
37:61:05:80:6b:5e:39:cb:12:51:1c:16:2b:f5:f7:
1c:06:c7:14:c0:24:35:ea:60:11:7f:05:ef:ef:46:
98:f6:16:50:ab:73:ec:28:58:a7:bf:21:55:ed:cd:
83:4d:27:6b:fc:61:62:87:1d:d3:81:5c:05:8c:b6:
66:fa:75:32:fc:5f:93:69:12:3c:69:c2:b1:0c:3a:
e7:1a:d3:de:d7:69:00:9e:38:d5:f7:ff:52:3b:f3:
e8:6f:95:90:fd:ba:08:c0:d9:ca:1f:26:97:62:1b:
25:95:c4:67:91:bb:04:fa:74:6a:09:59:67:b7:a7:
dd:bb:da:45:01:c0:8b:06:ad:7e:22:75:64:a8:fc:
8c:07:d2:d8:41:e0:ef:b9:2d:5b:17:fa:58:72:78:
33:ff:75:43:a3:21:08:33:c5:7e:6f:7e:82:c3:f2:
14:7f:de:23:6c:97:e0:d7:90:69:da:28:98:06:84:
f0:f9:18:b0:2e:02:14:4a:78:06:ea:db:38:93:0b:
30:f8:3f:f0:fe:53:cf:4e:eb:84:2e:65:07:ca:fc:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:68:93:25:DA:33:33:06:43:3D:AB:4F:4B:9E:54:BB:09:8F:F7
X509v3 Authority Key Identifier:
keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/W9NokyXaMzMGQz2rT0ueVLsJj_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.138.0/23
85.137.31.0/24
IPv6:
2a0d:3c0::/40
Signature Algorithm: sha256WithRSAEncryption
6a:bd:62:28:8d:d9:53:09:69:85:1e:42:77:1d:2c:75:b6:60:
56:70:7d:da:58:e0:7c:58:e4:75:dc:fe:73:5b:de:de:9b:b2:
3e:3f:01:30:2a:c3:2a:a3:7f:3d:b0:23:93:3f:fa:a1:0e:98:
ff:1a:3c:2f:02:21:8e:c0:ea:b5:cb:c2:89:33:1b:2a:a8:4e:
a9:0e:49:42:6b:3f:94:f2:69:f1:05:dd:5e:9a:7c:78:a9:ed:
a9:5e:15:a0:3a:87:ab:f4:34:47:1e:97:1a:56:17:ff:11:00:
76:2d:a5:e3:c2:e0:31:1a:7d:be:aa:72:83:f0:e5:9c:23:55:
c0:2e:dd:0f:50:4f:42:61:7d:f4:25:ce:6d:00:fd:88:f4:fe:
f6:55:ed:1a:8a:b1:e4:9b:05:8d:5c:30:99:1c:9d:72:c4:fd:
97:b6:59:7c:a7:d9:3d:07:e4:ab:41:ac:2b:73:a3:37:ca:33:
ab:19:5f:f5:c6:66:e3:e3:e7:15:a6:eb:ae:75:5e:19:fb:e6:
c5:34:24:b0:7e:18:4e:7e:25:f3:8d:ae:00:aa:c4:c9:f9:d8:
9b:42:8d:d2:55:9d:01:07:24:f7:ec:45:29:62:19:39:8e:8d:
ff:8b:99:3e:00:5d:5d:9d:83:e8:53:7f:8b:ff:72:44:03:cf:
8c:68:c4:35
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ7f5ytO8Y15j6nm3Lya7OwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3
NzJjZDIwHhcNMjYwNjE5MTI0MjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmQzNjg5MzI1ZGEzMzMzMDY0MzNkYWI0ZjRiOWU1NGJiMDk4ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v+WPPfiebCOvOWFCODHfQX9VGd4
5NTY7Xzg05o7qT+HtIO5GMM9zqSJ4s03YQWAa145yxJRHBYr9fccBscUwCQ16mAR
fwXv70aY9hZQq3PsKFinvyFV7c2DTSdr/GFihx3TgVwFjLZm+nUy/F+TaRI8acKx
DDrnGtPe12kAnjjV9/9SO/Pob5WQ/boIwNnKHyaXYhsllcRnkbsE+nRqCVlnt6fd
u9pFAcCLBq1+InVkqPyMB9LYQeDvuS1bF/pYcngz/3VDoyEIM8V+b36Cw/IUf94j
bJfg15Bp2iiYBoTw+RiwLgIUSngG6ts4kwsw+D/w/lPPTuuELmUHyvw3kQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFFvTaJMl2jMzBkM9q09LnlS7CY/3MB8GA1UdIwQY
MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt
ZWM1NzhlMWNjZWVkLzEvVzlOb2t5WGFNek1HUXoyclQwdWVWTHNKal9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk
LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBUK2KAwQA
VYkfMA4EAgACMAgDBgAqDQPAADANBgkqhkiG9w0BAQsFAAOCAQEAar1iKI3ZUwlp
hR5Cdx0sdbZgVnB92ljgfFjkddz+c1ve3puyPj8BMCrDKqN/PbAjkz/6oQ6Y/xo8
LwIhjsDqtcvCiTMbKqhOqQ5JQms/lPJp8QXdXpp8eKntqV4VoDqHq/Q0Rx6XGlYX
/xEAdi2l48LgMRp9vqpyg/DlnCNVwC7dD1BPQmF99CXObQD9iPT+9lXtGoqx5JsF
jVwwmRydcsT9l7ZZfKfZPQfkq0GsK3OjN8ozqxlf9cZm4+PnFabrrnVeGfvmxTQk
sH4YTn4l842uAKrEyfnYm0KN0lWdAQck9+xFKWIZOY6N/4uZPgBdXZ2D6FN/i/9y
RAPPjGjENQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:42 2026 by rpki-client