Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WNmbcjASQ0QU5VAD7mVqdU7HYCM.roa
File: WNmbcjASQ0QU5VAD7mVqdU7HYCM.roa (raw, json)
Hash identifier: PARxTA/biJlDBfXceo5xRoz9wsPFFnQItSp+PZuLI6M=
Subject key identifier: 58:D9:9B:72:30:12:43:44:14:E5:50:03:EE:65:6A:75:4E:C7:60:23
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A109670EBE89ECFB1F372E6364B12FD80E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WNmbcjASQ0QU5VAD7mVqdU7HYCM.roa
Signing time: Mon 05 Oct 2026 00:11:51 +0000
ROA not before: Mon 05 Oct 2026 00:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 87.121.3.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:67:0e:be:89:ec:fb:1f:37:2e:63:64:b1:2f:d8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 5 00:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58d99b723012434414e55003ee656a754ec76023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:78:b7:2b:03:f8:22:cc:2b:97:74:5a:35:
7f:d5:65:24:0e:95:e6:35:29:d4:3b:0a:ee:15:96:
7d:6e:8e:9f:53:3f:62:37:85:1a:30:de:9f:3a:c7:
9f:6c:73:52:47:15:d3:75:29:e2:af:8c:1d:06:92:
3f:e9:46:ca:9b:4a:e6:50:25:91:65:77:4c:9e:1c:
5b:b9:44:60:19:77:6c:2e:11:9f:fd:b2:4c:a8:27:
c7:7d:23:7b:d8:f4:06:80:cb:de:ce:06:2a:3d:15:
16:96:56:e9:24:8e:c1:16:df:d6:6e:4d:fb:5b:60:
7d:5b:5b:95:ff:ff:c4:8e:c5:c0:e6:b4:a1:52:df:
aa:43:58:1d:9b:7f:77:a7:02:92:a2:21:5b:eb:90:
99:d6:45:74:a6:b7:63:2d:0e:53:22:fe:37:42:eb:
4c:96:8b:64:00:d5:35:77:00:d3:8d:46:06:e7:24:
04:41:f0:e6:4e:3c:16:31:be:71:df:17:5e:f2:67:
bb:ff:3b:a4:7d:ac:0a:7f:c5:32:9e:c1:cc:2f:d1:
0f:26:3b:94:c6:1c:0e:c9:a1:83:af:0c:85:7d:47:
ce:18:8b:7f:ae:2c:cd:56:12:7b:2b:40:8d:44:e5:
03:aa:cb:be:08:54:c2:03:c9:1a:c0:d3:67:b8:91:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D9:9B:72:30:12:43:44:14:E5:50:03:EE:65:6A:75:4E:C7:60:23
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WNmbcjASQ0QU5VAD7mVqdU7HYCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.3.0/24
141.98.5.0/24
194.31.205.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c3:4f:fb:2e:ce:0b:cb:8f:54:67:56:8b:db:30:71:6b:7a:
83:c1:e2:f5:9c:4b:f0:04:4b:10:15:e0:42:0c:eb:cf:08:29:
81:e8:50:62:e4:f9:53:b0:77:4a:0a:a3:ec:3b:6f:e9:cd:a4:
a4:f0:24:38:32:d6:8b:c1:f9:e0:32:9e:1d:8f:54:19:a1:91:
08:52:e1:a2:1f:b0:2d:e1:6e:91:8e:4c:d7:a6:24:3f:0a:98:
41:75:41:a5:10:ef:0f:3c:69:6f:2a:c9:ed:19:e7:1f:bd:e0:
71:90:86:3e:28:c3:22:8e:9a:3c:d8:de:29:b5:f8:4d:26:fe:
f3:33:01:38:40:08:01:f4:f7:9d:3b:bc:05:58:c4:bf:80:5f:
66:00:6e:73:2e:84:bc:b7:97:14:f5:6e:b1:62:4d:c7:5a:4a:
a3:08:bf:7f:c5:e7:93:51:75:07:49:2d:d7:62:4d:02:f1:86:
8e:51:31:9e:c2:4a:70:ed:b1:b9:b3:ec:51:0e:d8:54:5b:14:
e5:2a:81:44:46:70:ea:84:03:59:da:b6:a7:af:4d:c5:4b:9c:
63:e0:a6:be:b7:a1:f6:53:cf:13:f2:0f:62:c8:7b:2c:ba:6f:
d5:6d:c7:fe:65:77:6f:8f:a7:35:67:e0:bd:e9:d0:75:ce:e5:
8a:8c:23:ab
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaEJZw6+iez7HzcuY2SxL9gOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYxMDA1MDAxMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGQ5OWI3MjMwMTI0MzQ0MTRlNTUwMDNlZTY1NmE3NTRlYzc2MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgR4tysD+CLMK5d0WjV/1WUkDpXm
NSnUOwruFZZ9bo6fUz9iN4UaMN6fOsefbHNSRxXTdSnir4wdBpI/6UbKm0rmUCWR
ZXdMnhxbuURgGXdsLhGf/bJMqCfHfSN72PQGgMvezgYqPRUWllbpJI7BFt/Wbk37
W2B9W1uV///EjsXA5rShUt+qQ1gdm393pwKSoiFb65CZ1kV0prdjLQ5TIv43QutM
lotkANU1dwDTjUYG5yQEQfDmTjwWMb5x3xde8me7/zukfawKf8UynsHML9EPJjuU
xhwOyaGDrwyFfUfOGIt/rizNVhJ7K0CNROUDqsu+CFTCA8kawNNnuJEqvwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFjZm3IwEkNEFOVQA+5lanVOx2AjMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvV05tYmNqQVNRMFFVNVZBRDdtVnFkVTdIWUNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV3kDAwQA
jWIFAwQAwh/NMA0GCSqGSIb3DQEBCwUAA4IBAQAVw0/7Ls4Ly49UZ1aL2zBxa3qD
weL1nEvwBEsQFeBCDOvPCCmB6FBi5PlTsHdKCqPsO2/pzaSk8CQ4MtaLwfngMp4d
j1QZoZEIUuGiH7At4W6RjkzXpiQ/CphBdUGlEO8PPGlvKsntGecfveBxkIY+KMMi
jpo82N4ptfhNJv7zMwE4QAgB9PedO7wFWMS/gF9mAG5zLoS8t5cU9W6xYk3HWkqj
CL9/xeeTUXUHSS3XYk0C8YaOUTGewkpw7bG5s+xRDthUWxTlKoFERnDqhANZ2ran
r03FS5xj4Ka+t6H2U88T8g9iyHssum/Vbcf+ZXdvj6c1Z+C96dB1zuWKjCOr
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:48:31 2026 by rpki-client