Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wGhldPJwL4dLyPMmmiGbBQD5wc0.roa
File: wGhldPJwL4dLyPMmmiGbBQD5wc0.roa (raw, json)
Hash identifier: EpoCWDUe/BnVhzopydK8uwRnOxV1QSupq+KPeHqpjVg=
Subject key identifier: C0:68:65:74:F2:70:2F:87:4B:C8:F3:26:9A:21:9B:05:00:F9:C1:CD
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A1159EBB2771CB204FD041057B906ACDAD
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wGhldPJwL4dLyPMmmiGbBQD5wc0.roa
Signing time: Wed 07 Oct 2026 09:08:06 +0000
ROA not before: Wed 07 Oct 2026 09:08:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5606
IP address blocks: 81.181.252.0/24 maxlen: 24
81.181.253.0/24 maxlen: 24
81.181.254.0/24 maxlen: 24
81.181.255.0/24 maxlen: 24
85.120.16.0/24 maxlen: 24
85.120.17.0/24 maxlen: 24
85.120.18.0/24 maxlen: 24
85.120.19.0/24 maxlen: 24
85.122.182.0/23 maxlen: 23
193.226.68.0/24 maxlen: 24
193.226.69.0/24 maxlen: 24
193.226.70.0/24 maxlen: 24
193.226.71.0/24 maxlen: 24
194.102.91.0/24 maxlen: 24
217.156.46.0/24 maxlen: 24
217.156.47.0/24 maxlen: 24
217.156.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:9e:bb:27:71:cb:20:4f:d0:41:05:7b:90:6a:cd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 7 09:08:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0686574f2702f874bc8f3269a219b0500f9c1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:c6:a9:1c:9a:46:bf:de:37:0c:f1:72:48:
56:e1:67:fa:1f:7c:d0:93:2e:e5:97:20:18:7f:17:
ac:c4:df:e4:55:a9:da:79:b9:4e:89:64:88:10:fb:
37:91:f4:11:4a:fc:9a:dc:c6:6a:75:4c:22:b6:78:
d6:ff:47:51:25:86:62:0b:41:1e:7c:4e:49:df:ce:
61:bd:ca:d6:bd:9b:6b:13:0c:9f:4a:c4:7d:95:3d:
94:0c:e1:0c:29:27:37:44:7d:dc:b7:63:2f:3d:9c:
cf:b6:3a:e3:9f:b6:d4:21:4a:ca:b4:cc:c1:99:82:
f7:8f:e0:ae:57:a9:6e:dd:ca:ad:c4:11:3c:d8:0d:
a1:94:76:e6:f2:be:f1:bb:7d:30:c0:ef:24:54:7b:
5b:f0:99:c6:ac:23:3d:66:a1:11:f2:69:dc:c8:ce:
bf:bc:cd:e9:a0:eb:b9:fb:8c:4a:df:6c:01:d2:dd:
de:0d:49:cc:f8:dd:e1:4d:6d:e0:80:f3:6c:fc:d5:
e4:54:32:1a:08:c4:db:2a:ed:47:9f:0e:d4:66:cd:
3c:da:49:00:6a:44:3a:f9:20:a3:42:d9:58:bb:48:
f8:9e:b1:52:39:45:e3:90:f5:63:43:9a:7b:db:b5:
03:98:9a:70:03:56:8d:5e:2b:2f:5e:c1:a0:12:6d:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:68:65:74:F2:70:2F:87:4B:C8:F3:26:9A:21:9B:05:00:F9:C1:CD
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wGhldPJwL4dLyPMmmiGbBQD5wc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.252.0/22
85.120.16.0/22
85.122.182.0/23
193.226.68.0/22
194.102.91.0/24
217.156.46.0/23
217.156.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:03:6b:3e:22:9a:cd:0c:29:bd:34:3a:06:da:ed:e3:36:cc:
50:20:16:a9:66:24:ff:bf:2d:75:b3:3c:48:c4:55:a5:fe:bf:
0e:6f:4f:04:f4:43:cb:04:ef:9b:91:97:8e:c4:ec:45:18:82:
95:cb:2e:be:53:02:10:ac:7a:aa:58:b6:1b:81:c0:1a:08:77:
d8:73:72:4b:80:2e:43:56:5d:84:d4:42:65:1c:d6:49:ee:7d:
10:9d:6c:0e:ba:d5:27:61:c7:05:e3:41:6d:f8:58:71:02:26:
c8:f9:10:17:f8:6f:95:b2:1a:8d:a2:99:61:a4:cb:d4:fb:3f:
b0:af:7e:4c:b2:f2:bd:06:d9:f4:6b:dc:6b:ff:4d:85:fe:b2:
c0:d3:48:11:af:3d:64:96:95:b4:80:ba:05:78:ec:70:30:12:
9c:4f:38:a3:45:ca:1d:a0:c7:09:2f:d2:71:b9:95:6e:22:9f:
27:78:c9:d7:cc:a3:e5:58:dc:be:cc:9a:34:22:5c:74:cc:c6:
ae:66:cd:24:e0:b1:91:01:60:4e:e2:e9:6e:e2:73:1e:26:65:
c2:34:63:d6:10:27:9e:27:39:8b:63:d3:23:bc:ee:f6:8d:65:
70:3a:60:34:92:61:53:e9:6e:bf:c9:55:3d:c0:6d:a4:cd:f8:
00:c9:5e:db
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaEVnrsnccsgT9BBBXuQas2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYxMDA3MDkwODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDY4NjU3NGYyNzAyZjg3NGJjOGYzMjY5YTIxOWIwNTAwZjljMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lnGqRyaRr/eNwzxckhW4Wf6H3zQ
ky7llyAYfxesxN/kVanaeblOiWSIEPs3kfQRSvya3MZqdUwitnjW/0dRJYZiC0Ee
fE5J385hvcrWvZtrEwyfSsR9lT2UDOEMKSc3RH3ct2MvPZzPtjrjn7bUIUrKtMzB
mYL3j+CuV6lu3cqtxBE82A2hlHbm8r7xu30wwO8kVHtb8JnGrCM9ZqER8mncyM6/
vM3poOu5+4xK32wB0t3eDUnM+N3hTW3ggPNs/NXkVDIaCMTbKu1Hnw7UZs082kkA
akQ6+SCjQtlYu0j4nrFSOUXjkPVjQ5p727UDmJpwA1aNXisvXsGgEm33vwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFMBoZXTycC+HS8jzJpohmwUA+cHNMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvd0dobGRQSndMNGRMeVBNbW1pR2JCUUQ1d2MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCUbX8AwQC
VXgQAwQBVXq2AwQCweJEAwQAwmZbAwQB2ZwuAwQA2ZxWMA0GCSqGSIb3DQEBCwUA
A4IBAQB7A2s+IprNDCm9NDoG2u3jNsxQIBapZiT/vy11szxIxFWl/r8Ob08E9EPL
BO+bkZeOxOxFGIKVyy6+UwIQrHqqWLYbgcAaCHfYc3JLgC5DVl2E1EJlHNZJ7n0Q
nWwOutUnYccF40Ft+FhxAibI+RAX+G+VshqNoplhpMvU+z+wr35MsvK9Btn0a9xr
/02F/rLA00gRrz1klpW0gLoFeOxwMBKcTzijRcodoMcJL9JxuZVuIp8neMnXzKPl
WNy+zJo0Ilx0zMauZs0k4LGRAWBO4ulu4nMeJmXCNGPWECeeJzmLY9MjvO72jWVw
OmA0kmFT6W6/yVU9wG2kzfgAyV7b
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:05:40 2026 by rpki-client