Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/W6ODKTsWXuuxM7X4e3pi5Yx9bfY.roa
File: W6ODKTsWXuuxM7X4e3pi5Yx9bfY.roa (raw, json)
Hash identifier: Qe6g3w03gb/tVMQZy9HNCKxhMyO1J+uEJoKBGhQ1KGM=
Subject key identifier: 5B:A3:83:29:3B:16:5E:EB:B1:33:B5:F8:7B:7A:62:E5:8C:7D:6D:F6
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 01A05C03DE4EA2842A096C89EBCAE01C7207
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/W6ODKTsWXuuxM7X4e3pi5Yx9bfY.roa
Signing time: Tue 01 Sep 2026 08:09:12 +0000
ROA not before: Tue 01 Sep 2026 08:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.253.184.0/23 maxlen: 23
45.81.161.0/24 maxlen: 24
45.81.163.0/24 maxlen: 24
45.130.33.0/24 maxlen: 24
45.130.34.0/23 maxlen: 23
88.214.0.0/24 maxlen: 24
88.214.1.0/24 maxlen: 24
88.214.2.0/24 maxlen: 24
88.214.3.0/24 maxlen: 24
88.218.199.0/24 maxlen: 24
185.114.204.0/24 maxlen: 24
185.219.160.0/24 maxlen: 24
185.219.161.0/24 maxlen: 24
193.111.184.0/22 maxlen: 22
193.135.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:03:de:4e:a2:84:2a:09:6c:89:eb:ca:e0:1c:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Sep 1 08:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ba383293b165eebb133b5f87b7a62e58c7d6df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:e0:c8:3d:59:26:79:b0:bb:7e:7f:6f:03:
08:73:27:33:94:8c:a9:12:a9:09:ef:39:73:83:8f:
da:03:60:6e:2a:44:ef:82:d6:19:17:9e:1d:de:68:
34:fc:3e:e1:22:9b:39:23:c1:48:e5:ad:ea:bd:ab:
db:d8:b7:a3:9d:bb:ee:a2:75:9d:cb:4b:23:62:e3:
e5:23:46:4f:ab:2c:a5:68:65:89:2d:d4:67:53:e2:
5c:b8:cc:59:35:56:a5:c9:61:de:ee:34:c7:b3:e2:
55:4f:db:a9:af:d2:72:67:8e:e6:94:13:fb:3e:cb:
4a:03:5d:95:44:82:74:28:c7:34:e8:23:df:c9:a9:
0f:42:84:7f:83:21:27:ce:71:ff:ad:d6:d5:c7:84:
55:9b:50:c3:4a:da:53:37:50:1f:a9:67:6d:e1:4a:
5a:87:0e:52:8b:b7:6f:8f:40:9e:f5:8c:4f:02:fa:
54:05:86:b3:bc:c4:13:a9:d4:c0:8e:bf:de:59:4d:
e9:61:f4:28:61:f5:de:7e:00:28:0b:7b:b4:2b:6b:
9f:3f:09:12:cd:f8:cd:8a:26:75:70:f8:85:1a:04:
41:5e:89:eb:75:eb:07:6e:cb:3c:5f:66:11:00:3a:
bc:aa:bf:e0:46:ef:02:5b:f8:a3:79:5c:8a:03:c1:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A3:83:29:3B:16:5E:EB:B1:33:B5:F8:7B:7A:62:E5:8C:7D:6D:F6
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/W6ODKTsWXuuxM7X4e3pi5Yx9bfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.184.0/23
45.81.161.0/24
45.81.163.0/24
45.130.33.0-45.130.35.255
88.214.0.0/22
88.218.199.0/24
185.114.204.0/24
185.219.160.0/23
193.111.184.0/22
193.135.220.0/22
Signature Algorithm: sha256WithRSAEncryption
52:16:87:ea:92:7b:3e:5e:7a:5a:f7:9a:84:d4:82:0c:7b:af:
a6:3f:82:29:1b:f8:f9:85:af:15:8c:7e:f4:b4:14:23:11:5c:
33:23:02:b2:f8:71:6d:ef:90:cf:38:1d:47:48:5c:85:f4:ca:
0a:0d:21:7e:63:1b:26:5b:4a:5f:c2:ea:fa:fc:b6:4b:14:be:
04:45:0d:02:87:27:d6:6c:63:ce:f8:c9:c4:73:e0:fa:e4:42:
5d:a1:8c:33:73:22:9d:d9:f3:41:86:e4:1a:45:92:12:5d:2c:
9b:19:78:79:45:45:cb:19:22:52:95:3a:e5:93:b1:18:1d:27:
08:0a:24:76:5c:10:b4:c3:7d:f0:31:64:3e:f3:38:f6:ae:65:
41:e8:1c:7a:f0:20:55:01:cd:a7:63:58:07:38:55:11:99:94:
04:df:e4:77:11:87:10:b4:62:70:8e:c6:8b:1c:ba:7e:97:f7:
18:db:5b:98:e6:d8:12:e4:f8:97:fc:3f:05:16:d4:a3:24:5f:
b0:f8:2c:12:f2:57:b5:07:9c:bd:f6:33:ab:91:14:cd:fa:1e:
4a:3d:d9:a6:2f:ff:61:c9:73:d4:0d:b7:13:c2:47:d7:2c:3f:
18:db:d5:c6:83:19:50:b4:84:1e:cc:d2:69:63:97:7f:36:a7:
3d:12:99:f9
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAaBcA95OooQqCWyJ68rgHHIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz
MGJiYmEwHhcNMjYwOTAxMDgwOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmEzODMyOTNiMTY1ZWViYjEzM2I1Zjg3YjdhNjJlNThjN2Q2ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx//gyD1ZJnmwu35/bwMIcyczlIyp
EqkJ7zlzg4/aA2BuKkTvgtYZF54d3mg0/D7hIps5I8FI5a3qvavb2LejnbvuonWd
y0sjYuPlI0ZPqyylaGWJLdRnU+JcuMxZNValyWHe7jTHs+JVT9upr9JyZ47mlBP7
PstKA12VRIJ0KMc06CPfyakPQoR/gyEnznH/rdbVx4RVm1DDStpTN1AfqWdt4Upa
hw5Si7dvj0Ce9YxPAvpUBYazvMQTqdTAjr/eWU3pYfQoYfXefgAoC3u0K2ufPwkS
zfjNiiZ1cPiFGgRBXonrdesHbss8X2YRADq8qr/gRu8CW/ijeVyKA8E0fwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFFujgyk7Fl7rsTO1+Ht6YuWMfW32MB8GA1UdIwQY
MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt
YmU0NWYwZDJhYmJiLzEvVzZPREtUc1dYdXV4TTdYNGUzcGk1WXg5YmZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi
LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBBf24AwQA
LVGhAwQALVGjMAwDBAAtgiEDBAItgiADBAJY1gADBABY2scDBAC5cswDBAG526AD
BALBb7gDBALBh9wwDQYJKoZIhvcNAQELBQADggEBAFIWh+qSez5eelr3moTUggx7
r6Y/gikb+PmFrxWMfvS0FCMRXDMjArL4cW3vkM84HUdIXIX0ygoNIX5jGyZbSl/C
6vr8tksUvgRFDQKHJ9ZsY874ycRz4PrkQl2hjDNzIp3Z80GG5BpFkhJdLJsZeHlF
RcsZIlKVOuWTsRgdJwgKJHZcELTDffAxZD7zOPauZUHoHHrwIFUBzadjWAc4VRGZ
lATf5HcRhxC0YnCOxoscun6X9xjbW5jm2BLk+Jf8PwUW1KMkX7D4LBLyV7UHnL32
M6uRFM36Hko92aYv/2HJc9QNtxPCR9csPxjb1caDGVC0hB7M0mljl382pz0Smfk=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:28 2026 by rpki-client