Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/WwD_aPwzHRX9pxVOcwvqQrQkKZE.roa
File: WwD_aPwzHRX9pxVOcwvqQrQkKZE.roa (raw, json)
Hash identifier: VP+wMFWNdI27cBYAd0s7QNmXqe9NJoY1bxK8XR8/LAQ=
Subject key identifier: 5B:00:FF:68:FC:33:1D:15:FD:A7:15:4E:73:0B:EA:42:B4:24:29:91
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 01A0E90D3DEEF7EA4070C31F089D713590E5
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/WwD_aPwzHRX9pxVOcwvqQrQkKZE.roa
Signing time: Mon 28 Sep 2026 17:25:54 +0000
ROA not before: Mon 28 Sep 2026 17:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39318
IP address blocks: 31.210.174.0/23 maxlen: 24
46.247.42.0/23 maxlen: 24
82.115.48.0/23 maxlen: 24
82.115.48.0/24 maxlen: 24
82.115.49.0/24 maxlen: 24
85.202.192.0/23 maxlen: 24
194.238.42.0/24 maxlen: 24
212.116.234.0/24 maxlen: 24
213.155.22.0/23 maxlen: 23
213.155.22.0/24 maxlen: 24
213.155.23.0/24 maxlen: 24
2a00:5da0:2000::/36 maxlen: 48
2a00:5da0:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:0d:3d:ee:f7:ea:40:70:c3:1f:08:9d:71:35:90:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Sep 28 17:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b00ff68fc331d15fda7154e730bea42b4242991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:c2:c4:e8:76:cc:eb:b6:7b:6f:cb:e1:0e:
b0:cd:44:2a:62:ca:66:16:d6:4e:d9:71:98:0f:a6:
c7:1e:09:cf:fe:d1:8b:0e:b9:93:bf:da:51:26:b8:
61:41:66:10:7d:48:ec:ad:bf:03:29:7b:11:cf:51:
4f:62:8d:be:4f:01:f3:7d:bb:18:e3:c3:43:ef:76:
92:a1:3c:95:78:e2:85:98:7d:11:bd:f8:ec:5f:f4:
6d:fd:b4:21:78:12:1f:3a:61:c6:3b:36:ac:3b:fd:
87:b7:e6:7f:9e:69:42:1b:6a:a7:ea:92:5a:dd:c5:
5f:23:e1:63:35:56:ff:8c:d8:c0:0e:bb:ac:18:fe:
43:74:5b:c9:48:02:ee:24:79:4b:21:d3:12:73:13:
72:03:31:0a:78:06:ab:c4:b4:a6:68:56:97:95:b5:
a5:19:bf:ba:30:68:a0:f7:07:b9:04:f3:7a:4b:dc:
cd:3c:c9:77:fd:31:e5:bb:77:d4:2c:d9:12:f0:d5:
27:15:c5:55:83:1c:45:62:da:3e:42:2c:4c:8c:1e:
26:27:cc:d7:91:9c:21:c3:4e:f0:fb:ca:c5:01:8d:
4c:5e:d7:9a:3b:2c:8d:f3:c9:78:84:44:94:31:22:
47:0e:f7:1d:c8:ff:78:b0:7a:28:f1:3a:41:0f:c2:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:00:FF:68:FC:33:1D:15:FD:A7:15:4E:73:0B:EA:42:B4:24:29:91
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/WwD_aPwzHRX9pxVOcwvqQrQkKZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.174.0/23
46.247.42.0/23
82.115.48.0/23
85.202.192.0/23
194.238.42.0/24
212.116.234.0/24
213.155.22.0/23
IPv6:
2a00:5da0:2000::/35
Signature Algorithm: sha256WithRSAEncryption
34:5d:e4:bb:8e:58:8f:8b:90:b2:6f:b8:0f:3c:af:18:a2:ee:
81:2e:15:bb:cd:a4:fd:57:77:e4:57:51:66:53:81:79:6a:d2:
7d:f0:0b:d7:8b:33:7d:8d:64:db:a7:9f:12:81:91:3c:e0:88:
83:94:90:36:37:40:46:38:9e:9e:a4:0e:8c:f6:0c:b6:2b:4d:
b3:f2:fd:43:35:fc:49:da:c7:d5:ca:e8:86:ab:17:cd:05:03:
3e:9a:12:65:b5:6b:d5:a8:59:89:45:72:ab:f6:29:39:4f:f2:
25:42:14:90:40:45:0f:21:86:9e:4d:83:84:48:74:db:68:15:
84:16:73:a8:19:e9:f5:91:86:b9:b1:f7:99:f1:85:60:5c:27:
7d:36:79:cb:a1:70:a9:b1:66:49:8b:2e:e7:e3:4d:97:a8:2e:
2e:4d:d4:62:60:c8:bc:cb:4a:ff:87:1a:00:b2:f6:f2:1e:4b:
a6:ad:14:2d:d0:8d:33:1b:1c:d4:d8:8e:e2:00:88:92:ff:6d:
4c:6a:b6:87:24:4f:db:86:4d:a4:95:2d:86:c8:98:9b:3f:be:
b4:e7:c9:b2:f9:e8:b0:63:bb:f9:94:9c:90:e3:b9:05:8b:d4:
b7:99:01:8f:62:ea:a1:ba:49:c4:da:91:f3:eb:67:9a:05:0d:
f8:b3:29:1d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAaDpDT3u9+pAcMMfCJ1xNZDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm
NTExOWEwHhcNMjYwOTI4MTcyNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjAwZmY2OGZjMzMxZDE1ZmRhNzE1NGU3MzBiZWE0MmI0MjQyOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRvCxOh2zOu2e2/L4Q6wzUQqYspm
FtZO2XGYD6bHHgnP/tGLDrmTv9pRJrhhQWYQfUjsrb8DKXsRz1FPYo2+TwHzfbsY
48ND73aSoTyVeOKFmH0RvfjsX/Rt/bQheBIfOmHGOzasO/2Ht+Z/nmlCG2qn6pJa
3cVfI+FjNVb/jNjADrusGP5DdFvJSALuJHlLIdMScxNyAzEKeAarxLSmaFaXlbWl
Gb+6MGig9we5BPN6S9zNPMl3/THlu3fULNkS8NUnFcVVgxxFYto+QixMjB4mJ8zX
kZwhw07w+8rFAY1MXteaOyyN88l4hESUMSJHDvcdyP94sHoo8TpBD8JSowIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFFsA/2j8Mx0V/acVTnML6kK0JCmRMB8GA1UdIwQY
MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt
ZjkxYmI1MTc5MjE3LzEvV3dEX2FQd3pIUlg5cHhWT2N3dnFRclFrS1pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3
LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAwBAIAATAqAwQBH9KuAwQB
LvcqAwQBUnMwAwQBVcrAAwQAwu4qAwQA1HTqAwQB1ZsWMA4EAgACMAgDBgUqAF2g
IDANBgkqhkiG9w0BAQsFAAOCAQEANF3ku45Yj4uQsm+4DzyvGKLugS4Vu82k/Vd3
5FdRZlOBeWrSffAL14szfY1k26efEoGRPOCIg5SQNjdARjienqQOjPYMtitNs/L9
QzX8SdrH1crohqsXzQUDPpoSZbVr1ahZiUVyq/YpOU/yJUIUkEBFDyGGnk2DhEh0
22gVhBZzqBnp9ZGGubH3mfGFYFwnfTZ5y6FwqbFmSYsu5+NNl6guLk3UYmDIvMtK
/4caALL28h5Lpq0ULdCNMxsc1NiO4gCIkv9tTGq2hyRP24ZNpJUthsiYmz++tOfJ
svnosGO7+ZSckOO5BYvUt5kBj2LqobpJxNqR8+tnmgUN+LMpHQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 21:25:55 2026 by rpki-client