Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WlfQv_TavnKtUZfYvOLuMD__k-c.roa
File: WlfQv_TavnKtUZfYvOLuMD__k-c.roa (raw, json)
Hash identifier: 9z1RkIgDvbxG/X9O/hI8tHljdU4kwDjKttvQ28kpfHQ=
Subject key identifier: 5A:57:D0:BF:F4:DA:BE:72:AD:51:97:D8:BC:E2:EE:30:3F:FF:93:E7
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236954EF5C2A167F33A4E7DEB52C57D7
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WlfQv_TavnKtUZfYvOLuMD__k-c.roa
Signing time: Thu 02 Jul 2026 15:18:53 +0000
ROA not before: Thu 02 Jul 2026 15:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 91.237.93.0/24 maxlen: 24
91.237.194.0/24 maxlen: 24
176.121.110.0/24 maxlen: 24
176.121.111.0/24 maxlen: 24
178.213.182.0/24 maxlen: 24
178.213.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:54:ef:5c:2a:16:7f:33:a4:e7:de:b5:2c:57:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a57d0bff4dabe72ad5197d8bce2ee303fff93e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:cc:aa:6d:a6:e5:75:58:97:09:8d:93:1e:
98:f0:b1:46:2a:5b:d8:d3:97:0d:88:a2:9e:c2:47:
a7:36:99:2e:57:ac:8d:a0:09:39:cf:33:d7:1d:23:
59:15:d8:f7:c0:5d:09:6e:6b:60:ff:0e:e6:89:71:
cc:dd:80:99:da:a6:12:1d:a9:31:78:49:7e:5a:8e:
e9:c8:2e:f2:aa:49:a4:80:eb:b7:01:3c:81:46:67:
32:3c:19:fe:6b:c5:bd:c9:b0:f5:b9:16:74:9f:89:
e6:38:00:e6:6d:4f:83:a4:72:67:fe:c8:f2:41:1e:
0c:55:aa:8e:cc:33:33:4b:38:65:54:ca:d7:ac:c2:
83:01:f4:30:f8:fe:58:90:3e:b0:35:9b:f6:2b:68:
16:38:6e:e4:71:65:92:70:3e:52:44:d0:7b:43:c9:
db:d3:72:36:8a:a5:db:ce:3b:3b:67:29:b2:5c:fb:
82:15:02:e4:25:d0:73:b7:f1:fb:0c:b6:7b:8d:c5:
0a:28:a4:2e:a5:54:43:b4:93:c8:5d:c7:6c:c4:f3:
c3:4e:58:56:00:97:1a:72:87:3c:7b:21:40:9c:1c:
d7:86:5e:dd:87:3c:52:10:a6:1c:77:65:7d:30:45:
2c:56:31:50:02:99:28:2d:29:c5:e0:85:a3:e6:02:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:D0:BF:F4:DA:BE:72:AD:51:97:D8:BC:E2:EE:30:3F:FF:93:E7
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WlfQv_TavnKtUZfYvOLuMD__k-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.93.0/24
91.237.194.0/24
176.121.110.0/23
178.213.182.0/23
Signature Algorithm: sha256WithRSAEncryption
14:9a:6b:3f:97:5c:34:d9:0a:bd:55:93:f4:ba:e4:26:a2:9d:
26:29:2e:0a:3f:82:f5:7c:79:19:6c:ac:16:34:c2:d1:f0:66:
d5:8c:71:a1:9a:35:a8:b7:10:b2:e1:e8:a3:0c:6f:a5:f5:2f:
6c:d5:bd:d5:c9:74:f3:ff:05:65:1f:7c:60:d9:eb:24:21:d7:
d6:b1:76:65:e4:f3:d7:05:a5:db:11:cd:cb:24:20:23:07:1b:
e4:41:e9:3a:92:1a:1a:f9:3f:40:f1:0e:2b:06:97:1f:43:26:
b5:c2:7b:d9:13:66:74:2f:45:72:fd:9b:3d:55:99:3e:08:c2:
b7:bd:19:49:73:ab:b1:38:95:2c:fa:4c:fa:2d:61:07:c2:a7:
fc:14:fb:e0:e7:42:4c:b6:b8:c8:2b:95:4d:77:21:aa:92:be:
3f:4f:7c:94:e5:e3:d3:5f:81:ed:af:85:d1:e3:b1:65:06:0b:
95:ec:6d:f4:73:67:a3:4d:02:21:23:b3:04:71:d7:f4:bf:04:
6b:21:07:22:37:f4:58:89:80:9d:b7:a0:d4:a1:fd:aa:dd:2c:
bc:f2:7f:27:30:96:b0:b6:06:eb:7b:d1:c0:ff:d5:24:43:41:
93:57:db:3b:91:bf:03:78:a3:4a:d5:6d:e2:ec:ba:16:33:5d:
ce:45:b9:d3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8jaVTvXCoWfzOk5961LFfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDc4ZDIyNjk4Y2RkMWU2YTIzZDcwYzE3ZmZmZTMyMWRl
ZjNiMzAwHhcNMjYwNzAyMTUxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTU3ZDBiZmY0ZGFiZTcyYWQ1MTk3ZDhiY2UyZWUzMDNmZmY5M2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HzMqm2m5XVYlwmNkx6Y8LFGKlvY
05cNiKKewkenNpkuV6yNoAk5zzPXHSNZFdj3wF0Jbmtg/w7miXHM3YCZ2qYSHakx
eEl+Wo7pyC7yqkmkgOu3ATyBRmcyPBn+a8W9ybD1uRZ0n4nmOADmbU+DpHJn/sjy
QR4MVaqOzDMzSzhlVMrXrMKDAfQw+P5YkD6wNZv2K2gWOG7kcWWScD5SRNB7Q8nb
03I2iqXbzjs7ZymyXPuCFQLkJdBzt/H7DLZ7jcUKKKQupVRDtJPIXcdsxPPDTlhW
AJcacoc8eyFAnBzXhl7dhzxSEKYcd2V9MEUsVjFQApkoLSnF4IWj5gLRHwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFpX0L/02r5yrVGX2Lzi7jA//5PnMB8GA1UdIwQY
MBaAFCkHjSJpjN0eaiPXDBf//jId7zswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvV2xmUXZfVGF2bkt0VVpmWXZPTHVNRF9fay1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW+1dAwQA
W+3CAwQBsHluAwQBstW2MA0GCSqGSIb3DQEBCwUAA4IBAQAUmms/l1w02Qq9VZP0
uuQmop0mKS4KP4L1fHkZbKwWNMLR8GbVjHGhmjWotxCy4eijDG+l9S9s1b3VyXTz
/wVlH3xg2eskIdfWsXZl5PPXBaXbEc3LJCAjBxvkQek6khoa+T9A8Q4rBpcfQya1
wnvZE2Z0L0Vy/Zs9VZk+CMK3vRlJc6uxOJUs+kz6LWEHwqf8FPvg50JMtrjIK5VN
dyGqkr4/T3yU5ePTX4Htr4XR47FlBguV7G30c2ejTQIhI7MEcdf0vwRrIQciN/RY
iYCdt6DUof2q3Sy88n8nMJawtgbre9HA/9UkQ0GTV9s7kb8DeKNK1W3i7LoWM13O
RbnT
-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:45 2026 by rpki-client