Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/WUTmGL5WAIOr0GZybUXb7I9fwZc.roa
File: WUTmGL5WAIOr0GZybUXb7I9fwZc.roa (raw, json)
Hash identifier: iDFoqqr/5GareyXKRTXdojWdmtpvOeHh5/xK134ubQc=
Subject key identifier: 59:44:E6:18:BE:56:00:83:AB:D0:66:72:6D:45:DB:EC:8F:5F:C1:97
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019FD1833214D702E28E31F044B6D16F3295
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/WUTmGL5WAIOr0GZybUXb7I9fwZc.roa
Signing time: Wed 05 Aug 2026 10:41:03 +0000
ROA not before: Wed 05 Aug 2026 10:41:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 91.209.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 14:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:83:32:14:d7:02:e2:8e:31:f0:44:b6:d1:6f:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Aug 5 10:41:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5944e618be560083abd066726d45dbec8f5fc197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:9b:17:f1:53:b3:cb:d0:39:da:cb:7d:49:
84:65:d0:f3:92:1a:b4:ba:b8:10:40:87:56:14:92:
c7:1b:e7:19:21:b5:4e:12:c5:57:a6:1a:06:fd:0c:
5e:45:9a:35:ca:02:f3:4b:62:3d:f2:d2:08:75:ca:
86:d3:32:64:6a:de:df:9d:86:d9:06:d3:0b:bd:5f:
2f:77:e1:c7:f4:d3:3a:b3:2d:d3:14:18:8f:c8:79:
a3:c8:6d:ea:f6:b0:77:0b:f0:47:6d:dc:e6:af:9f:
2f:a0:36:1c:04:69:79:3c:6a:de:7f:7b:3d:fa:f1:
bc:5b:f3:be:55:3e:ba:62:25:19:8d:3b:0d:c8:16:
e7:f6:bd:1e:67:28:99:4d:7d:a7:e0:78:60:5f:e4:
76:09:cf:2e:f9:3a:04:97:5c:f7:8a:18:7e:46:85:
90:1b:32:94:82:e9:76:e0:1c:3a:4d:15:71:ba:19:
a1:08:de:e3:97:15:53:27:d0:dd:20:4d:05:93:bf:
d4:98:3d:b1:e0:68:40:f5:49:16:80:3a:ea:45:08:
b7:44:f8:38:d6:e9:98:b6:05:fe:84:2a:a7:cf:95:
26:2a:04:bd:a1:30:eb:0a:23:1a:bd:cb:9a:cc:f8:
17:6b:cb:93:dc:06:74:0d:59:d8:86:d0:fa:5d:07:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:E6:18:BE:56:00:83:AB:D0:66:72:6D:45:DB:EC:8F:5F:C1:97
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/WUTmGL5WAIOr0GZybUXb7I9fwZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ca:7e:76:e3:3b:0f:78:05:7f:5b:6e:d1:3a:5c:f7:4c:5e:
27:30:ff:3f:6f:b7:bc:47:c6:e4:9b:07:21:53:7a:32:a9:3c:
3a:08:b4:1f:38:ab:ac:91:31:01:47:87:8d:5b:a6:c8:8f:b3:
f1:ba:6a:6c:bb:2d:71:84:81:08:13:ed:1d:dd:c5:59:7a:f9:
13:4f:93:92:da:b8:80:a0:57:0c:a3:69:fb:a1:b5:84:a9:28:
78:03:3b:36:9a:46:2b:c7:76:2e:8b:86:39:49:99:37:7c:bf:
2a:35:c2:f4:0d:c2:00:c7:79:c6:db:0a:e5:12:6f:2d:e8:09:
3e:89:29:ed:a5:e8:22:96:55:2f:78:6f:e5:fc:13:c5:96:ff:
3a:56:36:64:6f:72:d4:72:6d:c7:f1:be:98:7c:fa:a8:9d:2a:
f5:95:4f:02:ed:9e:3e:11:47:82:bb:c6:9a:a6:ac:44:58:30:
3d:66:30:f0:a0:a1:9e:a9:db:29:60:35:cb:ac:ef:a5:b3:a8:
24:c3:3c:0e:30:c8:f3:e1:b2:9f:01:86:78:c8:c8:6e:1e:73:
8c:17:99:73:7b:94:fe:e9:83:6f:c6:a1:1e:11:3f:14:1c:c4:
f5:a5:e2:01:5a:95:ef:e0:8b:66:80:de:de:51:be:01:39:b7:
30:64:f1:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/RgzIU1wLijjHwRLbRbzKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0
M2Q1MzUwHhcNMjYwODA1MTA0MTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTQ0ZTYxOGJlNTYwMDgzYWJkMDY2NzI2ZDQ1ZGJlYzhmNWZjMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfybF/FTs8vQOdrLfUmEZdDzkhq0
urgQQIdWFJLHG+cZIbVOEsVXphoG/QxeRZo1ygLzS2I98tIIdcqG0zJkat7fnYbZ
BtMLvV8vd+HH9NM6sy3TFBiPyHmjyG3q9rB3C/BHbdzmr58voDYcBGl5PGref3s9
+vG8W/O+VT66YiUZjTsNyBbn9r0eZyiZTX2n4HhgX+R2Cc8u+ToEl1z3ihh+RoWQ
GzKUgul24Bw6TRVxuhmhCN7jlxVTJ9DdIE0Fk7/UmD2x4GhA9UkWgDrqRQi3RPg4
1umYtgX+hCqnz5UmKgS9oTDrCiMavcuazPgXa8uT3AZ0DVnYhtD6XQfLewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlE5hi+VgCDq9Bmcm1F2+yPX8GXMB8GA1UdIwQY
MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt
ZmVlOGVhZjczYjBkLzEvV1VUbUdMNVdBSU9yMEdaeWJVWGI3STlmd1pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk
LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GHMA0G
CSqGSIb3DQEBCwUAA4IBAQCoyn524zsPeAV/W27ROlz3TF4nMP8/b7e8R8bkmwch
U3oyqTw6CLQfOKuskTEBR4eNW6bIj7Pxumpsuy1xhIEIE+0d3cVZevkTT5OS2riA
oFcMo2n7obWEqSh4Azs2mkYrx3Yui4Y5SZk3fL8qNcL0DcIAx3nG2wrlEm8t6Ak+
iSntpegillUveG/l/BPFlv86VjZkb3LUcm3H8b6YfPqonSr1lU8C7Z4+EUeCu8aa
pqxEWDA9ZjDwoKGeqdspYDXLrO+ls6gkwzwOMMjz4bKfAYZ4yMhuHnOMF5lze5T+
6YNvxqEeET8UHMT1peIBWpXv4ItmgN7eUb4BObcwZPFq
-----END CERTIFICATE-----
Generated at Mon Aug 24 22:25:06 2026 by rpki-client