Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/W_-_HaUod-cjK_nA0bLneyeWAes.roa
File: W_-_HaUod-cjK_nA0bLneyeWAes.roa (raw, json)
Hash identifier: 1x91spJR0Mlu6Fz+Qjwjj0FIGT4+k9oC+PPm0TZ/70g=
Subject key identifier: 5B:FF:BF:1D:A5:28:77:E7:23:2B:F9:C0:D1:B2:E7:7B:27:96:01:EB
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 01A01478F9C673D9E30EBA2A8F2BCF7EB6CB
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/W_-_HaUod-cjK_nA0bLneyeWAes.roa
Signing time: Tue 18 Aug 2026 10:44:27 +0000
ROA not before: Tue 18 Aug 2026 10:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197968
IP address blocks: 82.115.54.0/23 maxlen: 24
87.199.134.0/24 maxlen: 24
91.147.109.0/24 maxlen: 24
109.175.175.0/24 maxlen: 24
109.175.225.0/24 maxlen: 24
212.108.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:78:f9:c6:73:d9:e3:0e:ba:2a:8f:2b:cf:7e:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Aug 18 10:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bffbf1da52877e7232bf9c0d1b2e77b279601eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:b7:52:53:0d:fe:a3:54:f1:ee:ba:cb:49:
f2:9e:1d:03:81:09:2d:3b:75:f6:40:56:8d:e0:0d:
9a:1e:3c:b5:36:a9:cd:d1:7f:2c:74:12:c2:71:d1:
6d:81:db:d8:2f:2f:e5:3e:f7:7e:e1:48:e6:89:22:
af:f8:a3:16:c2:a0:29:81:69:1d:d7:72:30:23:fd:
ab:0b:04:ce:1d:12:f6:a2:01:83:d5:53:d2:04:4b:
c2:e4:97:53:89:4d:f5:8a:47:b3:4b:68:0b:71:c8:
7b:d4:62:82:d6:e5:7b:11:a5:3a:98:a3:23:ea:86:
16:9a:dc:da:48:fc:97:ec:4c:8a:69:5d:6d:b7:d1:
11:c6:b8:51:4e:83:67:9c:c4:4a:85:eb:e8:cc:6b:
c4:69:8a:57:5c:bb:95:2c:43:fd:c4:84:9f:d4:3c:
b3:ab:70:11:21:70:35:1f:9a:5f:13:9f:e7:e7:f9:
b2:0f:9b:de:c6:7b:83:9f:24:36:2a:ef:c9:96:d5:
57:0f:c0:ed:23:5d:aa:5b:0d:30:bf:cd:77:7a:db:
89:b2:51:74:86:27:6d:9d:83:c7:dc:2f:90:6d:c8:
ea:61:98:eb:98:f8:23:45:2c:81:29:72:96:f7:04:
27:6a:9d:98:c0:41:f4:75:22:fc:62:2f:d0:71:e5:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:BF:1D:A5:28:77:E7:23:2B:F9:C0:D1:B2:E7:7B:27:96:01:EB
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/W_-_HaUod-cjK_nA0bLneyeWAes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.54.0/23
87.199.134.0/24
91.147.109.0/24
109.175.175.0/24
109.175.225.0/24
212.108.86.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:2a:01:bf:b9:c5:da:4f:7b:be:7d:42:cc:1f:fc:2e:bb:ea:
e2:3b:79:c6:0e:61:83:99:75:68:1a:81:d6:5a:1b:d9:0c:28:
3c:19:20:4c:53:1f:5e:e6:bb:48:2e:85:f8:3f:2a:77:97:2a:
67:dd:83:e0:8a:6e:a5:20:38:db:e0:7c:66:38:15:40:8a:00:
6c:1b:fc:78:c1:d8:c0:24:a3:a5:9b:26:de:58:a9:5a:ed:ab:
69:88:35:6d:0e:ae:1c:73:43:16:48:7b:1a:9d:19:ed:a6:0c:
5d:a5:75:b0:65:8a:fd:27:73:c6:76:a4:bc:f9:b2:b4:5b:d0:
39:29:7b:ae:f7:2b:6d:60:2f:10:de:b6:58:ed:79:fa:49:ff:
46:39:b9:21:6f:f4:d9:76:95:12:02:6a:61:25:99:82:cd:35:
42:42:5d:7c:77:fb:f2:d6:7f:14:84:02:99:6e:21:4f:b5:38:
d8:72:49:7e:bc:8f:ea:93:0a:7c:84:e6:e0:7b:33:97:80:e3:
ac:33:af:63:01:49:26:5b:42:13:15:f0:57:4e:18:ec:5e:63:
46:00:58:f8:6e:df:54:2d:c3:2c:2e:6b:61:eb:7a:bf:7a:e1:
06:82:7a:1b:94:3a:df:32:36:0c:be:36:e1:b4:76:97:8a:41:
a3:3a:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:18:24 2026 by rpki-client