Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/wzJa8puNpbqZtViee8O6ZMY35aY.roa
File: wzJa8puNpbqZtViee8O6ZMY35aY.roa (raw, json)
Hash identifier: r+r4b7VNCUGLIiJjt8S3vPuSlnDDGK/RAqESNM+cPlo=
Subject key identifier: C3:32:5A:F2:9B:8D:A5:BA:99:B5:58:9E:7B:C3:BA:64:C6:37:E5:A6
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 019F2368E29FDC437B126E1155B482496661
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/wzJa8puNpbqZtViee8O6ZMY35aY.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 91.102.184.0/24 maxlen: 24
91.102.185.0/24 maxlen: 24
91.102.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e2:9f:dc:43:7b:12:6e:11:55:b4:82:49:66:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3325af29b8da5ba99b5589e7bc3ba64c637e5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:a7:db:8e:dd:bd:d8:c5:5b:fa:97:11:db:
ff:f7:3c:51:6d:a1:14:99:72:85:3e:3b:54:99:ed:
b0:86:0d:a7:01:ea:4a:85:50:3d:8c:14:57:8d:64:
a3:71:57:2d:d8:9a:3c:40:da:43:9a:18:fa:2d:49:
e5:fc:ca:a4:1e:84:bb:b0:40:89:ed:d4:6f:2f:a9:
51:ce:2a:01:b1:f6:e2:36:33:c0:2d:6b:b4:0b:7f:
71:f0:6b:cc:6f:71:a7:3c:87:0b:84:2a:63:b1:46:
1f:9e:e9:da:9c:c9:89:6b:fa:41:65:68:35:09:9e:
35:e6:41:5d:f8:d1:e6:a1:1f:54:a9:7b:dd:1e:58:
03:ad:63:15:3a:aa:f5:ec:12:f8:19:a6:8c:fd:0c:
4d:8f:d8:a7:e5:ee:aa:af:a3:34:1f:93:fd:fe:f4:
18:85:a3:6e:02:3f:e7:99:59:74:2a:4a:a4:a2:a4:
55:85:a5:ab:cd:20:49:4f:eb:56:fb:27:57:2d:39:
ff:a1:3e:76:a7:4e:48:66:07:a8:b5:84:5a:b4:ea:
88:e4:1f:28:4c:79:e7:15:bb:16:c0:06:5a:fc:c2:
2f:a8:c8:d3:1b:b6:14:79:c9:63:3f:33:78:28:aa:
0e:37:7e:db:e4:76:00:e8:9a:0f:0c:66:42:2c:f3:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:32:5A:F2:9B:8D:A5:BA:99:B5:58:9E:7B:C3:BA:64:C6:37:E5:A6
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/wzJa8puNpbqZtViee8O6ZMY35aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.184.0-91.102.186.255
Signature Algorithm: sha256WithRSAEncryption
0a:76:d7:33:ce:19:40:c1:00:e5:fd:e8:f9:0a:00:d2:30:69:
49:db:89:50:d1:22:ef:c4:80:8c:70:8f:49:e9:03:e7:7d:cc:
ee:25:3f:18:7f:03:71:4a:2d:25:d8:a8:9f:92:41:b3:7f:79:
f8:56:63:6f:d1:08:cd:4b:aa:d2:df:8c:0c:9b:a4:c8:ba:8d:
3b:aa:35:a4:a3:ca:d7:03:c0:90:6f:66:c3:2d:62:f8:e0:cf:
41:ed:e3:e0:48:02:8f:d3:6d:63:f7:a9:a5:ff:d9:79:40:e8:
c9:a6:c6:26:21:d3:0f:ff:6f:b2:85:41:95:8d:ed:8d:eb:1a:
18:6a:79:4c:49:26:ef:70:08:21:0b:94:b3:18:f3:2a:14:19:
e1:12:3a:7e:84:9a:b1:0e:bd:52:f7:dc:f1:0b:d7:7e:5e:c7:
bd:f7:d5:db:b2:19:2f:d3:e5:56:e8:a6:0b:d7:1f:63:0a:f6:
fd:cd:40:f3:25:99:13:0b:d3:de:00:c8:86:77:3a:35:ac:12:
99:6a:31:78:22:d2:74:47:02:c5:d9:00:02:1e:7b:cb:aa:8e:
fd:e6:9a:fb:28:cd:02:ba:01:19:3b:58:fa:dc:09:00:7a:14:
3d:a6:aa:14:18:79:c0:67:98:d3:ae:ca:cd:b3:b0:cb:bd:81:
23:e4:63:7d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8jaOKf3EN7Em4RVbSCSWZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWQzNWZjY2M2ZTlkN2M0ZWYxNzYyYjIwNDVmNzUwZjEz
ZTE0YjYwHhcNMjYwNzAyMTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzMyNWFmMjliOGRhNWJhOTliNTU4OWU3YmMzYmE2NGM2MzdlNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXin247dvdjFW/qXEdv/9zxRbaEU
mXKFPjtUme2whg2nAepKhVA9jBRXjWSjcVct2Jo8QNpDmhj6LUnl/MqkHoS7sECJ
7dRvL6lRzioBsfbiNjPALWu0C39x8GvMb3GnPIcLhCpjsUYfnunanMmJa/pBZWg1
CZ415kFd+NHmoR9UqXvdHlgDrWMVOqr17BL4GaaM/QxNj9in5e6qr6M0H5P9/vQY
haNuAj/nmVl0KkqkoqRVhaWrzSBJT+tW+ydXLTn/oT52p05IZgeotYRatOqI5B8o
THnnFbsWwAZa/MIvqMjTG7YUecljPzN4KKoON37b5HYA6JoPDGZCLPOngQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMMyWvKbjaW6mbVYnnvDumTGN+WmMB8GA1UdIwQY
MBaAFKWtNfzMbp18TvF2KyBF91DxPhS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGEwMV9NeHVuWHhPOFhZcklFWDNVUEUtRkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt
MTU1ZmIzZmUyODdlLzEvd3pKYThwdU5wYnFadFZpZWU4TzZaTVkzNWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl
LzEvcGEwMV9NeHVuWHhPOFhZcklFWDNVUEUtRkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANbZrgD
BABbZrowDQYJKoZIhvcNAQELBQADggEBAAp21zPOGUDBAOX96PkKANIwaUnbiVDR
Iu/EgIxwj0npA+d9zO4lPxh/A3FKLSXYqJ+SQbN/efhWY2/RCM1LqtLfjAybpMi6
jTuqNaSjytcDwJBvZsMtYvjgz0Ht4+BIAo/TbWP3qaX/2XlA6MmmxiYh0w//b7KF
QZWN7Y3rGhhqeUxJJu9wCCELlLMY8yoUGeESOn6EmrEOvVL33PEL135ex7331duy
GS/T5VbopgvXH2MK9v3NQPMlmRML094AyIZ3OjWsEplqMXgi0nRHAsXZAAIee8uq
jv3mmvsozQK6ARk7WPrcCQB6FD2mqhQYecBnmNOuys2zsMu9gSPkY30=
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:48 2026 by rpki-client