Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/w-Pu5ukO1AoC6QCweUwfKar1LlM.roa
File: w-Pu5ukO1AoC6QCweUwfKar1LlM.roa (raw, json)
Hash identifier: ce7IoaAN7LZXE/VgKqoPChX7V3DKzuMYE8GBi0tzHIg=
Subject key identifier: C3:E3:EE:E6:E9:0E:D4:0A:02:E9:00:B0:79:4C:1F:29:AA:F5:2E:53
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0EEE54C42B52D7A04F94E3A6C490789CE
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/w-Pu5ukO1AoC6QCweUwfKar1LlM.roa
Signing time: Tue 29 Sep 2026 20:39:59 +0000
ROA not before: Tue 29 Sep 2026 20:39:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 45.91.236.0/24 maxlen: 24
45.91.237.0/24 maxlen: 24
91.240.254.0/24 maxlen: 24
185.201.28.0/24 maxlen: 24
186.246.24.0/24 maxlen: 24
186.246.25.0/24 maxlen: 24
186.246.26.0/24 maxlen: 24
186.246.61.0/24 maxlen: 32
186.246.66.0/24 maxlen: 32
186.246.71.0/24 maxlen: 32
186.246.84.0/24 maxlen: 32
186.246.91.0/24 maxlen: 32
186.246.96.0/24 maxlen: 32
186.246.110.0/24 maxlen: 32
186.246.113.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:e5:4c:42:b5:2d:7a:04:f9:4e:3a:6c:49:07:89:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 29 20:39:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3e3eee6e90ed40a02e900b0794c1f29aaf52e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:2f:89:62:df:6c:8d:b8:87:56:83:db:e4:
80:a6:6e:48:60:39:a6:3c:ed:44:47:d2:73:b2:56:
99:35:3a:ad:47:c6:7d:4c:e2:ae:5d:f3:56:c3:15:
ff:6f:4f:d9:33:8e:cd:85:b8:35:fb:ad:eb:1f:3b:
90:89:ff:d6:fd:8c:9d:b0:18:1f:eb:bd:99:c1:16:
5c:85:a1:03:bb:4c:04:0f:df:24:4a:e8:41:61:46:
d3:ed:14:1e:8c:45:2e:1a:42:f0:80:ea:35:4f:48:
ab:aa:67:0a:8d:a4:fa:ce:46:88:84:35:fa:97:31:
f3:42:ba:5d:e3:1b:59:7f:ca:d1:33:21:b3:22:bb:
98:e0:63:3e:81:6a:12:0e:a4:c9:1b:64:99:76:da:
c2:3b:62:bd:7d:da:dd:97:c6:ae:c3:21:14:5d:cb:
53:16:79:f6:24:7d:40:7e:d7:31:2d:5b:4e:f6:3e:
db:65:06:a0:f2:43:ad:3d:41:e9:ff:ca:fc:f5:5f:
e3:d1:79:4a:38:3b:98:68:a4:33:8c:2e:76:8c:fd:
79:7e:55:03:24:07:44:3c:06:55:6b:73:d3:9c:cc:
d7:07:99:b8:2f:14:57:27:c8:d0:d9:2e:2a:ed:4b:
0e:64:bf:69:5a:10:32:4f:f2:2e:bb:7f:de:b5:a7:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:EE:E6:E9:0E:D4:0A:02:E9:00:B0:79:4C:1F:29:AA:F5:2E:53
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/w-Pu5ukO1AoC6QCweUwfKar1LlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.236.0/23
91.240.254.0/24
185.201.28.0/24
186.246.24.0-186.246.26.255
186.246.61.0/24
186.246.66.0/24
186.246.71.0/24
186.246.84.0/24
186.246.91.0/24
186.246.96.0/24
186.246.110.0/24
186.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:df:38:fa:dd:67:9e:cd:4a:7d:a5:be:f1:91:c0:f0:00:2d:
d9:94:6f:f1:4f:19:c6:b9:69:16:01:3d:68:4b:ae:00:59:d1:
9f:6b:b2:e2:bb:a1:9d:c3:5d:4c:06:93:ba:5a:06:ac:53:5c:
f8:3c:d5:9b:c1:29:6a:8d:fb:83:9a:8a:fb:1e:e1:d7:82:8f:
1d:f5:f7:ca:7f:75:7b:2d:69:02:65:41:d4:7d:ad:b3:6e:d4:
e2:a6:55:d8:1a:3c:fd:c9:b1:4d:30:bc:67:2a:dc:f0:1f:8b:
79:04:7b:84:bd:fc:52:61:9a:38:9e:1d:eb:1c:b9:07:42:b1:
d2:22:20:d3:d6:5b:d4:20:61:f9:2a:b1:71:d2:ab:b5:41:c3:
c4:2b:1f:08:fd:63:aa:cd:5a:7a:a2:92:eb:24:ce:d4:46:22:
89:bc:d2:89:8d:ec:00:14:a0:93:68:6c:e2:5b:7c:7b:4f:fb:
00:25:49:0a:1e:8c:b5:8e:79:7f:f5:5e:ad:86:88:9f:3b:37:
09:ff:3a:4a:54:40:1c:56:dd:9e:19:e1:be:bb:3f:3c:95:97:
65:9a:cb:b3:2d:b6:ee:2b:07:0b:f2:b9:8d:24:6f:8f:df:32:
a4:93:54:06:a7:e3:73:3b:15:7f:e9:cc:e0:90:00:00:20:31:
62:61:3b:56
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAaDu5UxCtS16BPlOOmxJB4nOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwOTI5MjAzOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2UzZWVlNmU5MGVkNDBhMDJlOTAwYjA3OTRjMWYyOWFhZjUyZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20MviWLfbI24h1aD2+SApm5IYDmm
PO1ER9JzslaZNTqtR8Z9TOKuXfNWwxX/b0/ZM47Nhbg1+63rHzuQif/W/YydsBgf
672ZwRZchaEDu0wED98kSuhBYUbT7RQejEUuGkLwgOo1T0irqmcKjaT6zkaIhDX6
lzHzQrpd4xtZf8rRMyGzIruY4GM+gWoSDqTJG2SZdtrCO2K9fdrdl8auwyEUXctT
Fnn2JH1AftcxLVtO9j7bZQag8kOtPUHp/8r89V/j0XlKODuYaKQzjC52jP15flUD
JAdEPAZVa3PTnMzXB5m4LxRXJ8jQ2S4q7UsOZL9pWhAyT/Iuu3/etafm6wIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFMPj7ubpDtQKAukAsHlMHymq9S5TMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvdy1QdTV1a08xQW9DNlFDd2VVd2ZLYXIxTGxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQBLVvsAwQA
W/D+AwQAuckcMAwDBAO69hgDBAC69hoDBAC69j0DBAC69kIDBAC69kcDBAC69lQD
BAC69lsDBAC69mADBAC69m4DBAC69nEwDQYJKoZIhvcNAQELBQADggEBAF7fOPrd
Z57NSn2lvvGRwPAALdmUb/FPGca5aRYBPWhLrgBZ0Z9rsuK7oZ3DXUwGk7paBqxT
XPg81ZvBKWqN+4Oaivse4deCjx3198p/dXstaQJlQdR9rbNu1OKmVdgaPP3JsU0w
vGcq3PAfi3kEe4S9/FJhmjieHescuQdCsdIiINPWW9QgYfkqsXHSq7VBw8QrHwj9
Y6rNWnqikuskztRGIom80omN7AAUoJNobOJbfHtP+wAlSQoejLWOeX/1Xq2GiJ87
Nwn/OkpUQBxW3Z4Z4b67PzyVl2Way7Mttu4rBwvyuY0kb4/fMqSTVAan43M7FX/p
zOCQAAAgMWJhO1Y=
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:24:38 2026 by rpki-client