Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/WBw7gw6osmHy0IqvZHLM8HMfKls.roa
File: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (raw, json)
Hash identifier: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=
Subject key identifier: 58:1C:3B:83:0E:A8:B2:61:F2:D0:8A:AF:64:72:CC:F0:73:1F:2A:5B
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019FF5B8B71D7956BCD6D4A670B66B818FE8
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/WBw7gw6osmHy0IqvZHLM8HMfKls.roa
Signing time: Wed 12 Aug 2026 11:25:51 +0000
ROA not before: Wed 12 Aug 2026 11:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 103.108.88.0/23 maxlen: 23
103.137.162.0/23 maxlen: 23
189.81.20.0/23 maxlen: 23
189.81.38.0/23 maxlen: 23
189.81.56.0/23 maxlen: 23
189.81.64.0/23 maxlen: 23
189.81.72.0/23 maxlen: 23
189.81.76.0/23 maxlen: 23
189.81.116.0/23 maxlen: 23
189.104.128.0/23 maxlen: 23
189.104.140.0/23 maxlen: 23
189.104.184.0/23 maxlen: 23
195.64.97.0/24 maxlen: 24
205.188.6.0/23 maxlen: 23
205.188.62.0/23 maxlen: 23
205.188.148.0/22 maxlen: 22
205.188.152.0/22 maxlen: 22
205.188.228.0/22 maxlen: 22
205.188.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:b8:b7:1d:79:56:bc:d6:d4:a6:70:b6:6b:81:8f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Aug 12 11:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=581c3b830ea8b261f2d08aaf6472ccf0731f2a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:66:66:63:fe:30:8a:92:c1:d0:ae:20:84:c9:
39:be:94:6d:e9:7b:07:8b:2a:e7:a3:76:6b:83:d7:
d6:f4:d6:22:8c:f1:54:fd:33:eb:4b:37:ee:eb:9d:
1a:72:e6:49:e6:87:a9:32:8e:5b:e8:f4:a3:20:26:
42:bd:76:14:94:fd:37:18:a9:b1:c4:0c:bb:23:d3:
06:d7:6b:ac:2c:3d:8b:a0:9c:28:a2:ac:af:56:62:
56:c4:62:98:bf:75:f6:63:38:af:21:8d:bb:c4:43:
56:39:d8:7f:c5:e5:ab:19:3c:6b:13:1b:ae:33:c3:
db:5f:28:18:14:c4:ae:a1:c5:8f:d2:49:c8:b3:da:
01:42:95:f6:56:ba:6d:83:d6:15:28:ed:45:63:f0:
60:62:5a:24:82:cb:89:e6:c4:12:b3:ec:b0:b9:bb:
18:25:7f:d5:04:30:6a:6e:24:f7:2c:3d:b1:bf:24:
0b:09:0b:c3:a6:2e:a0:2b:ad:ea:40:53:2f:92:79:
ad:90:63:17:6d:b3:8b:22:00:ec:0d:91:6f:6d:92:
fc:7d:7e:76:f8:46:1c:fc:6c:c7:bd:e1:28:53:0b:
a8:07:ce:c7:38:88:90:54:ac:f8:10:21:a3:cf:d8:
8b:47:dd:21:58:91:d5:c7:69:db:ea:f3:d1:5d:ff:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1C:3B:83:0E:A8:B2:61:F2:D0:8A:AF:64:72:CC:F0:73:1F:2A:5B
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/WBw7gw6osmHy0IqvZHLM8HMfKls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.88.0/23
103.137.162.0/23
189.81.20.0/23
189.81.38.0/23
189.81.56.0/23
189.81.64.0/23
189.81.72.0/23
189.81.76.0/23
189.81.116.0/23
189.104.128.0/23
189.104.140.0/23
189.104.184.0/23
195.64.97.0/24
205.188.6.0/23
205.188.62.0/23
205.188.148.0-205.188.155.255
205.188.228.0/22
205.188.250.0/23
Signature Algorithm: sha256WithRSAEncryption
62:6e:42:10:fd:2b:94:0b:6a:ae:42:f4:cf:e3:e0:e6:b3:17:
79:81:c3:d9:cd:a3:86:41:19:3f:69:2e:95:16:e2:54:78:5f:
62:51:2b:6b:9c:a4:ac:52:a8:25:17:d1:b7:bf:cd:78:78:fa:
d2:3d:83:94:ff:c6:c6:0a:82:d1:48:8e:09:6b:11:aa:c7:80:
94:ce:5d:d3:3e:0c:e9:a1:92:7f:f0:38:42:fc:9f:aa:ad:a8:
86:db:d2:dd:ae:7e:7e:52:67:c8:84:6c:a4:37:0c:6f:8b:0d:
c3:39:e0:93:03:56:75:12:5f:b5:29:37:f0:0f:68:5f:1c:96:
4c:ae:eb:96:ec:a6:2e:68:1a:3c:67:e1:1b:c9:fb:f5:ae:6b:
2e:62:17:0a:1c:99:f4:a5:ee:37:83:c4:49:41:01:fa:87:ce:
bf:00:d8:e9:67:1e:0e:6e:55:d2:75:f6:b1:bb:55:a5:9f:c7:
49:b6:cc:77:29:d8:d8:12:20:be:c4:e1:83:e5:69:1b:f7:d8:
44:3a:25:4b:03:53:b3:c0:5d:b3:61:c8:86:34:18:81:14:38:
0a:66:e6:08:91:ea:75:11:62:25:db:7d:f0:a4:ca:8b:f7:c0:
fe:3d:18:36:b4:fe:5d:89:a1:a6:92:3f:57:1d:c1:24:55:2b:
e9:99:8f:d7
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZ/1uLcdeVa81tSmcLZrgY/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwODEyMTEyNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODFjM2I4MzBlYThiMjYxZjJkMDhhYWY2NDcyY2NmMDczMWYyYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mZmY/4wipLB0K4ghMk5vpRt6XsH
iyrno3Zrg9fW9NYijPFU/TPrSzfu650acuZJ5oepMo5b6PSjICZCvXYUlP03GKmx
xAy7I9MG12usLD2LoJwooqyvVmJWxGKYv3X2YzivIY27xENWOdh/xeWrGTxrExuu
M8PbXygYFMSuocWP0knIs9oBQpX2Vrptg9YVKO1FY/BgYlokgsuJ5sQSs+ywubsY
JX/VBDBqbiT3LD2xvyQLCQvDpi6gK63qQFMvknmtkGMXbbOLIgDsDZFvbZL8fX52
+EYc/GzHveEoUwuoB87HOIiQVKz4ECGjz9iLR90hWJHVx2nb6vPRXf+CZQIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFFgcO4MOqLJh8tCKr2RyzPBzHypbMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvV0J3N2d3Nm9zbUh5MElxdlpITE04SE1mS2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAWdsWAME
AWeJogMEAb1RFAMEAb1RJgMEAb1ROAMEAb1RQAMEAb1RSAMEAb1RTAMEAb1RdAME
Ab1ogAMEAb1ojAMEAb1ouAMEAMNAYQMEAc28BgMEAc28PjAMAwQCzbyUAwQCzbyY
AwQCzbzkAwQBzbz6MA0GCSqGSIb3DQEBCwUAA4IBAQBibkIQ/SuUC2quQvTP4+Dm
sxd5gcPZzaOGQRk/aS6VFuJUeF9iUStrnKSsUqglF9G3v814ePrSPYOU/8bGCoLR
SI4JaxGqx4CUzl3TPgzpoZJ/8DhC/J+qraiG29Ldrn5+UmfIhGykNwxviw3DOeCT
A1Z1El+1KTfwD2hfHJZMruuW7KYuaBo8Z+Ebyfv1rmsuYhcKHJn0pe43g8RJQQH6
h86/ANjpZx4OblXSdfaxu1Wln8dJtsx3KdjYEiC+xOGD5Wkb99hEOiVLA1OzwF2z
YciGNBiBFDgKZuYIkep1EWIl233wpMqL98D+PRg2tP5diaGmkj9XHcEkVSvpmY/X
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:22:39 2026 by rpki-client