Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WoVLTmu26GTnnlgjsiiC9srst4c.roa
File: WoVLTmu26GTnnlgjsiiC9srst4c.roa (raw, json)
Hash identifier: Ung3YhForgd8BIl8+IjI1XW3OkA+trMRcMwnjarb0TM=
Subject key identifier: 5A:85:4B:4E:6B:B6:E8:64:E7:9E:58:23:B2:28:82:F6:CA:EC:B7:87
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A11F01140882620011AD7557B4D488CD47
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WoVLTmu26GTnnlgjsiiC9srst4c.roa
Signing time: Fri 09 Oct 2026 04:52:06 +0000
ROA not before: Fri 09 Oct 2026 04:52:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 77.81.100.0/24 maxlen: 24
78.17.182.0/24 maxlen: 24
78.17.255.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.125.20.0/24 maxlen: 24
89.125.252.0/24 maxlen: 24
93.115.105.0/24 maxlen: 24
104.143.203.0/24 maxlen: 24
104.143.216.0/24 maxlen: 24
162.35.226.0/24 maxlen: 24
162.35.228.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:01:14:08:82:62:00:11:ad:75:57:b4:d4:88:cd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 04:52:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a854b4e6bb6e864e79e5823b22882f6caecb787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:44:30:1f:cb:b9:4f:e9:23:0f:c9:e6:e6:
a2:be:13:0e:98:c8:bb:29:d5:f1:36:1e:cc:46:4f:
f8:9e:c8:12:52:9f:c5:39:ba:11:22:66:dd:a1:4b:
b8:0c:bb:78:d0:eb:40:85:d7:79:88:5a:59:b1:55:
db:03:4b:f8:8d:95:96:00:9a:ff:13:a8:ff:13:48:
8f:4a:4a:ea:a2:b5:44:40:ab:f2:f0:5a:f6:d8:28:
51:65:e4:89:d2:4d:87:ba:a2:fa:76:67:15:9b:2d:
29:65:49:ed:ec:4f:72:75:9c:ae:12:a5:d3:2e:22:
99:7d:ac:ed:7a:d3:1e:3e:c6:87:ce:9b:10:64:1d:
53:be:af:37:0d:2e:8a:d5:d9:36:42:d3:3f:5d:a9:
62:af:73:dc:bd:39:6a:cc:5c:4c:e8:5d:10:ce:f0:
72:fe:7e:41:f4:0c:74:a0:74:08:c1:14:77:3c:0f:
fa:54:95:0c:62:13:d4:38:22:7b:2c:23:3b:51:02:
e5:f9:19:a2:b3:5c:99:11:f8:e9:aa:10:ac:6c:c6:
59:b1:cd:83:e1:8b:2a:00:83:10:d0:b7:f7:b2:f2:
8e:7f:20:4b:31:c2:69:f7:39:e2:40:48:c0:e4:e0:
fd:32:e2:92:46:62:63:ba:81:b3:64:64:dd:a1:60:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:4B:4E:6B:B6:E8:64:E7:9E:58:23:B2:28:82:F6:CA:EC:B7:87
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WoVLTmu26GTnnlgjsiiC9srst4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.100.0/24
78.17.182.0/24
78.17.255.0/24
89.37.194.0/24
89.125.20.0/24
89.125.252.0/24
93.115.105.0/24
104.143.203.0/24
104.143.216.0/24
162.35.226.0/24
162.35.228.0/24
212.192.10.0/24
212.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a5:b9:98:01:db:15:fc:71:7e:9e:06:fb:c2:53:00:9f:4e:
cb:4c:d4:38:d9:d2:98:9f:62:be:1f:74:aa:cc:5c:8d:f6:ac:
5a:28:49:b2:72:86:42:78:50:48:8c:64:4a:c6:b4:4e:96:dc:
62:47:8f:ab:cb:c2:ac:41:10:75:41:ae:ab:72:00:7d:e9:3a:
86:1c:73:e0:a1:7a:27:6e:f8:7d:42:61:5a:12:15:1d:86:c3:
81:76:05:7f:54:fd:2e:79:f8:f5:a1:cb:b4:01:d7:ca:1b:53:
b1:3c:8f:43:4e:fc:b7:3c:ce:12:39:c9:03:46:43:be:64:e5:
41:e3:5b:74:e7:0f:3d:de:33:e0:79:88:39:25:0c:2d:10:61:
65:3d:c8:31:3d:af:8c:35:18:ba:19:f0:d8:41:cc:3a:1d:df:
42:89:ec:9e:83:8e:12:c1:a5:c0:0e:8f:3f:85:59:25:4d:e2:
d7:e3:4b:c6:b2:bc:b3:51:7c:57:80:c4:5f:98:0f:d6:af:c8:
43:19:3b:47:af:22:5f:15:44:49:16:c6:b4:c7:15:58:f5:45:
ea:38:6d:55:73:f3:ad:a6:f8:24:b4:75:39:92:53:d7:b9:1d:
10:ce:f9:3b:28:32:71:63:1e:d3:54:e6:0e:74:0d:9a:20:6b:
f9:85:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:49 2026 by rpki-client