Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1-WhVSQI8MlkI--O3ccpS4fbtJbE.roa
File: 1-WhVSQI8MlkI--O3ccpS4fbtJbE.roa (raw, json)
Hash identifier: TmVogIzRpC2dAfzOqXtPNuLojSisyvTVmBcl3Rw60Ow=
Subject key identifier: F9:68:55:49:02:3C:32:59:08:FB:E3:B7:71:CA:52:E1:F6:ED:25:B1
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019DD3485744621F81A427C79515EED4F0E8
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1-WhVSQI8MlkI--O3ccpS4fbtJbE.roa
Signing time: Tue 28 Apr 2026 08:50:26 +0000
ROA not before: Tue 28 Apr 2026 08:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34224
IP address blocks: 80.71.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:48:57:44:62:1f:81:a4:27:c7:95:15:ee:d4:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 28 08:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9685549023c325908fbe3b771ca52e1f6ed25b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:74:50:ac:a2:90:a6:b2:a8:a9:f4:ab:71:e2:
29:e0:86:12:e0:f5:63:3f:bb:55:d0:25:8a:d9:c1:
b9:25:ed:a6:b6:ad:c9:ea:40:21:40:46:d7:e8:42:
b4:10:b4:9f:5e:4b:08:e9:b2:b2:34:c9:9a:05:ae:
d7:4b:c8:8a:f3:de:1b:1a:fa:a0:04:f1:7e:e6:7d:
5a:f4:e4:6f:f6:4f:3d:05:8a:59:8b:28:41:df:93:
56:1e:ac:df:fa:e1:6b:4a:0f:77:6a:81:e3:01:8a:
0d:be:a7:b4:f1:d6:d5:c7:fb:63:6f:2b:7d:28:a2:
1b:d6:07:c4:2c:c2:8e:aa:51:54:e7:e8:99:dc:aa:
61:c1:62:d1:e5:89:a6:99:1e:e2:72:f3:14:97:60:
a2:68:84:be:4c:26:2a:1e:7c:29:70:9f:4f:f0:d7:
51:ff:2d:be:03:63:9e:89:a5:30:0c:ea:92:10:37:
a0:38:db:cd:15:3a:44:ad:3f:a8:40:3c:19:e2:8b:
f7:2f:71:4c:e5:f1:8a:04:8c:1a:45:e9:83:68:b1:
14:31:63:56:fa:6a:18:0f:60:96:0e:75:b6:a3:6c:
15:5a:85:f5:0e:40:df:59:fb:ee:aa:86:6e:32:fc:
c3:6d:f2:f3:5f:34:f0:e0:58:e7:8b:8f:b1:45:ea:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:55:49:02:3C:32:59:08:FB:E3:B7:71:CA:52:E1:F6:ED:25:B1
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1-WhVSQI8MlkI--O3ccpS4fbtJbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1a:be:f7:d7:fc:68:b9:0e:64:4f:99:e5:fe:ea:6d:33:2b:
2a:76:ee:02:ed:a3:45:48:66:5e:b0:cb:d6:93:4c:92:0a:d3:
b7:26:e5:63:61:d6:c8:98:a6:13:35:00:c5:7f:47:e1:ec:5d:
77:7e:c8:ef:2f:dc:a6:6d:ba:b9:ee:ca:ad:31:27:57:29:3e:
9a:62:d1:db:fc:35:d1:53:2b:ee:68:a6:ba:1c:e8:47:74:b3:
b3:8f:14:e2:38:21:ed:c2:f8:ef:df:d6:ae:3d:78:4d:f3:58:
a6:b2:84:dd:45:1f:aa:ed:a3:59:41:20:9d:b0:76:a0:e9:16:
e5:de:1a:d2:5d:05:e2:de:dd:ce:28:94:7d:ec:89:99:15:87:
37:13:fb:02:8c:bb:d6:a4:49:f3:2d:44:1a:10:41:5d:bc:65:
39:21:46:fa:15:c8:85:8c:e4:e0:ae:b5:bd:f0:9f:9d:0c:5e:
c9:cd:dd:c9:63:60:5f:00:d3:bc:7c:90:63:b7:05:dc:8e:d6:
42:a7:1f:88:c1:b2:f4:b3:cf:e5:31:1c:9e:1d:27:e7:8b:82:
6c:3e:5f:93:81:8d:2c:d4:79:94:33:a7:09:1e:21:0b:f5:20:
7b:a1:82:49:29:e0:bb:f2:1c:83:60:5d:4a:fe:4c:f2:db:de:
68:16:eb:c4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ3TSFdEYh+BpCfHlRXu1PDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjYwNDI4MDg1MDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTY4NTU0OTAyM2MzMjU5MDhmYmUzYjc3MWNhNTJlMWY2ZWQyNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HRQrKKQprKoqfSrceIp4IYS4PVj
P7tV0CWK2cG5Je2mtq3J6kAhQEbX6EK0ELSfXksI6bKyNMmaBa7XS8iK894bGvqg
BPF+5n1a9ORv9k89BYpZiyhB35NWHqzf+uFrSg93aoHjAYoNvqe08dbVx/tjbyt9
KKIb1gfELMKOqlFU5+iZ3KphwWLR5YmmmR7icvMUl2CiaIS+TCYqHnwpcJ9P8NdR
/y2+A2OeiaUwDOqSEDegONvNFTpErT+oQDwZ4ov3L3FM5fGKBIwaRemDaLEUMWNW
+moYD2CWDnW2o2wVWoX1DkDfWfvuqoZuMvzDbfLzXzTw4Fjni4+xReqs1wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPloVUkCPDJZCPvjt3HKUuH27SWxMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvMS1XaFZTUUk4TWxrSS0tTzNjY3BTNGZidEpiRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODYvOWRiNTI1LTEwNTktNGMwNy1hNWFkLTE5MTg5YjNjOWM3
ZC8xL1NlVVdsTVRVYTBfTUF2cm5IbDI1UXFjUWprYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBH7TAN
BgkqhkiG9w0BAQsFAAOCAQEAihq+99f8aLkOZE+Z5f7qbTMrKnbuAu2jRUhmXrDL
1pNMkgrTtyblY2HWyJimEzUAxX9H4exdd37I7y/cpm26ue7KrTEnVyk+mmLR2/w1
0VMr7mimuhzoR3Szs48U4jgh7cL479/Wrj14TfNYprKE3UUfqu2jWUEgnbB2oOkW
5d4a0l0F4t7dziiUfeyJmRWHNxP7Aoy71qRJ8y1EGhBBXbxlOSFG+hXIhYzk4K61
vfCfnQxeyc3dyWNgXwDTvHyQY7cF3I7WQqcfiMGy9LPP5TEcnh0n54uCbD5fk4GN
LNR5lDOnCR4hC/Uge6GCSSngu/Icg2BdSv5M8tveaBbrxA==
-----END CERTIFICATE-----
Generated at Thu Apr 30 20:18:30 2026 by rpki-client