Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WoD1yuMV0M6NQUWso0V7kzHSCg4.roa
File: WoD1yuMV0M6NQUWso0V7kzHSCg4.roa (raw, json)
Hash identifier: MjzGfeGpduqhZnDx627MF5ogJblRX/WSddO92WtRU2w=
Subject key identifier: 5A:80:F5:CA:E3:15:D0:CE:8D:41:45:AC:A3:45:7B:93:31:D2:0A:0E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A01E091A85A83483411E409A116F8910E9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WoD1yuMV0M6NQUWso0V7kzHSCg4.roa
Signing time: Thu 20 Aug 2026 07:18:28 +0000
ROA not before: Thu 20 Aug 2026 07:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 64.226.156.0/24 maxlen: 24
167.94.164.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
185.155.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:09:1a:85:a8:34:83:41:1e:40:9a:11:6f:89:10:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 20 07:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a80f5cae315d0ce8d4145aca3457b9331d20a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:19:26:32:b3:50:95:dd:b0:f7:3b:89:c1:
f2:c1:75:d6:bb:53:d3:c1:f7:b9:91:a4:64:d6:37:
a9:60:50:da:4f:19:2c:67:ca:d4:87:e6:fd:0d:5b:
a6:cf:e5:d0:aa:37:5d:68:85:72:02:9e:6b:1f:eb:
64:de:97:0e:63:69:c3:65:ea:97:a5:6c:4f:20:d0:
ab:80:d1:4e:3e:94:4c:00:62:dd:6a:50:84:70:8f:
5a:80:ec:d8:24:93:61:76:6c:db:66:c2:c0:5a:e2:
f1:8c:b3:4f:ab:3b:da:24:27:d1:82:d4:97:35:01:
9a:51:33:0e:46:b8:78:19:6c:8d:b8:af:10:ae:60:
b4:91:7e:72:b0:79:c3:fc:45:2d:ae:17:36:c2:d7:
b5:a3:20:d8:80:03:f5:4e:e6:9f:9d:e5:4e:e7:9f:
c9:bb:b8:dd:13:95:e7:59:a8:03:f8:d1:da:eb:60:
c0:fa:16:d3:ab:5d:a3:60:ab:c5:b3:63:f3:7d:8d:
b6:34:05:e1:bd:d0:7a:95:68:6f:07:9b:61:80:ec:
df:fa:44:a3:a4:c0:59:93:e9:55:28:89:8e:2a:e0:
ab:21:c6:a9:50:5a:d4:4a:d1:2a:22:65:b2:09:35:
70:f5:84:f7:9b:43:dd:c6:ba:7c:22:43:6c:57:03:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:F5:CA:E3:15:D0:CE:8D:41:45:AC:A3:45:7B:93:31:D2:0A:0E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WoD1yuMV0M6NQUWso0V7kzHSCg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.156.0/24
167.94.164.0/24
185.155.200.0/24
185.155.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:27:bb:c0:0c:b5:7a:e6:fd:b3:a3:71:50:73:69:fa:26:f0:
f5:ca:d0:0d:be:78:36:6d:b4:b4:a9:f3:49:d4:d0:e9:b4:11:
5c:01:f7:d8:5b:20:ea:b6:e1:61:b0:86:21:a4:a7:e7:d0:59:
68:e3:ca:8a:e0:57:2c:19:9c:01:86:fc:d2:08:4c:6d:21:c3:
ba:68:60:38:91:69:4a:66:ca:8c:65:0b:bd:da:fa:d8:0a:32:
7a:fb:9c:03:3d:9f:ab:2c:b0:4c:ae:16:67:ba:fc:2d:53:8b:
96:e6:ae:5d:11:5f:e3:0b:46:ac:14:75:99:25:7f:5d:e4:4b:
2c:91:a1:2d:d9:66:81:05:84:d8:4e:97:8f:b9:37:b1:f5:d4:
78:ba:54:1e:7c:40:23:0e:e5:df:ad:55:ca:49:bf:14:55:c5:
51:0a:3a:ae:24:42:43:d3:86:e5:4f:d1:b6:f9:3a:26:a8:ba:
6a:83:51:c7:8c:59:65:6a:25:b6:93:79:bf:ee:38:83:50:5b:
db:f3:b5:d6:ea:15:3c:a5:ba:6f:ab:10:e2:1b:6a:8d:83:13:
f8:2c:9d:1a:43:6f:c8:5f:b8:c1:62:10:a3:4f:71:a4:f7:8a:
7c:83:25:7a:ec:6d:ac:ca:22:1a:ea:ea:ac:ba:4a:02:0e:e2:
c2:90:e7:de
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaAeCRqFqDSDQR5AmhFviRDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODIwMDcxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTgwZjVjYWUzMTVkMGNlOGQ0MTQ1YWNhMzQ1N2I5MzMxZDIwYTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEYZJjKzUJXdsPc7icHywXXWu1PT
wfe5kaRk1jepYFDaTxksZ8rUh+b9DVumz+XQqjddaIVyAp5rH+tk3pcOY2nDZeqX
pWxPINCrgNFOPpRMAGLdalCEcI9agOzYJJNhdmzbZsLAWuLxjLNPqzvaJCfRgtSX
NQGaUTMORrh4GWyNuK8QrmC0kX5ysHnD/EUtrhc2wte1oyDYgAP1TuafneVO55/J
u7jdE5XnWagD+NHa62DA+hbTq12jYKvFs2PzfY22NAXhvdB6lWhvB5thgOzf+kSj
pMBZk+lVKImOKuCrIcapUFrUStEqImWyCTVw9YT3m0Pdxrp8IkNsVwMgmQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFqA9crjFdDOjUFFrKNFe5Mx0goOMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvV29EMXl1TVYwTTZOUVVXc28wVjdrekhTQ2c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQOKcAwQA
p16kAwQAuZvIAwQAuZvLMA0GCSqGSIb3DQEBCwUAA4IBAQCuJ7vADLV65v2zo3FQ
c2n6JvD1ytANvng2bbS0qfNJ1NDptBFcAffYWyDqtuFhsIYhpKfn0Flo48qK4Fcs
GZwBhvzSCExtIcO6aGA4kWlKZsqMZQu92vrYCjJ6+5wDPZ+rLLBMrhZnuvwtU4uW
5q5dEV/jC0asFHWZJX9d5EsskaEt2WaBBYTYTpePuTex9dR4ulQefEAjDuXfrVXK
Sb8UVcVRCjquJEJD04blT9G2+TomqLpqg1HHjFllaiW2k3m/7jiDUFvb87XW6hU8
pbpvqxDiG2qNgxP4LJ0aQ2/IX7jBYhCjT3Gk94p8gyV67G2syiIa6uqsukoCDuLC
kOfe
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:28 2026 by rpki-client