Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/WrFq8U6oGpZOyYQTgpsxtULaHpY.roa
File: WrFq8U6oGpZOyYQTgpsxtULaHpY.roa (raw, json)
Hash identifier: DaTkNKa/8bSzoEGirYCzYE6s6ctR7ykUWbX1j0yLFaw=
Subject key identifier: 5A:B1:6A:F1:4E:A8:1A:96:4E:C9:84:13:82:9B:31:B5:42:DA:1E:96
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 019FF154725C4CE544CD17988E49B324C200
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/WrFq8U6oGpZOyYQTgpsxtULaHpY.roa
Signing time: Tue 11 Aug 2026 14:57:51 +0000
ROA not before: Tue 11 Aug 2026 14:57:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43495
IP address blocks: 91.197.88.0/22 maxlen: 24
194.4.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:54:72:5c:4c:e5:44:cd:17:98:8e:49:b3:24:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Aug 11 14:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab16af14ea81a964ec98413829b31b542da1e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:5b:db:17:b1:4f:1f:15:5e:7d:7d:6d:b8:
50:fc:ba:49:98:d6:02:fa:9c:b5:de:ac:c6:1b:56:
a5:eb:fc:25:8b:87:bf:c6:c6:73:30:8e:79:b5:cb:
50:58:73:34:bf:38:f1:1d:56:61:4f:37:57:e0:e5:
32:a9:7a:a8:85:3b:23:96:03:7d:66:55:6f:14:b8:
d0:89:23:76:36:dd:73:66:db:53:55:ad:b0:cb:47:
55:4d:69:90:28:10:fb:bb:4b:f6:2d:d6:fa:03:b9:
97:39:b7:50:2a:9d:ab:e5:34:9b:be:83:f8:42:b7:
a4:d6:96:36:06:e4:2c:90:dd:0f:8e:77:ad:4a:d1:
2d:47:38:8a:24:ac:15:7a:ff:f9:44:52:5e:87:4d:
39:d7:33:8b:d7:e1:ab:50:4e:42:bc:b6:b4:33:cb:
58:45:f2:67:c2:8c:b2:6f:6b:f4:38:2d:a0:ce:a6:
63:45:15:7e:bf:1f:4f:34:56:fb:20:89:ec:dd:43:
32:2e:2c:1b:5c:cf:d6:a2:35:33:f0:db:9a:58:25:
6b:58:ae:49:01:33:41:1f:b0:41:e6:00:d5:73:b9:
a0:b8:cb:be:34:c3:47:d2:61:80:46:85:f1:4b:0b:
0b:56:86:3b:ad:7e:ef:f0:1b:6f:67:bc:3f:5a:08:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:6A:F1:4E:A8:1A:96:4E:C9:84:13:82:9B:31:B5:42:DA:1E:96
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/WrFq8U6oGpZOyYQTgpsxtULaHpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.88.0/22
194.4.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:91:df:0a:7a:5f:82:b4:84:4a:bd:0a:d6:cb:54:10:40:2f:
36:44:82:d7:e8:58:e5:04:fb:ac:9a:52:7c:cb:45:d8:32:03:
1f:ae:ce:cb:5d:e8:3f:40:bb:bc:97:e5:b9:14:56:3a:b0:bb:
57:28:0a:ec:dc:d8:01:54:9f:2a:97:56:22:04:d5:79:e6:6a:
a1:9c:f8:6e:95:f4:a6:dd:c8:34:e2:6e:a7:41:d1:6f:bc:e2:
d5:70:62:c4:d6:c7:9c:77:95:17:85:3b:fe:aa:5f:9e:46:b0:
9e:99:95:84:a7:a9:b1:6b:16:52:68:77:f9:7e:db:b7:64:73:
46:dc:40:6e:6e:f8:72:d7:be:e1:44:04:8b:c1:70:50:f3:bf:
d5:33:90:da:d2:9c:c2:79:bb:55:09:82:d6:4b:e4:82:a1:ac:
01:d3:26:f9:06:36:59:67:27:49:8a:89:3d:77:71:37:32:f6:
04:59:eb:fe:24:c5:9c:f4:5b:28:7a:8f:e4:d2:40:cb:14:9d:
a7:cc:8b:7e:db:1d:60:b8:cc:d8:36:70:b8:cf:2a:5f:52:f7:
58:97:6f:86:ed:32:be:d8:8d:fb:3d:35:6c:e4:fb:c3:9e:80:
50:45:c2:45:a3:cc:1e:14:a9:73:a2:df:5d:f9:6f:84:3e:5d:
28:5a:67:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/xVHJcTOVEzReYjkmzJMIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjFjZmJjMDdlYzMwNjM3N2RjYjE2YTk3YTExNjBjN2E2
ZDgyY2MwHhcNMjYwODExMTQ1NzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWIxNmFmMTRlYTgxYTk2NGVjOTg0MTM4MjliMzFiNTQyZGExZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4lb2xexTx8VXn19bbhQ/LpJmNYC
+py13qzGG1al6/wli4e/xsZzMI55tctQWHM0vzjxHVZhTzdX4OUyqXqohTsjlgN9
ZlVvFLjQiSN2Nt1zZttTVa2wy0dVTWmQKBD7u0v2Ldb6A7mXObdQKp2r5TSbvoP4
Qrek1pY2BuQskN0PjnetStEtRziKJKwVev/5RFJeh0051zOL1+GrUE5CvLa0M8tY
RfJnwoyyb2v0OC2gzqZjRRV+vx9PNFb7IIns3UMyLiwbXM/WojUz8NuaWCVrWK5J
ATNBH7BB5gDVc7mguMu+NMNH0mGARoXxSwsLVoY7rX7v8BtvZ7w/WgjjKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFqxavFOqBqWTsmEE4KbMbVC2h6WMB8GA1UdIwQY
MBaAFNJhz7wH7DBjd9yxapehFgx6bYLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDkt
OTIyYTE2ZDExN2RkLzEvV3JGcThVNm9HcFpPeVlRVGdwc3h0VUxhSHBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDktOTIyYTE2ZDExN2Rk
LzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8VYAwQC
wgQ8MA0GCSqGSIb3DQEBCwUAA4IBAQCokd8Kel+CtIRKvQrWy1QQQC82RILX6Fjl
BPusmlJ8y0XYMgMfrs7LXeg/QLu8l+W5FFY6sLtXKArs3NgBVJ8ql1YiBNV55mqh
nPhulfSm3cg04m6nQdFvvOLVcGLE1secd5UXhTv+ql+eRrCemZWEp6mxaxZSaHf5
ftu3ZHNG3EBubvhy177hRASLwXBQ87/VM5Da0pzCebtVCYLWS+SCoawB0yb5BjZZ
ZydJiok9d3E3MvYEWev+JMWc9Fsoeo/k0kDLFJ2nzIt+2x1guMzYNnC4zypfUvdY
l2+G7TK+2I37PTVs5PvDnoBQRcJFo8weFKlzot9d+W+EPl0oWmc9
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:48 2026 by rpki-client