Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/W1R_MwtHoAdH6yPsB-c12WKhU7o.roa
File: W1R_MwtHoAdH6yPsB-c12WKhU7o.roa (raw, json)
Hash identifier: KLs4NvEKgNRCt+EdFhQCXmtrld1t0jSN+3oVmyVCXLo=
Subject key identifier: 5B:54:7F:33:0B:47:A0:07:47:EB:23:EC:07:E7:35:D9:62:A1:53:BA
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 019DD357E75A599F4F3C37319ECAE349A48E
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/W1R_MwtHoAdH6yPsB-c12WKhU7o.roa
Signing time: Tue 28 Apr 2026 09:07:26 +0000
ROA not before: Tue 28 Apr 2026 09:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61272
IP address blocks: 85.206.160.0/22 maxlen: 32
85.206.164.0/22 maxlen: 32
85.206.166.58/32 maxlen: 32
85.206.168.0/22 maxlen: 32
85.206.172.0/22 maxlen: 32
85.206.240.0/22 maxlen: 32
88.119.160.0/21 maxlen: 32
88.119.168.0/24 maxlen: 32
88.119.169.0/24 maxlen: 32
88.119.170.0/24 maxlen: 32
88.119.171.0/24 maxlen: 32
88.119.173.0/24 maxlen: 32
88.119.174.0/24 maxlen: 32
88.119.175.0/24 maxlen: 32
89.117.211.0/24 maxlen: 32
89.117.242.0/24 maxlen: 32
91.216.163.0/24 maxlen: 32
185.25.48.0/22 maxlen: 32
185.64.104.0/22 maxlen: 32
213.252.228.0/24 maxlen: 32
213.252.229.0/24 maxlen: 32
213.252.230.0/24 maxlen: 32
213.252.231.0/24 maxlen: 32
213.252.232.0/24 maxlen: 32
213.252.233.0/24 maxlen: 32
213.252.238.0/24 maxlen: 32
213.252.239.0/24 maxlen: 32
2a04:2180::/32 maxlen: 64
2a04:2181:c010::/48 maxlen: 64
2a04:2181:c011::/48 maxlen: 64
2a04:2181:c012::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 03:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:57:e7:5a:59:9f:4f:3c:37:31:9e:ca:e3:49:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Apr 28 09:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b547f330b47a00747eb23ec07e735d962a153ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:fe:a8:86:aa:80:95:d0:dc:1d:14:d7:bb:
11:e8:d6:80:39:55:25:61:83:58:9e:ce:7b:7d:72:
ce:08:d4:4c:b0:1e:ab:2e:59:87:73:67:f4:15:f4:
94:3c:28:67:da:94:f7:2b:4b:0d:2a:e0:24:82:7d:
4d:0d:51:57:3f:3a:f8:fc:4a:66:07:c0:e4:e2:7b:
12:04:04:7c:dd:51:87:89:67:88:ac:7f:60:e7:02:
cb:f7:78:35:57:d8:81:bb:47:50:85:49:a1:88:92:
fe:92:c5:1e:ed:2b:f0:44:8d:5b:30:3f:42:5b:fc:
7b:42:b0:32:07:cc:70:87:40:7b:7e:49:ae:54:a5:
9f:ed:cd:80:57:0d:b7:c1:5c:45:fc:96:1f:9b:57:
92:2b:e2:5a:35:f1:70:60:17:9d:c4:5d:f7:07:0a:
e9:2c:eb:bc:f9:69:80:3b:90:ab:0b:30:73:50:f8:
02:dd:df:b9:52:06:ce:00:9d:b1:3f:1a:73:03:8a:
f3:67:cf:fd:68:bd:a9:aa:f7:d9:69:7f:3b:d4:3a:
38:b0:c7:d6:3a:ec:74:3c:f4:cf:68:ea:b1:bb:ca:
71:ef:a3:c7:c8:07:b7:43:37:41:2f:69:69:c3:ea:
19:33:c1:b8:96:33:8f:95:10:b0:30:80:e7:f2:9e:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:7F:33:0B:47:A0:07:47:EB:23:EC:07:E7:35:D9:62:A1:53:BA
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/W1R_MwtHoAdH6yPsB-c12WKhU7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.206.160.0/20
85.206.240.0/22
88.119.160.0-88.119.171.255
88.119.173.0-88.119.175.255
89.117.211.0/24
89.117.242.0/24
91.216.163.0/24
185.25.48.0/22
185.64.104.0/22
213.252.228.0-213.252.233.255
213.252.238.0/23
IPv6:
2a04:2180::/32
2a04:2181:c010::-2a04:2181:c012:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a6:6e:0a:93:ca:37:f4:0e:e7:e3:5e:c4:31:7a:58:24:cd:cc:
53:b1:31:77:e2:42:7e:ae:64:05:d2:0a:a5:97:d8:08:28:96:
c0:87:78:28:93:7b:2a:6a:c1:3a:65:b0:5c:d4:b7:af:77:81:
44:4e:37:4b:47:c6:0e:19:65:d6:c8:7b:ff:a3:05:3a:1b:68:
e3:d6:35:00:ac:2d:5c:a9:09:f5:ae:db:af:4b:e7:13:75:d2:
2e:a0:ea:6c:88:1c:77:54:33:c3:bc:25:24:05:e0:ee:80:a1:
33:72:30:6b:dd:68:39:79:8e:7b:5c:66:59:ad:dc:dd:5e:f4:
5f:a4:76:b4:4f:aa:1b:3e:6d:23:c4:e0:87:6e:cd:99:c8:82:
36:1c:00:f0:8f:a7:69:15:b6:db:c7:88:ac:28:ed:ce:a0:c6:
c7:66:ed:c6:d1:c3:f1:7c:5e:b1:15:e5:a0:5f:41:32:85:44:
63:57:ae:fb:a6:e2:4d:91:c4:0a:77:cc:6f:10:03:5d:a9:01:
5b:43:f9:a8:60:3d:11:75:b8:c6:64:b2:72:74:3c:d2:5e:0b:
fb:1e:ce:56:43:6e:61:36:2d:c7:04:04:b7:54:e0:d1:b2:d8:
fd:c5:80:e7:4a:0b:46:00:1c:20:d6:62:21:75:25:08:fb:5e:
2d:5f:ac:e2
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZ3TV+daWZ9PPDcxnsrjSaSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NmVhNzM1OTIyMWMxYjc3ZDZjYzAwNmY3YjY3MDZhOWE5
MDgyOTkwHhcNMjYwNDI4MDkwNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjU0N2YzMzBiNDdhMDA3NDdlYjIzZWMwN2U3MzVkOTYyYTE1M2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGn+qIaqgJXQ3B0U17sR6NaAOVUl
YYNYns57fXLOCNRMsB6rLlmHc2f0FfSUPChn2pT3K0sNKuAkgn1NDVFXPzr4/Epm
B8Dk4nsSBAR83VGHiWeIrH9g5wLL93g1V9iBu0dQhUmhiJL+ksUe7SvwRI1bMD9C
W/x7QrAyB8xwh0B7fkmuVKWf7c2AVw23wVxF/JYfm1eSK+JaNfFwYBedxF33Bwrp
LOu8+WmAO5CrCzBzUPgC3d+5UgbOAJ2xPxpzA4rzZ8/9aL2pqvfZaX871Do4sMfW
Oux0PPTPaOqxu8px76PHyAe3QzdBL2lpw+oZM8G4ljOPlRCwMIDn8p7EFwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFFtUfzMLR6AHR+sj7AfnNdlioVO6MB8GA1UdIwQY
MBaAFLZupzWSIcG3fWzABve2cGqakIKZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMt
Njk5ODM1YzkyYmZlLzEvVzFSX013dEhvQWRINnlQc0ItYzEyV0toVTdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMtNjk5ODM1YzkyYmZl
LzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBgBAIAATBaAwQEVc6g
AwQCVc7wMAwDBAVYd6ADBAJYd6gwDAMEAFh3rQMEBFh3oAMEAFl10wMEAFl18gME
AFvYowMEArkZMAMEArlAaDAMAwQC1fzkAwQB1fzoAwQB1fzuMCEEAgACMBsDBQAq
BCGAMBIDBwQqBCGBwBADBwAqBCGBwBIwDQYJKoZIhvcNAQELBQADggEBAKZuCpPK
N/QO5+NexDF6WCTNzFOxMXfiQn6uZAXSCqWX2AgolsCHeCiTeypqwTplsFzUt693
gURON0tHxg4ZZdbIe/+jBTobaOPWNQCsLVypCfWu269L5xN10i6g6myIHHdUM8O8
JSQF4O6AoTNyMGvdaDl5jntcZlmt3N1e9F+kdrRPqhs+bSPE4IduzZnIgjYcAPCP
p2kVttvHiKwo7c6gxsdm7cbRw/F8XrEV5aBfQTKFRGNXrvum4k2RxAp3zG8QA12p
AVtD+ahgPRF1uMZksnJ0PNJeC/sezlZDbmE2LccEBLdU4NGy2P3FgOdKC0YAHCDW
YiF1JQj7Xi1frOI=
-----END CERTIFICATE-----
Generated at Wed Apr 29 10:43:37 2026 by rpki-client