Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/waVfjlEW9G5C6wB6VoPjPFZVCgo.roa
File: waVfjlEW9G5C6wB6VoPjPFZVCgo.roa (raw, json)
Hash identifier: GBWMN0rzQ7woVbRkW0/HGCfRanbLCyvTKE8YVyrrQls=
Subject key identifier: C1:A5:5F:8E:51:16:F4:6E:42:EB:00:7A:56:83:E3:3C:56:55:0A:0A
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019FD8272EC5DCDCE6D6A4F6317A71993D5C
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/waVfjlEW9G5C6wB6VoPjPFZVCgo.roa
Signing time: Thu 06 Aug 2026 17:37:54 +0000
ROA not before: Thu 06 Aug 2026 17:37:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219040
IP address blocks: 89.28.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:27:2e:c5:dc:dc:e6:d6:a4:f6:31:7a:71:99:3d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Aug 6 17:37:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1a55f8e5116f46e42eb007a5683e33c56550a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:61:7a:9f:80:88:25:b2:37:25:ae:2f:37:
32:0f:85:21:b1:68:05:ed:6e:43:30:9c:c0:0a:cd:
6b:f3:56:2f:2d:11:74:56:15:87:f8:dd:7d:c4:e3:
47:a4:6b:ef:90:69:ff:9e:ba:84:05:50:a3:4f:26:
d1:69:33:60:3e:2a:14:8d:a5:57:70:5d:04:66:26:
94:0e:2b:e1:9e:62:58:b3:bf:6c:d8:27:81:c8:91:
b7:79:c1:4b:c9:1c:da:bb:48:60:c1:c1:96:99:75:
6e:2c:aa:89:f2:24:c2:9c:c7:75:52:6f:81:a7:12:
f0:a9:28:79:c3:bf:1e:8a:ca:48:c8:23:4e:ad:5a:
b2:ca:56:c3:cb:a6:d8:d5:82:b7:a2:6e:45:78:61:
93:05:28:21:43:4a:de:b2:f5:96:e1:31:78:98:fd:
e0:13:27:c7:14:83:c6:0f:d0:a4:f9:92:f1:c2:f5:
66:d4:9d:33:ef:eb:05:7b:11:a4:d6:e8:54:c8:46:
7b:33:37:c2:ad:12:9a:61:6c:1e:35:51:a9:68:9d:
63:1a:87:a7:7d:f3:69:ca:76:d8:a7:54:6d:31:b5:
03:d6:66:26:34:b3:1e:e1:32:81:b4:fc:05:e2:c6:
ea:b8:79:0a:a8:90:58:4e:63:6d:84:6b:8b:d9:85:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A5:5F:8E:51:16:F4:6E:42:EB:00:7A:56:83:E3:3C:56:55:0A:0A
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/waVfjlEW9G5C6wB6VoPjPFZVCgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.205.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e1:2e:31:88:fe:0e:12:b2:da:1f:bf:c4:05:ab:4c:d8:94:
19:26:f1:bc:63:8c:c4:85:a0:fd:ee:bf:71:38:db:d0:72:76:
aa:85:d5:0b:9b:ef:e2:ec:fa:2e:9c:ab:f5:83:02:7c:53:d0:
10:95:19:fc:44:22:1a:9d:b8:ce:6a:bb:0b:08:45:a3:aa:a9:
39:60:b5:22:10:f6:66:91:f7:6b:ac:22:97:a6:01:c7:8f:cf:
9e:11:95:06:b8:c4:fc:03:a6:95:02:5a:45:58:6a:3d:09:ff:
65:6f:fc:89:03:7f:c0:84:aa:f6:ab:cf:3f:03:ce:99:59:f5:
2e:8f:42:1e:a1:4f:2b:53:6f:02:a9:42:a3:ca:46:9f:e4:dc:
4d:5f:26:30:f9:f9:61:95:64:5d:75:49:0e:24:64:c3:1a:64:
92:db:bb:4a:0b:f3:b3:30:69:6b:2f:be:04:67:95:58:50:f0:
be:1f:4d:ae:fd:ef:a4:8b:f4:6c:6f:88:19:d3:ab:bd:2b:51:
92:17:83:ee:3a:58:fe:25:2d:0a:d5:46:7e:f9:e7:88:cf:32:
95:ce:b1:30:28:df:cb:b0:73:e0:fd:60:26:c8:1e:e9:28:01:
f9:fb:a4:ef:42:f8:80:b0:ff:ad:59:17:29:64:e0:e4:e4:66:
6f:9c:65:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/YJy7F3Nzm1qT2MXpxmT1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjYwODA2MTczNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWE1NWY4ZTUxMTZmNDZlNDJlYjAwN2E1NjgzZTMzYzU2NTUwYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIlhep+AiCWyNyWuLzcyD4UhsWgF
7W5DMJzACs1r81YvLRF0VhWH+N19xONHpGvvkGn/nrqEBVCjTybRaTNgPioUjaVX
cF0EZiaUDivhnmJYs79s2CeByJG3ecFLyRzau0hgwcGWmXVuLKqJ8iTCnMd1Um+B
pxLwqSh5w78eispIyCNOrVqyylbDy6bY1YK3om5FeGGTBSghQ0resvWW4TF4mP3g
EyfHFIPGD9Ck+ZLxwvVm1J0z7+sFexGk1uhUyEZ7MzfCrRKaYWweNVGpaJ1jGoen
ffNpynbYp1RtMbUD1mYmNLMe4TKBtPwF4sbquHkKqJBYTmNthGuL2YUdawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMGlX45RFvRuQusAelaD4zxWVQoKMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvd2FWZmpsRVc5RzVDNndCNlZvUGpQRlpWQ2dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRzNMA0G
CSqGSIb3DQEBCwUAA4IBAQB44S4xiP4OErLaH7/EBatM2JQZJvG8Y4zEhaD97r9x
ONvQcnaqhdULm+/i7PounKv1gwJ8U9AQlRn8RCIanbjOarsLCEWjqqk5YLUiEPZm
kfdrrCKXpgHHj8+eEZUGuMT8A6aVAlpFWGo9Cf9lb/yJA3/AhKr2q88/A86ZWfUu
j0IeoU8rU28CqUKjykaf5NxNXyYw+flhlWRddUkOJGTDGmSS27tKC/OzMGlrL74E
Z5VYUPC+H02u/e+ki/Rsb4gZ06u9K1GSF4PuOlj+JS0K1UZ++eeIzzKVzrEwKN/L
sHPg/WAmyB7pKAH5+6TvQviAsP+tWRcpZODk5GZvnGW6
-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:08 2026 by rpki-client