Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/W2yqTamRVKq1-hzTnlQpS09zF94.roa
File: W2yqTamRVKq1-hzTnlQpS09zF94.roa (raw, json)
Hash identifier: dOlIM2Q4c3cJnEpwCAfFKPIS65UFCCfTkKQG/Xr+ZGY=
Subject key identifier: 5B:6C:AA:4D:A9:91:54:AA:B5:FA:1C:D3:9E:54:29:4B:4F:73:17:DE
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 01A12F2BC096A702D699A1554E5124BD071C
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/W2yqTamRVKq1-hzTnlQpS09zF94.roa
Signing time: Mon 12 Oct 2026 08:12:38 +0000
ROA not before: Mon 12 Oct 2026 08:12:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60893
IP address blocks: 45.150.104.0/22 maxlen: 24
91.132.240.0/22 maxlen: 24
91.132.243.0/24 maxlen: 24
109.94.160.0/24 maxlen: 24
130.255.171.0/24 maxlen: 24
146.19.165.0/24 maxlen: 24
178.211.138.0/24 maxlen: 24
185.24.48.0/22 maxlen: 24
185.58.148.0/22 maxlen: 24
185.220.108.0/22 maxlen: 24
193.0.233.0/24 maxlen: 24
194.9.7.0/24 maxlen: 24
195.80.40.0/22 maxlen: 24
195.234.156.0/24 maxlen: 24
195.234.159.0/24 maxlen: 24
195.234.161.0/24 maxlen: 24
2a00:7420::/32 maxlen: 32
2a0b:efc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:2b:c0:96:a7:02:d6:99:a1:55:4e:51:24:bd:07:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Oct 12 08:12:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b6caa4da99154aab5fa1cd39e54294b4f7317de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:1c:9c:74:bd:ca:3c:c1:a6:e9:25:e6:e0:
45:16:77:ed:fd:05:19:34:a7:1a:9c:58:82:89:91:
76:1f:fc:ff:f0:56:c0:17:06:be:72:b2:df:99:66:
9b:64:e3:21:6a:58:63:2a:6a:b8:c9:ec:65:0a:da:
90:60:c2:10:65:13:22:9b:cc:ff:34:d0:b2:ad:dc:
55:a2:ee:62:60:d4:82:75:c2:7d:d6:ad:4f:82:61:
41:36:32:78:01:e3:29:59:e5:56:d2:10:e9:80:40:
f0:6f:18:3e:eb:4f:57:0a:21:e0:5e:e6:58:62:65:
63:af:02:50:13:d6:b1:2c:95:0b:8d:62:46:0d:ac:
a1:fb:df:d5:61:a9:06:94:0d:e8:4d:a3:d2:c2:19:
36:78:47:5c:f3:a9:ea:34:4b:e3:2d:86:83:1b:36:
da:40:2f:64:ee:4f:41:35:64:9f:00:ac:05:9d:ea:
54:e0:25:43:2d:3c:d1:a6:b7:2a:50:80:06:ab:ef:
ea:06:9d:5c:85:ff:25:fa:dc:76:27:75:e4:93:fd:
71:4d:5a:11:9d:77:b2:42:71:ad:9c:63:d9:ec:a2:
de:aa:cc:5e:cc:9c:2d:d4:f8:ea:7a:fd:5a:be:84:
ae:c5:4d:76:1c:07:ca:ef:98:f9:68:db:c7:96:16:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6C:AA:4D:A9:91:54:AA:B5:FA:1C:D3:9E:54:29:4B:4F:73:17:DE
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/W2yqTamRVKq1-hzTnlQpS09zF94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.104.0/22
91.132.240.0/22
109.94.160.0/24
130.255.171.0/24
146.19.165.0/24
178.211.138.0/24
185.24.48.0/22
185.58.148.0/22
185.220.108.0/22
193.0.233.0/24
194.9.7.0/24
195.80.40.0/22
195.234.156.0/24
195.234.159.0/24
195.234.161.0/24
IPv6:
2a00:7420::/32
2a0b:efc0::/32
Signature Algorithm: sha256WithRSAEncryption
71:9f:fe:f7:07:8c:14:3c:ba:d4:a6:8e:07:57:ab:d3:d9:72:
48:88:0a:9c:c6:ba:30:e7:15:4d:7a:55:b8:47:7c:2e:c1:19:
ac:4f:ca:77:c7:22:f8:c5:18:ee:74:9a:d9:34:04:c7:79:9c:
db:44:f8:a7:09:c2:fc:43:4f:ad:39:d5:7e:66:b5:43:ab:82:
94:59:ba:ca:5f:c9:3e:eb:25:b3:71:ab:fd:95:50:cb:1d:ba:
42:ae:0f:22:ba:40:52:ce:f7:ef:34:51:18:6a:15:7b:aa:dd:
34:22:0c:3e:97:cc:16:6e:48:a5:72:9e:3c:97:a6:2a:98:99:
75:4e:d8:b0:24:62:12:a9:da:f0:5e:38:34:f3:7f:37:65:07:
10:29:51:76:67:30:06:99:b5:d6:a7:e2:b9:12:f6:d0:3d:eb:
b6:8e:9c:33:a5:ee:4f:eb:48:20:cc:ad:09:86:cd:52:7c:92:
0a:18:09:f3:f9:25:bf:d7:f4:99:c7:57:75:a0:8c:72:65:b5:
e0:45:ec:b6:fd:50:7d:03:d8:58:54:d1:34:e6:b0:47:5e:1c:
dd:a1:38:1a:db:a1:43:0f:20:18:a3:d9:a3:7a:7f:d9:6a:d6:
0f:2b:19:b2:61:b5:2c:4c:f6:64:46:1c:ea:cb:dc:15:b0:47:
8a:48:08:72
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAaEvK8CWpwLWmaFVTlEkvQccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjYxMDEyMDgxMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjZjYWE0ZGE5OTE1NGFhYjVmYTFjZDM5ZTU0Mjk0YjRmNzMxN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhccnHS9yjzBpukl5uBFFnft/QUZ
NKcanFiCiZF2H/z/8FbAFwa+crLfmWabZOMhalhjKmq4yexlCtqQYMIQZRMim8z/
NNCyrdxVou5iYNSCdcJ91q1PgmFBNjJ4AeMpWeVW0hDpgEDwbxg+609XCiHgXuZY
YmVjrwJQE9axLJULjWJGDayh+9/VYakGlA3oTaPSwhk2eEdc86nqNEvjLYaDGzba
QC9k7k9BNWSfAKwFnepU4CVDLTzRprcqUIAGq+/qBp1chf8l+tx2J3Xkk/1xTVoR
nXeyQnGtnGPZ7KLeqsxezJwt1Pjqev1avoSuxU12HAfK75j5aNvHlhakaQIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFFtsqk2pkVSqtfoc055UKUtPcxfeMB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvVzJ5cVRhbVJWS3ExLWh6VG5sUXBTMDl6Rjk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwYAQCAAEwWgMEAi2WaAME
AluE8AMEAG1eoAMEAIL/qwMEAJITpQMEALLTigMEArkYMAMEArk6lAMEArncbAME
AMEA6QMEAMIJBwMEAsNQKAMEAMPqnAMEAMPqnwMEAMPqoTAUBAIAAjAOAwUAKgB0
IAMFACoL78AwDQYJKoZIhvcNAQELBQADggEBAHGf/vcHjBQ8utSmjgdXq9PZckiI
CpzGujDnFU16VbhHfC7BGaxPynfHIvjFGO50mtk0BMd5nNtE+KcJwvxDT6051X5m
tUOrgpRZuspfyT7rJbNxq/2VUMsdukKuDyK6QFLO9+80URhqFXuq3TQiDD6XzBZu
SKVynjyXpiqYmXVO2LAkYhKp2vBeODTzfzdlBxApUXZnMAaZtdan4rkS9tA967aO
nDOl7k/rSCDMrQmGzVJ8kgoYCfP5Jb/X9JnHV3WgjHJlteBF7Lb9UH0D2FhU0TTm
sEdeHN2hOBrboUMPIBij2aN6f9lq1g8rGbJhtSxM9mRGHOrL3BWwR4pICHI=
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:01 2026 by rpki-client