Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wf-pyhxl-akDyPLHOpMoqdoa7_U.roa
File: wf-pyhxl-akDyPLHOpMoqdoa7_U.roa (raw, json)
Hash identifier: EwNG6bsaOImugWe+yu6QGvJGqjoQtHZoPqoUqCkPweo=
Subject key identifier: C1:FF:A9:CA:1C:65:F9:A9:03:C8:F2:C7:3A:93:28:A9:DA:1A:EF:F5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FBE39A326CB55C481B86E89916EFE76FE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wf-pyhxl-akDyPLHOpMoqdoa7_U.roa
Signing time: Sat 01 Aug 2026 16:47:55 +0000
ROA not before: Sat 01 Aug 2026 16:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 189.31.219.0/24 maxlen: 24
189.75.179.0/24 maxlen: 24
189.75.190.0/24 maxlen: 24
191.44.17.0/24 maxlen: 24
200.181.86.0/24 maxlen: 24
201.11.225.0/24 maxlen: 24
201.11.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:39:a3:26:cb:55:c4:81:b8:6e:89:91:6e:fe:76:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 1 16:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1ffa9ca1c65f9a903c8f2c73a9328a9da1aeff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:fc:fe:61:15:6a:22:b5:0c:07:4c:4c:f9:
5d:be:f8:ac:85:f8:94:e8:8b:2c:8f:a7:d0:7c:e0:
ae:d9:97:46:c2:3a:86:25:6e:6c:e2:b9:b2:c9:f2:
d3:0a:95:c2:7b:76:4a:a8:91:a5:34:19:64:24:1f:
57:d4:ef:88:9e:23:a8:7c:2d:ff:2c:34:e2:65:30:
a5:7b:dc:ff:c9:77:37:16:ef:19:9f:7a:2d:ca:52:
0d:6f:03:f7:36:3a:9d:ca:76:e0:67:ec:a5:31:68:
7f:2a:34:96:c5:5f:fd:79:1f:96:c2:b0:c3:0b:4c:
d9:d0:38:74:6b:7d:52:42:5c:c2:0c:ec:e3:7e:58:
97:7e:67:cf:56:33:6f:85:af:6d:ae:55:06:48:7f:
7b:5c:bd:5d:4f:d8:bc:06:fa:8a:ed:13:24:6c:53:
4a:58:2a:3d:e4:e6:07:fc:09:66:a4:39:65:f3:5c:
0e:7b:1e:45:e3:c4:a8:df:ea:a2:44:c0:2d:3b:75:
93:cd:02:e0:f5:ff:d0:d7:81:b9:03:e3:b8:14:b7:
60:21:1f:f3:4d:90:b4:16:bd:dc:e3:13:7d:9c:97:
6d:01:ae:99:e1:cb:c9:f1:1e:19:52:fc:fc:8d:40:
ac:08:52:18:69:81:0d:ae:1d:dd:4a:26:b6:5b:13:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FF:A9:CA:1C:65:F9:A9:03:C8:F2:C7:3A:93:28:A9:DA:1A:EF:F5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wf-pyhxl-akDyPLHOpMoqdoa7_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.219.0/24
189.75.179.0/24
189.75.190.0/24
191.44.17.0/24
200.181.86.0/24
201.11.225.0/24
201.11.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:42:89:19:2e:21:31:df:17:de:2b:ba:b5:f9:04:b6:fb:d8:
2a:cd:28:c6:d0:18:7e:58:3c:02:d8:6e:8a:52:ba:47:96:24:
fe:64:97:ce:96:d2:0b:45:1b:5e:53:91:fe:34:2a:1d:62:38:
a2:4c:72:27:92:54:a6:38:b9:9b:20:97:78:f3:18:8e:c1:cb:
18:2a:95:7f:d2:0c:26:1d:57:a5:0e:b0:50:0f:c1:95:46:8a:
6a:c9:ce:71:94:57:a1:84:9b:5d:24:b0:c4:ff:e3:bd:1c:af:
cc:91:de:c1:2f:8f:c1:ed:d0:c0:07:8b:a0:3d:55:86:1a:46:
ea:1e:70:a2:66:16:59:3f:db:77:78:43:7e:06:b9:9b:af:67:
5b:28:f1:29:60:8d:d6:e2:53:a4:d8:21:ca:30:a5:18:8b:fd:
44:7c:31:db:8d:78:0b:8d:59:bf:00:98:74:79:f7:c6:49:40:
d6:51:4d:09:59:82:74:a7:8e:6f:e2:90:3f:65:0b:5f:68:35:
db:a8:63:1b:de:f5:8d:fa:70:12:ec:44:62:c1:83:ad:8a:56:
25:cf:bc:b0:49:2f:f1:e9:b8:6c:8b:28:93:3d:45:85:25:35:
ff:6e:23:09:7c:0f:6d:20:5d:92:4b:7f:b7:57:96:28:e0:54:
86:2e:da:2e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ++OaMmy1XEgbhuiZFu/nb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwODAxMTY0NzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWZmYTljYTFjNjVmOWE5MDNjOGYyYzczYTkzMjhhOWRhMWFlZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCf8/mEVaiK1DAdMTPldvvishfiU
6Issj6fQfOCu2ZdGwjqGJW5s4rmyyfLTCpXCe3ZKqJGlNBlkJB9X1O+IniOofC3/
LDTiZTCle9z/yXc3Fu8Zn3otylINbwP3NjqdynbgZ+ylMWh/KjSWxV/9eR+WwrDD
C0zZ0Dh0a31SQlzCDOzjfliXfmfPVjNvha9trlUGSH97XL1dT9i8BvqK7RMkbFNK
WCo95OYH/AlmpDll81wOex5F48So3+qiRMAtO3WTzQLg9f/Q14G5A+O4FLdgIR/z
TZC0Fr3c4xN9nJdtAa6Z4cvJ8R4ZUvz8jUCsCFIYaYENrh3dSia2WxOExwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFMH/qcocZfmpA8jyxzqTKKnaGu/1MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvd2YtcHloeGwtYWtEeVBMSE9wTW9xZG9hN19VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAvR/bAwQA
vUuzAwQAvUu+AwQAvywRAwQAyLVWAwQAyQvhAwQAyQvnMA0GCSqGSIb3DQEBCwUA
A4IBAQBeQokZLiEx3xfeK7q1+QS2+9gqzSjG0Bh+WDwC2G6KUrpHliT+ZJfOltIL
RRteU5H+NCodYjiiTHInklSmOLmbIJd48xiOwcsYKpV/0gwmHVelDrBQD8GVRopq
yc5xlFehhJtdJLDE/+O9HK/Mkd7BL4/B7dDAB4ugPVWGGkbqHnCiZhZZP9t3eEN+
Brmbr2dbKPEpYI3W4lOk2CHKMKUYi/1EfDHbjXgLjVm/AJh0effGSUDWUU0JWYJ0
p45v4pA/ZQtfaDXbqGMb3vWN+nAS7ERiwYOtilYlz7ywSS/x6bhsiyiTPUWFJTX/
biMJfA9tIF2SS3+3V5Yo4FSGLtou
-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:23 2026 by rpki-client