Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/WNLhBYjUN1zR5TVBXJo2aiV1U8c.roa
File: WNLhBYjUN1zR5TVBXJo2aiV1U8c.roa (raw, json)
Hash identifier: xQP0Y6M+gzCsFwp7Dj6SvIC/NirJv1r5eTiIaCjYVtw=
Subject key identifier: 58:D2:E1:05:88:D4:37:5C:D1:E5:35:41:5C:9A:36:6A:25:75:53:C7
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019DBE66938D5C5ADF6A50378F202A22B569
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/WNLhBYjUN1zR5TVBXJo2aiV1U8c.roa
Signing time: Fri 24 Apr 2026 07:31:26 +0000
ROA not before: Fri 24 Apr 2026 07:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12302
IP address blocks: 46.97.0.0/16 maxlen: 16
46.97.0.0/21 maxlen: 21
46.97.8.0/21 maxlen: 21
46.97.16.0/21 maxlen: 21
46.97.24.0/21 maxlen: 21
46.97.32.0/21 maxlen: 21
46.97.40.0/21 maxlen: 21
46.97.48.0/21 maxlen: 21
46.97.56.0/21 maxlen: 21
46.97.64.0/21 maxlen: 21
46.97.72.0/21 maxlen: 21
46.97.80.0/21 maxlen: 21
46.97.88.0/21 maxlen: 21
46.97.96.0/21 maxlen: 21
46.97.104.0/21 maxlen: 21
46.97.104.0/24 maxlen: 24
46.97.112.0/21 maxlen: 21
46.97.120.0/21 maxlen: 21
46.97.128.0/21 maxlen: 21
46.97.128.0/24 maxlen: 24
46.97.136.0/21 maxlen: 21
46.97.144.0/21 maxlen: 21
46.97.152.0/21 maxlen: 21
46.97.152.0/24 maxlen: 24
46.97.153.0/24 maxlen: 24
46.97.155.0/24 maxlen: 24
46.97.156.0/24 maxlen: 24
46.97.160.0/21 maxlen: 21
46.97.168.0/21 maxlen: 21
46.97.176.0/21 maxlen: 21
46.97.184.0/21 maxlen: 21
46.97.192.0/21 maxlen: 21
46.97.200.0/21 maxlen: 21
46.97.208.0/21 maxlen: 21
46.97.216.0/21 maxlen: 21
46.97.224.0/21 maxlen: 21
46.97.232.0/21 maxlen: 21
46.97.240.0/21 maxlen: 21
46.97.248.0/21 maxlen: 21
81.12.128.0/17 maxlen: 17
81.12.128.0/21 maxlen: 21
81.12.128.0/23 maxlen: 23
81.12.130.0/24 maxlen: 24
81.12.132.0/23 maxlen: 23
81.12.134.0/24 maxlen: 24
81.12.136.0/21 maxlen: 21
81.12.144.0/21 maxlen: 21
81.12.152.0/21 maxlen: 21
81.12.153.0/24 maxlen: 24
81.12.159.0/24 maxlen: 24
81.12.160.0/21 maxlen: 21
81.12.168.0/21 maxlen: 21
81.12.176.0/21 maxlen: 21
81.12.184.0/21 maxlen: 21
81.12.192.0/21 maxlen: 21
81.12.192.0/24 maxlen: 24
81.12.195.0/24 maxlen: 24
81.12.199.0/24 maxlen: 24
81.12.200.0/21 maxlen: 21
81.12.200.0/23 maxlen: 23
81.12.208.0/21 maxlen: 21
81.12.216.0/21 maxlen: 21
81.12.224.0/21 maxlen: 21
81.12.228.0/24 maxlen: 24
81.12.229.0/24 maxlen: 24
81.12.230.0/24 maxlen: 24
81.12.231.0/24 maxlen: 24
81.12.232.0/21 maxlen: 21
81.12.240.0/21 maxlen: 21
81.12.242.0/24 maxlen: 24
81.12.243.0/24 maxlen: 24
81.12.245.0/24 maxlen: 24
81.12.246.0/24 maxlen: 24
81.12.247.0/24 maxlen: 24
81.12.248.0/21 maxlen: 21
91.233.130.0/23 maxlen: 23
136.255.0.0/16 maxlen: 24
136.255.224.0/20 maxlen: 20
136.255.251.0/24 maxlen: 24
165.78.0.0/16 maxlen: 16
165.78.0.0/19 maxlen: 19
165.78.0.0/21 maxlen: 21
165.78.32.0/19 maxlen: 19
165.78.64.0/19 maxlen: 19
165.78.64.0/21 maxlen: 21
165.78.96.0/19 maxlen: 19
165.78.128.0/19 maxlen: 19
165.78.128.0/21 maxlen: 21
165.78.160.0/19 maxlen: 19
165.78.192.0/19 maxlen: 19
165.78.192.0/21 maxlen: 21
165.78.224.0/19 maxlen: 19
185.34.64.0/23 maxlen: 23
192.145.100.0/22 maxlen: 22
213.233.64.0/22 maxlen: 22
213.233.64.0/24 maxlen: 24
213.233.65.0/24 maxlen: 24
213.233.66.0/24 maxlen: 24
213.233.67.0/24 maxlen: 24
213.233.68.0/24 maxlen: 24
213.233.69.0/24 maxlen: 24
213.233.70.0/24 maxlen: 24
213.233.71.0/24 maxlen: 24
213.233.72.0/24 maxlen: 24
213.233.73.0/24 maxlen: 24
213.233.74.0/24 maxlen: 24
213.233.75.0/24 maxlen: 24
213.233.76.0/24 maxlen: 24
213.233.77.0/24 maxlen: 24
213.233.78.0/24 maxlen: 24
213.233.79.0/24 maxlen: 24
213.233.80.0/24 maxlen: 24
213.233.81.0/24 maxlen: 24
213.233.82.0/23 maxlen: 23
213.233.82.0/24 maxlen: 24
213.233.83.0/24 maxlen: 24
213.233.84.0/23 maxlen: 23
213.233.84.0/24 maxlen: 24
213.233.85.0/24 maxlen: 24
213.233.86.0/24 maxlen: 24
213.233.87.0/24 maxlen: 24
213.233.88.0/22 maxlen: 22
213.233.88.0/24 maxlen: 24
213.233.89.0/24 maxlen: 24
213.233.90.0/24 maxlen: 24
213.233.91.0/24 maxlen: 24
213.233.92.0/24 maxlen: 24
213.233.93.0/24 maxlen: 24
213.233.94.0/24 maxlen: 24
213.233.95.0/24 maxlen: 24
213.233.96.0/22 maxlen: 22
213.233.96.0/24 maxlen: 24
213.233.97.0/24 maxlen: 24
213.233.98.0/24 maxlen: 24
213.233.99.0/24 maxlen: 24
213.233.100.0/24 maxlen: 24
213.233.101.0/24 maxlen: 24
213.233.102.0/24 maxlen: 24
213.233.103.0/24 maxlen: 24
213.233.104.0/24 maxlen: 24
213.233.105.0/24 maxlen: 24
213.233.106.0/24 maxlen: 24
213.233.107.0/24 maxlen: 24
213.233.108.0/24 maxlen: 24
213.233.109.0/24 maxlen: 24
213.233.110.0/24 maxlen: 24
213.233.111.0/24 maxlen: 24
213.233.112.0/24 maxlen: 24
213.233.113.0/24 maxlen: 24
213.233.114.0/24 maxlen: 24
213.233.115.0/24 maxlen: 24
213.233.116.0/24 maxlen: 24
213.233.117.0/24 maxlen: 24
213.233.118.0/24 maxlen: 24
213.233.119.0/24 maxlen: 24
213.233.120.0/24 maxlen: 24
213.233.121.0/24 maxlen: 24
213.233.122.0/24 maxlen: 24
213.233.123.0/24 maxlen: 24
213.233.124.0/24 maxlen: 24
213.233.125.0/24 maxlen: 24
213.233.126.0/24 maxlen: 24
213.233.127.0/24 maxlen: 24
217.10.192.0/24 maxlen: 24
217.10.193.0/24 maxlen: 24
217.10.194.0/24 maxlen: 24
217.10.195.0/24 maxlen: 24
217.10.196.0/24 maxlen: 24
217.10.197.0/24 maxlen: 24
217.10.198.0/24 maxlen: 24
217.10.199.0/24 maxlen: 24
217.10.200.0/24 maxlen: 24
217.10.201.0/24 maxlen: 24
217.10.202.0/24 maxlen: 24
217.10.203.0/24 maxlen: 24
217.10.204.0/24 maxlen: 24
217.10.205.0/24 maxlen: 24
217.10.206.0/24 maxlen: 24
217.10.207.0/24 maxlen: 24
217.10.208.0/24 maxlen: 24
217.10.209.0/24 maxlen: 24
217.10.210.0/24 maxlen: 24
217.10.211.0/24 maxlen: 24
217.10.212.0/24 maxlen: 24
217.10.213.0/24 maxlen: 24
217.10.214.0/24 maxlen: 24
217.10.215.0/24 maxlen: 24
217.10.216.0/24 maxlen: 24
217.10.217.0/24 maxlen: 24
217.10.218.0/24 maxlen: 24
217.10.219.0/24 maxlen: 24
217.10.220.0/24 maxlen: 24
217.10.221.0/24 maxlen: 24
217.10.222.0/24 maxlen: 24
217.10.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:66:93:8d:5c:5a:df:6a:50:37:8f:20:2a:22:b5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Apr 24 07:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58d2e10588d4375cd1e535415c9a366a257553c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:8a:1f:40:07:f0:07:72:68:1c:29:e0:cb:
92:d4:e1:4d:54:1d:ae:f0:a7:9c:8a:7d:c6:bb:d3:
65:00:5d:3b:5d:4d:6b:48:f5:52:72:67:0a:50:5c:
43:9a:43:0d:22:f3:bc:2f:5f:13:bb:32:59:4e:98:
e0:85:42:c7:cf:4a:09:7b:91:65:ee:cc:cd:82:87:
5b:61:fd:50:30:6e:66:ea:8e:0f:1a:d5:dd:6c:18:
c2:c2:db:73:c1:5b:94:f7:e1:df:72:91:4f:0b:c4:
23:be:f1:2b:15:1b:04:c4:64:12:46:46:b5:4c:6e:
61:8b:2a:26:d9:be:f9:e5:87:73:eb:40:fe:67:51:
17:33:df:32:c2:fa:79:7f:57:24:6f:8a:46:93:5b:
e8:ec:81:36:c6:af:76:20:a8:ce:31:e5:70:7d:89:
5f:00:e3:53:74:cf:d6:a0:c4:1a:fe:95:c6:d3:e8:
0e:a3:b1:31:14:45:ab:60:c6:05:f9:84:dc:82:7c:
18:e8:6f:8f:47:b1:23:be:5d:cf:f5:39:e2:f7:9d:
73:39:39:64:37:df:48:80:61:6d:37:84:cf:02:c3:
3d:df:9c:1a:41:c1:3e:c1:a0:dd:cf:f1:b6:f6:64:
b4:e5:03:ff:24:8d:01:c0:75:37:ea:2d:1d:5b:cb:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D2:E1:05:88:D4:37:5C:D1:E5:35:41:5C:9A:36:6A:25:75:53:C7
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/WNLhBYjUN1zR5TVBXJo2aiV1U8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.97.0.0/16
81.12.128.0/17
91.233.130.0/23
136.255.0.0/16
165.78.0.0/16
185.34.64.0/23
192.145.100.0/22
213.233.64.0/18
217.10.192.0/19
Signature Algorithm: sha256WithRSAEncryption
93:67:1c:ef:96:af:b4:0b:36:e0:70:a4:df:73:a4:a2:9c:05:
b5:fa:5d:f9:6c:86:36:ba:d9:a7:2e:0f:86:64:0e:1f:fe:25:
7d:24:64:55:72:c7:d5:31:60:3b:c7:3f:12:2e:7d:ec:dd:b8:
42:2a:c4:d4:c7:e2:76:32:eb:e2:26:ec:1c:65:f4:f5:aa:cf:
9d:51:dc:23:56:5f:9d:89:93:01:af:64:2e:e2:47:e2:77:70:
d7:83:fe:96:e1:bd:72:d2:4e:0b:f4:ab:3d:b4:68:ff:d8:fd:
2a:85:f3:35:9e:ef:7a:bb:4a:d6:ae:f7:f4:45:c7:95:58:02:
05:5f:96:fc:11:5f:3e:84:cd:8f:f4:5a:1e:c1:3f:61:3d:94:
38:33:32:f2:0b:4b:af:09:bf:d3:7e:e4:4c:8c:59:56:0e:6c:
f3:ba:f7:0a:a8:7e:d8:2f:0b:57:bd:4f:e5:81:af:9a:ac:94:
3b:d6:1d:3a:44:c3:98:4b:29:cd:d1:e4:d6:a4:a0:d6:e1:3b:
42:d5:f1:c3:70:27:1d:9d:6e:64:4b:8f:4e:19:a6:58:1f:86:
2f:64:7d:46:e3:1d:8d:5b:a7:13:07:00:38:15:95:20:0e:98:
45:84:7a:21:7e:c1:ce:e2:b8:f9:f9:5b:15:bd:c5:ef:c3:b3:
a5:66:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:55:03 2026 by rpki-client