Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/WpWooVIeIgvnljD18p2ld4kCVFI.roa
File: WpWooVIeIgvnljD18p2ld4kCVFI.roa (raw, json)
Hash identifier: nd+RQhekh0G1ui1Cso25O8IC0cC9PZhAsI/z+0shqak=
Subject key identifier: 5A:95:A8:A1:52:1E:22:0B:E7:96:30:F5:F2:9D:A5:77:89:02:54:52
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A186FFB6112B7167428C00CD1AFFE7E7DE
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/WpWooVIeIgvnljD18p2ld4kCVFI.roa
Signing time: Thu 29 Oct 2026 09:31:07 +0000
ROA not before: Thu 29 Oct 2026 09:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 87.192.86.0/24 maxlen: 24
87.192.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ff:b6:11:2b:71:67:42:8c:00:cd:1a:ff:e7:e7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Oct 29 09:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a95a8a1521e220be79630f5f29da57789025452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:b9:41:bc:b0:13:54:75:fa:7a:0d:6a:ed:
6c:6a:34:84:84:06:f1:74:6a:05:d8:ab:1e:11:9b:
70:e4:81:a7:b1:eb:ce:23:35:ae:62:c5:91:32:c6:
e2:de:34:8e:3d:69:e9:2c:d2:fd:23:2d:f1:ac:ca:
72:ac:11:23:92:e6:69:64:03:47:23:ad:e0:4a:d7:
58:5d:59:41:a8:3e:3a:bb:86:3c:01:59:c5:e0:a5:
44:16:85:0c:9d:b0:a5:1d:e7:81:98:3f:6b:a1:de:
c7:61:9f:58:e8:5d:89:6f:4e:2e:de:f6:0f:c6:5a:
f4:54:89:1d:13:ca:f6:47:6f:fb:93:30:50:6b:f4:
1f:84:4d:0a:30:c0:f7:10:1c:d9:eb:bc:ab:79:8d:
17:12:35:f3:dd:c9:2a:56:e0:c8:c5:89:f9:5d:54:
cc:08:a2:d4:5b:1a:b0:23:16:bd:cf:92:45:b2:fc:
04:80:91:c2:06:4b:94:13:13:c7:a1:c8:f9:a6:3b:
2f:02:cb:55:5e:70:74:cf:82:64:c1:3e:64:06:da:
c0:56:5a:01:43:6c:a6:a6:7c:27:3e:a6:5f:c6:81:
e8:06:03:15:f4:a6:3e:fb:45:11:c6:c0:ac:0a:40:
3d:29:27:f4:9e:57:9c:46:a0:59:aa:db:88:2a:48:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:A8:A1:52:1E:22:0B:E7:96:30:F5:F2:9D:A5:77:89:02:54:52
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/WpWooVIeIgvnljD18p2ld4kCVFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.86.0/24
87.192.219.0/24
Signature Algorithm: sha256WithRSAEncryption
54:02:66:ca:67:37:be:eb:27:78:61:7d:bc:93:8d:68:84:4e:
f0:24:83:1e:bb:c6:2f:19:0a:fd:6c:55:d4:84:e1:53:0f:58:
b1:9a:e2:1c:12:d3:4f:61:00:e7:e6:26:3e:7e:ba:70:49:7c:
17:85:40:76:ff:25:58:8b:02:0a:5f:ce:e2:ab:e0:dc:bf:13:
75:4e:e0:d2:1e:3e:71:ec:ff:d7:f4:b0:db:87:02:49:c6:89:
ba:9a:65:5f:35:80:ae:90:82:be:7e:ed:48:36:83:6f:e4:4f:
6e:da:4e:bd:ee:2c:05:87:0e:81:53:13:e1:86:36:45:64:06:
f1:1e:86:70:e9:42:41:48:47:db:36:4e:22:01:6d:b5:aa:26:
c6:93:04:3e:8a:a0:e1:0f:28:f5:85:70:45:cd:d4:ae:25:15:
52:98:ee:d2:43:f7:6a:aa:ae:ee:da:25:c5:3c:cf:a7:c6:91:
28:c6:9c:4f:0d:73:a6:43:09:53:be:9d:95:9a:15:1e:a1:16:
bd:eb:c5:8d:d5:0a:98:a1:e1:e5:66:d9:c7:a9:63:99:88:17:
9c:bf:45:44:84:11:f0:7b:37:1b:c9:f0:1a:47:ae:14:bd:47:
89:42:3b:63:ce:21:b1:3b:4d:64:10:89:c2:70:54:3e:2a:18:
27:d7:db:0c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGG/7YRK3FnQowAzRr/5+feMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0
NTFmOGYwHhcNMjYxMDI5MDkzMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk1YThhMTUyMWUyMjBiZTc5NjMwZjVmMjlkYTU3Nzg5MDI1NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xu5QbywE1R1+noNau1sajSEhAbx
dGoF2KseEZtw5IGnsevOIzWuYsWRMsbi3jSOPWnpLNL9Iy3xrMpyrBEjkuZpZANH
I63gStdYXVlBqD46u4Y8AVnF4KVEFoUMnbClHeeBmD9rod7HYZ9Y6F2Jb04u3vYP
xlr0VIkdE8r2R2/7kzBQa/QfhE0KMMD3EBzZ67yreY0XEjXz3ckqVuDIxYn5XVTM
CKLUWxqwIxa9z5JFsvwEgJHCBkuUExPHocj5pjsvAstVXnB0z4JkwT5kBtrAVloB
Q2ympnwnPqZfxoHoBgMV9KY++0URxsCsCkA9KSf0nlecRqBZqtuIKkgxVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFqVqKFSHiIL55Yw9fKdpXeJAlRSMB8GA1UdIwQY
MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct
YWYxZjM2ODExMDk4LzEvV3BXb29WSWVJZ3ZubGpEMThwMmxkNGtDVkZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4
LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV8BWAwQA
V8DbMA0GCSqGSIb3DQEBCwUAA4IBAQBUAmbKZze+6yd4YX28k41ohE7wJIMeu8Yv
GQr9bFXUhOFTD1ixmuIcEtNPYQDn5iY+frpwSXwXhUB2/yVYiwIKX87iq+DcvxN1
TuDSHj5x7P/X9LDbhwJJxom6mmVfNYCukIK+fu1INoNv5E9u2k697iwFhw6BUxPh
hjZFZAbxHoZw6UJBSEfbNk4iAW21qibGkwQ+iqDhDyj1hXBFzdSuJRVSmO7SQ/dq
qq7u2iXFPM+nxpEoxpxPDXOmQwlTvp2VmhUeoRa968WN1QqYoeHlZtnHqWOZiBec
v0VEhBHwezcbyfAaR64UvUeJQjtjziGxO01kEInCcFQ+Khgn19sM
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:46 2026 by rpki-client