Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/WhSD8GgfBl-9AiMHpKrdbxoeFq0.roa
File: WhSD8GgfBl-9AiMHpKrdbxoeFq0.roa (raw, json)
Hash identifier: hiF1YqRdwzv79ThIdCHoP/VWFer0fu/dtTmEAXgVdSE=
Subject key identifier: 5A:14:83:F0:68:1F:06:5F:BD:02:23:07:A4:AA:DD:6F:1A:1E:16:AD
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 01A00006E94826F63FE16EF1B4C816BA65D7
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/WhSD8GgfBl-9AiMHpKrdbxoeFq0.roa
Signing time: Fri 14 Aug 2026 11:27:27 +0000
ROA not before: Fri 14 Aug 2026 11:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.71.0.0/16 maxlen: 16
31.72.0.0/14 maxlen: 14
31.78.0.0/15 maxlen: 15
31.99.153.0/24 maxlen: 24
31.99.156.0/22 maxlen: 22
31.99.160.0/19 maxlen: 19
31.99.208.0/20 maxlen: 20
31.99.224.0/19 maxlen: 19
178.107.48.0/20 maxlen: 20
178.107.64.0/18 maxlen: 18
185.102.192.0/22 maxlen: 22
185.102.196.0/22 maxlen: 22
185.102.200.0/22 maxlen: 22
194.36.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:06:e9:48:26:f6:3f:e1:6e:f1:b4:c8:16:ba:65:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Aug 14 11:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a1483f0681f065fbd022307a4aadd6f1a1e16ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c7:7d:01:92:16:43:f0:9e:9c:af:93:35:58:
31:1a:36:9d:4d:64:90:a4:33:a4:05:54:46:21:74:
b4:2a:e0:c3:e5:a6:81:5d:23:1e:a0:66:92:5d:38:
bd:3d:15:98:ba:38:ac:fd:6e:77:32:85:aa:6e:f2:
19:ad:da:94:14:fa:46:56:f4:74:3f:33:76:19:40:
65:2e:f9:83:e2:2b:61:2f:68:1c:d1:b8:fb:ef:e6:
32:22:e3:91:3a:1b:2e:dc:1d:71:7c:77:89:88:23:
ad:9a:ff:5c:b4:76:3a:1a:33:2d:62:b6:07:04:2b:
80:a9:0a:0a:9a:21:b1:ee:6e:89:55:24:9f:fc:2d:
b2:f5:c3:05:f2:a2:f8:6e:ea:83:14:ae:8b:35:d3:
2a:29:84:35:19:73:b3:5f:b8:3f:01:66:c1:b2:66:
20:8e:aa:8c:23:e4:ea:ab:09:7a:b2:f2:3a:22:ae:
77:c2:57:38:00:59:9d:4e:f4:ff:d0:c2:f1:6f:0b:
00:29:ed:66:d3:10:eb:16:0c:cb:f9:43:9e:ec:8c:
5d:3b:3b:17:9a:5a:e6:18:68:e3:a7:6d:df:7c:4a:
32:e0:f2:e3:87:3e:62:3b:cc:a7:6e:ff:03:4a:c5:
e5:4a:60:c2:2b:67:05:f9:17:7d:1b:3b:d7:c4:ff:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:83:F0:68:1F:06:5F:BD:02:23:07:A4:AA:DD:6F:1A:1E:16:AD
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/WhSD8GgfBl-9AiMHpKrdbxoeFq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.71.0.0-31.75.255.255
31.78.0.0/15
31.99.153.0/24
31.99.156.0-31.99.191.255
31.99.208.0-31.99.255.255
178.107.48.0-178.107.127.255
185.102.192.0-185.102.203.255
194.36.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:5f:05:81:84:43:3f:c3:dc:fb:8e:f6:7f:d7:8e:db:66:e8:
f4:24:d6:bc:19:67:34:2d:6f:a5:fb:3b:b1:0f:db:6d:d9:71:
aa:19:f4:45:2f:f3:04:b1:89:c6:73:31:f8:22:76:31:70:5b:
1e:f1:9d:d3:50:ae:9b:7e:3f:75:35:66:38:a2:2b:19:6a:67:
dd:bb:ae:df:9d:c2:2e:3c:16:93:90:3b:ac:e4:fd:53:3b:2f:
a5:c1:b3:df:c0:29:e8:23:9c:ba:c3:34:26:6f:97:2d:81:a2:
41:42:2e:bd:84:13:f5:4a:ef:ed:02:39:5f:5b:33:1f:6f:f4:
3e:24:d9:2a:c2:8e:4c:f5:87:76:b7:5e:5f:fe:3a:7f:a7:ea:
54:d9:c5:a2:c8:4f:20:79:50:05:10:ff:e9:88:01:67:6c:cf:
4d:8f:2e:e1:a1:fa:9e:fb:76:fb:94:a7:07:2f:01:37:83:c1:
07:ee:d7:90:11:b1:9c:0e:d9:82:b6:ae:fe:07:dd:a0:78:3a:
50:a2:09:be:0e:f9:cb:04:cc:68:21:00:b5:21:0d:af:02:6b:
d8:76:16:5e:f9:07:2d:09:a7:e3:d7:fd:d4:d8:8f:19:c8:d4:
cc:4a:c1:e0:25:61:98:bd:de:6c:1b:eb:eb:05:9c:08:f3:a4:
5c:0e:05:98
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAaAABulIJvY/4W7xtMgWumXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2
YTMxYjMwHhcNMjYwODE0MTEyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTE0ODNmMDY4MWYwNjVmYmQwMjIzMDdhNGFhZGQ2ZjFhMWUxNmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cd9AZIWQ/CenK+TNVgxGjadTWSQ
pDOkBVRGIXS0KuDD5aaBXSMeoGaSXTi9PRWYujis/W53MoWqbvIZrdqUFPpGVvR0
PzN2GUBlLvmD4ithL2gc0bj77+YyIuOROhsu3B1xfHeJiCOtmv9ctHY6GjMtYrYH
BCuAqQoKmiGx7m6JVSSf/C2y9cMF8qL4buqDFK6LNdMqKYQ1GXOzX7g/AWbBsmYg
jqqMI+Tqqwl6svI6Iq53wlc4AFmdTvT/0MLxbwsAKe1m0xDrFgzL+UOe7IxdOzsX
mlrmGGjjp23ffEoy4PLjhz5iO8ynbv8DSsXlSmDCK2cF+Rd9GzvXxP9BFQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFFoUg/BoHwZfvQIjB6Sq3W8aHhatMB8GA1UdIwQY
MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt
NjIxNzkyZjdlNTZhLzEvV2hTRDhHZ2ZCbC05QWlNSHBLcmRieG9lRnEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh
LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUMAoDAwAfRwMD
Ah9IAwMBH04DBAAfY5kwDAMEAh9jnAMEBh9jgDALAwQEH2PQAwMCH2AwDAMEBLJr
MAMEB7JrADAMAwQGuWbAAwQCuWbIAwQCwiTUMA0GCSqGSIb3DQEBCwUAA4IBAQB6
XwWBhEM/w9z7jvZ/147bZuj0JNa8GWc0LW+l+zuxD9tt2XGqGfRFL/MEsYnGczH4
InYxcFse8Z3TUK6bfj91NWY4oisZamfdu67fncIuPBaTkDus5P1TOy+lwbPfwCno
I5y6wzQmb5ctgaJBQi69hBP1Su/tAjlfWzMfb/Q+JNkqwo5M9Yd2t15f/jp/p+pU
2cWiyE8geVAFEP/piAFnbM9Njy7hofqe+3b7lKcHLwE3g8EH7teQEbGcDtmCtq7+
B92geDpQogm+DvnLBMxoIQC1IQ2vAmvYdhZe+QctCafj1/3U2I8ZyNTMSsHgJWGY
vd5sG+vrBZwI86RcDgWY
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:08:01 2026 by rpki-client