Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W-DDEjXKHG3_j1uTVcAk2D6XQk8.roa
File: W-DDEjXKHG3_j1uTVcAk2D6XQk8.roa (raw, json)
Hash identifier: D8BkUp0Ao0UruXXaeGD1GBgfix/OEMNKLMlARELhvfs=
Subject key identifier: 5B:E0:C3:12:35:CA:1C:6D:FF:8F:5B:93:55:C0:24:D8:3E:97:42:4F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C8694D7A25910759E06D1259ECBC00546
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W-DDEjXKHG3_j1uTVcAk2D6XQk8.roa
Signing time: Sun 22 Feb 2026 18:20:27 +0000
ROA not before: Sun 22 Feb 2026 18:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58087
IP address blocks: 89.144.37.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:86:94:d7:a2:59:10:75:9e:06:d1:25:9e:cb:c0:05:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 22 18:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5be0c31235ca1c6dff8f5b9355c024d83e97424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:14:34:13:b6:95:c1:2c:a7:42:fa:1d:8e:
95:6d:e8:2f:ca:06:dc:87:c4:07:61:d0:c8:31:6c:
5b:3c:ea:a6:2e:23:d8:e9:f9:e7:14:97:30:5f:52:
f8:ff:d9:60:79:94:1b:7f:b0:1f:06:06:22:2a:da:
41:cb:c1:07:90:a5:6c:15:8e:69:db:0e:5e:42:8f:
ff:db:17:15:5f:1e:72:c7:02:73:b2:0b:12:62:79:
90:35:16:2d:ab:77:4e:f4:3a:10:4e:ea:04:60:b2:
d2:26:d8:b3:28:d4:38:be:6a:a2:7f:d8:da:df:2d:
c0:a6:30:e8:57:5d:54:20:24:bc:f1:7f:c4:25:95:
59:b0:b4:c9:22:95:68:7e:00:6b:e4:e8:48:42:33:
e5:01:54:80:e8:8b:6a:4d:b4:88:63:4c:54:cb:e8:
28:28:60:6b:d1:d0:cc:44:51:34:5b:61:35:f5:43:
f6:a6:d1:b0:40:03:e5:7b:4b:77:0b:07:61:89:c0:
a9:e6:5b:13:26:42:01:0d:dd:71:a9:e0:68:18:3f:
c1:98:93:45:e0:24:d7:2e:f6:64:91:21:bb:0b:eb:
0f:37:18:43:a4:cc:6c:a7:06:f4:e7:fe:d6:db:b3:
b9:7c:c3:36:ef:1a:1b:4b:4e:df:9d:ca:34:28:8b:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E0:C3:12:35:CA:1C:6D:FF:8F:5B:93:55:C0:24:D8:3E:97:42:4F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/W-DDEjXKHG3_j1uTVcAk2D6XQk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.37.0/24
94.249.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:00:87:22:37:00:6a:09:18:27:a1:5e:41:c7:e7:64:75:4f:
11:82:04:bf:b7:e8:da:09:24:ec:a1:4f:0e:ae:c6:27:c6:d5:
25:21:00:b9:d9:2c:d3:ab:15:76:b0:83:c0:0c:86:ab:e0:e2:
7e:b1:37:bf:8d:57:50:93:08:8b:6c:76:5f:25:5d:d8:94:56:
b0:15:90:02:fe:f6:22:ba:f0:39:69:ef:9d:4a:1c:38:b2:81:
55:c8:90:fb:01:38:30:2f:96:3c:05:90:8b:dc:60:e8:75:c5:
ff:fa:93:9d:53:88:3d:14:af:8a:08:44:ad:bc:52:1e:42:01:
a1:80:3a:c6:39:33:26:ce:1b:17:80:8f:63:b0:83:a4:c9:c3:
ad:63:b4:71:30:d3:e1:24:aa:2d:74:1c:06:55:06:95:f2:91:
13:e1:5e:e0:50:c7:8d:0e:04:fe:34:96:9d:e2:dc:b0:b4:9d:
ed:b1:b4:ae:a6:8f:0b:dc:31:6f:33:9c:f0:6a:eb:91:ba:1a:
d1:d7:78:88:3b:7f:c5:0e:d8:bc:b8:be:00:9b:4c:33:14:45:
2e:18:52:43:ef:cb:38:05:c4:5a:a3:6a:bf:c4:da:e9:80:7a:
21:19:f4:a6:c2:94:f4:0e:b0:e2:99:b3:7a:5c:ed:20:ec:34:
be:37:ed:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyGlNeiWRB1ngbRJZ7LwAVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMjIyMTgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmUwYzMxMjM1Y2ExYzZkZmY4ZjViOTM1NWMwMjRkODNlOTc0MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsIUNBO2lcEsp0L6HY6Vbegvygbc
h8QHYdDIMWxbPOqmLiPY6fnnFJcwX1L4/9lgeZQbf7AfBgYiKtpBy8EHkKVsFY5p
2w5eQo//2xcVXx5yxwJzsgsSYnmQNRYtq3dO9DoQTuoEYLLSJtizKNQ4vmqif9ja
3y3ApjDoV11UICS88X/EJZVZsLTJIpVofgBr5OhIQjPlAVSA6ItqTbSIY0xUy+go
KGBr0dDMRFE0W2E19UP2ptGwQAPle0t3CwdhicCp5lsTJkIBDd1xqeBoGD/BmJNF
4CTXLvZkkSG7C+sPNxhDpMxspwb05/7W27O5fMM27xobS07fnco0KItk/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFvgwxI1yhxt/49bk1XAJNg+l0JPMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVy1EREVqWEtIRzNfajF1VFZjQWsyRDZYUWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZAlAwQA
XvnlMA0GCSqGSIb3DQEBCwUAA4IBAQCpAIciNwBqCRgnoV5Bx+dkdU8RggS/t+ja
CSTsoU8OrsYnxtUlIQC52SzTqxV2sIPADIar4OJ+sTe/jVdQkwiLbHZfJV3YlFaw
FZAC/vYiuvA5ae+dShw4soFVyJD7ATgwL5Y8BZCL3GDodcX/+pOdU4g9FK+KCESt
vFIeQgGhgDrGOTMmzhsXgI9jsIOkycOtY7RxMNPhJKotdBwGVQaV8pET4V7gUMeN
DgT+NJad4tywtJ3tsbSupo8L3DFvM5zwauuRuhrR13iIO3/FDti8uL4Am0wzFEUu
GFJD78s4BcRao2q/xNrpgHohGfSmwpT0DrDimbN6XO0g7DS+N+00
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:00 2026 by rpki-client