Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wj1xX4itBdi50aRa8Rt5mIouPI8.roa
File: wj1xX4itBdi50aRa8Rt5mIouPI8.roa (raw, json)
Hash identifier: JzvmzpOQNvqPMrKpJDPreFyizovdnnCL0ACD/ivgbAU=
Subject key identifier: C2:3D:71:5F:88:AD:05:D8:B9:D1:A4:5A:F1:1B:79:98:8A:2E:3C:8F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0AA335D85B43B758F3875CF5180F41C92
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wj1xX4itBdi50aRa8Rt5mIouPI8.roa
Signing time: Wed 16 Sep 2026 12:31:28 +0000
ROA not before: Wed 16 Sep 2026 12:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.153.0/24 maxlen: 24
5.230.154.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
77.90.24.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
94.249.149.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:33:5d:85:b4:3b:75:8f:38:75:cf:51:80:f4:1c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 16 12:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c23d715f88ad05d8b9d1a45af11b79988a2e3c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:e6:2e:d4:a7:a1:4e:cb:6f:5e:f5:1f:2b:
5e:bd:25:32:5e:eb:1d:15:fa:6e:32:8c:8f:97:3f:
26:02:b5:e6:57:77:95:72:82:4a:bc:c8:4a:b1:9b:
1c:cd:3a:e5:4e:e3:06:2b:07:a1:8a:38:9f:6e:4f:
21:9c:c2:ee:e9:0b:96:c3:7b:8e:88:1d:d1:bf:b0:
7e:dc:64:70:43:f7:be:cf:61:26:78:50:96:34:87:
14:8f:00:ff:ad:7a:e7:e1:e7:da:ed:c9:97:03:f5:
94:03:2e:49:4d:f0:33:a0:50:0d:7f:cd:ca:66:03:
b8:1f:cb:a1:25:1d:0b:0f:e1:5c:63:f6:e6:59:18:
84:61:5e:eb:51:a0:ad:62:11:81:77:4f:f9:46:31:
7f:d6:9c:b6:cb:8b:98:b7:cb:da:c5:de:e1:46:b1:
6d:d9:0e:13:ef:09:4f:e4:9e:18:bb:8c:ea:31:ff:
eb:68:ad:b0:f4:19:b2:e2:5e:70:53:06:07:ff:46:
d5:3d:fc:76:86:ae:a5:7c:1b:00:5f:aa:6b:6f:4c:
e5:0e:fd:9c:d5:b0:b5:24:f4:03:0d:0d:d5:cb:02:
94:dd:27:e5:c2:84:cd:6e:59:57:54:50:4f:af:50:
16:76:ca:7f:a7:3e:c0:d6:f5:f7:f3:23:5f:6f:40:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:71:5F:88:AD:05:D8:B9:D1:A4:5A:F1:1B:79:98:8A:2E:3C:8F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wj1xX4itBdi50aRa8Rt5mIouPI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.230.154.0/24
5.231.242.0/24
77.90.24.0/24
77.90.48.0/24
89.106.71.0/24
89.144.50.0/24
94.249.149.0/24
94.249.230.0/24
94.249.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:15:30:15:e0:f0:f2:3e:bd:c9:09:5b:52:f0:62:ec:01:59:
5e:2a:46:3c:38:dd:8b:40:0d:9c:e3:ae:e3:c2:50:7f:70:59:
7b:2d:ad:c9:8a:ae:c4:8b:4f:8f:bc:ca:af:8b:9d:7b:6b:5e:
b0:b4:b7:42:d9:0d:61:15:3f:39:58:ba:ee:5f:c8:2a:cb:64:
fa:89:06:44:61:49:f7:4f:a6:50:8e:2b:e2:32:a3:7d:d2:b2:
8e:ba:de:5e:a2:a4:47:16:7f:c5:de:98:7e:c0:e1:4d:c2:d8:
b9:eb:ab:bd:76:b7:39:65:b4:fc:b0:10:7f:b6:c9:12:4b:cc:
21:6b:a4:3a:f2:c5:31:65:3e:8c:d5:e7:b0:70:11:ef:b9:7b:
7c:49:54:94:fb:dc:c8:db:cd:5d:9a:34:32:20:10:3a:ec:38:
60:97:8f:de:cf:95:d4:27:8d:14:fe:95:2e:5d:4d:4e:0b:35:
2b:3e:4d:d9:13:ba:a8:63:45:ef:f5:88:47:97:79:83:42:6f:
4b:01:41:8a:fa:84:54:d7:d7:fc:e8:2a:f7:32:8a:85:83:92:
a0:d8:3d:a7:5a:15:69:71:7a:de:2a:ab:c8:2c:6c:08:d6:e9:
bb:ed:7b:5c:3e:ae:97:67:c6:d9:66:b7:a4:92:d4:6e:f6:5b:
1b:30:05:a7
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaCqM12FtDt1jzh1z1GA9BySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwOTE2MTIzMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjNkNzE1Zjg4YWQwNWQ4YjlkMWE0NWFmMTFiNzk5ODhhMmUzYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH3mLtSnoU7Lb171HytevSUyXusd
FfpuMoyPlz8mArXmV3eVcoJKvMhKsZsczTrlTuMGKwehijifbk8hnMLu6QuWw3uO
iB3Rv7B+3GRwQ/e+z2EmeFCWNIcUjwD/rXrn4efa7cmXA/WUAy5JTfAzoFANf83K
ZgO4H8uhJR0LD+FcY/bmWRiEYV7rUaCtYhGBd0/5RjF/1py2y4uYt8vaxd7hRrFt
2Q4T7wlP5J4Yu4zqMf/raK2w9Bmy4l5wUwYH/0bVPfx2hq6lfBsAX6prb0zlDv2c
1bC1JPQDDQ3VywKU3SflwoTNbllXVFBPr1AWdsp/pz7A1vX38yNfb0CEgQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFMI9cV+IrQXYudGkWvEbeZiKLjyPMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvd2oxeFg0aXRCZGk1MGFSYThSdDVtSW91UEk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABVOZAwQA
BeaaAwQABefyAwQATVoYAwQATVowAwQAWWpHAwQAWZAyAwQAXvmVAwQAXvnmAwQA
Xvn2MA0GCSqGSIb3DQEBCwUAA4IBAQDSFTAV4PDyPr3JCVtS8GLsAVleKkY8ON2L
QA2c467jwlB/cFl7La3Jiq7Ei0+PvMqvi517a16wtLdC2Q1hFT85WLruX8gqy2T6
iQZEYUn3T6ZQjiviMqN90rKOut5eoqRHFn/F3ph+wOFNwti566u9drc5ZbT8sBB/
tskSS8wha6Q68sUxZT6M1eewcBHvuXt8SVSU+9zI281dmjQyIBA67Dhgl4/ez5XU
J40U/pUuXU1OCzUrPk3ZE7qoY0Xv9YhHl3mDQm9LAUGK+oRU19f86Cr3MoqFg5Kg
2D2nWhVpcXreKqvILGwI1um77XtcPq6XZ8bZZrekktRu9lsbMAWn
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:33 2026 by rpki-client