Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/3wOnTweax7D9xXvrK7tkS44deow.roa
File: 3wOnTweax7D9xXvrK7tkS44deow.roa (raw, json)
Hash identifier: rve4X/IPNJZQDXfQ4HfLs06mpP8EHtoyiwyVVImqNUI=
Subject key identifier: DF:03:A7:4F:07:9A:C7:B0:FD:C5:7B:EB:2B:BB:64:4B:8E:1D:7A:8C
Certificate issuer: /CN=5812db6bf70652bfb45bebfb25054a57f9799f74
Certificate serial: 01A039B1C8D333D7DE31352F13321CE340C2
Authority key identifier: 58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/3wOnTweax7D9xXvrK7tkS44deow.roa
Signing time: Tue 25 Aug 2026 16:12:27 +0000
ROA not before: Tue 25 Aug 2026 16:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39307
IP address blocks: 185.210.160.0/24 maxlen: 24
185.222.23.0/24 maxlen: 24
195.191.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:b1:c8:d3:33:d7:de:31:35:2f:13:32:1c:e3:40:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5812db6bf70652bfb45bebfb25054a57f9799f74
Validity
Not Before: Aug 25 16:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df03a74f079ac7b0fdc57beb2bbb644b8e1d7a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:d5:25:8e:e3:d7:d7:3d:d8:82:b2:ba:1a:
ab:32:98:91:38:4b:7c:06:af:f6:6d:44:e2:cf:09:
28:5a:4f:05:38:f3:63:56:44:bb:41:b3:fc:15:60:
b3:15:6f:c1:6e:01:28:88:38:7f:0e:6e:f3:2c:e8:
0a:b6:1c:63:c6:c9:b3:d2:7c:70:20:0f:c5:90:9b:
96:a5:8e:1b:f4:e8:dc:f5:72:0e:cc:9d:d4:c4:89:
8d:4e:e6:54:aa:53:36:a0:8a:28:3a:8b:8d:1d:ad:
c4:ca:fe:d3:db:35:5f:ea:cf:ad:82:17:5b:c4:1d:
f7:40:b2:9a:15:c3:6f:4d:62:c3:25:42:e9:d0:bc:
a9:57:82:d1:cb:63:d5:74:12:a1:5f:d9:63:63:e3:
07:c9:c6:bc:bd:5d:d1:65:32:32:e5:d6:ab:e2:1a:
d1:4b:e6:8d:3f:a2:f9:32:1c:15:4e:62:8c:1f:12:
7d:52:3b:23:04:17:d4:54:f1:ce:a9:0f:cb:4c:05:
67:3b:d7:9c:d9:c2:31:23:55:4d:8f:58:65:97:f1:
c4:78:52:0d:85:66:73:cf:f9:3d:a6:54:31:b5:98:
14:ac:a2:75:e8:a1:5e:f9:0e:2f:59:52:89:88:16:
66:e3:09:c4:72:84:66:71:d9:69:0e:3e:6c:65:58:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:03:A7:4F:07:9A:C7:B0:FD:C5:7B:EB:2B:BB:64:4B:8E:1D:7A:8C
X509v3 Authority Key Identifier:
keyid:58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/3wOnTweax7D9xXvrK7tkS44deow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.160.0/24
185.222.23.0/24
195.191.6.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:2b:c7:cc:80:ab:ef:a0:b7:95:d1:46:32:ea:b7:1d:18:b5:
dc:6d:f1:61:9f:16:db:f1:09:e5:83:bb:81:55:63:06:7d:8b:
fd:b4:55:91:ec:ed:f9:a0:30:19:aa:41:80:1a:a7:36:5e:b5:
fe:83:24:19:14:97:db:26:ce:80:68:c1:98:1d:a6:2a:7e:ef:
4d:dc:63:9f:95:1d:5c:3f:51:9b:6e:2e:0e:f7:23:2c:81:93:
00:0b:73:4c:f5:ee:61:65:39:e7:7c:e8:4c:d6:0e:b0:c7:07:
66:14:47:dd:e2:28:85:e0:e4:99:7f:80:d6:0d:74:e8:b5:00:
eb:cc:30:a7:3d:50:69:f3:02:88:1c:75:f5:14:ac:2d:99:19:
1c:bc:43:f6:8a:cb:b2:6f:0a:68:08:bf:e5:63:fe:19:99:d0:
9f:b8:a7:23:ee:70:0c:45:c1:ff:eb:98:46:f1:b9:51:29:11:
c7:72:53:b5:46:1a:a1:b5:c9:a7:16:20:25:da:45:5c:63:10:
8d:19:94:05:e0:bd:c9:c0:0f:18:c5:ba:cf:da:f8:88:73:23:
a6:71:33:a1:85:6e:41:3d:c1:89:63:e7:7d:24:f1:93:4d:2d:
d7:0f:03:a2:a7:7b:cf:11:99:05:93:fd:24:bb:48:a9:de:cc:
5f:ea:91:db
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaA5scjTM9feMTUvEzIc40DCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTJkYjZiZjcwNjUyYmZiNDViZWJmYjI1MDU0YTU3Zjk3
OTlmNzQwHhcNMjYwODI1MTYxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjAzYTc0ZjA3OWFjN2IwZmRjNTdiZWIyYmJiNjQ0YjhlMWQ3YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb3VJY7j19c92IKyuhqrMpiROEt8
Bq/2bUTizwkoWk8FOPNjVkS7QbP8FWCzFW/BbgEoiDh/Dm7zLOgKthxjxsmz0nxw
IA/FkJuWpY4b9Ojc9XIOzJ3UxImNTuZUqlM2oIooOouNHa3Eyv7T2zVf6s+tghdb
xB33QLKaFcNvTWLDJULp0LypV4LRy2PVdBKhX9ljY+MHyca8vV3RZTIy5dar4hrR
S+aNP6L5MhwVTmKMHxJ9UjsjBBfUVPHOqQ/LTAVnO9ec2cIxI1VNj1hll/HEeFIN
hWZzz/k9plQxtZgUrKJ16KFe+Q4vWVKJiBZm4wnEcoRmcdlpDj5sZVihPwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN8Dp08Hmsew/cV76yu7ZEuOHXqMMB8GA1UdIwQY
MBaAFFgS22v3BlK/tFvr+yUFSlf5eZ90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JMYmFfY0dVci0wVy12N0pRVktWX2w1bjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hMDNmM2YtZTEyMC00ZTk3LWEyODAt
YTA1OGM0YTU1ZTJiLzEvM3dPblR3ZWF4N0Q5eFh2cks3dGtTNDRkZW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hMDNmM2YtZTEyMC00ZTk3LWEyODAtYTA1OGM0YTU1ZTJi
LzEvV0JMYmFfY0dVci0wVy12N0pRVktWX2w1bjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAudKgAwQA
ud4XAwQAw78GMA0GCSqGSIb3DQEBCwUAA4IBAQDZK8fMgKvvoLeV0UYy6rcdGLXc
bfFhnxbb8Qnlg7uBVWMGfYv9tFWR7O35oDAZqkGAGqc2XrX+gyQZFJfbJs6AaMGY
HaYqfu9N3GOflR1cP1Gbbi4O9yMsgZMAC3NM9e5hZTnnfOhM1g6wxwdmFEfd4iiF
4OSZf4DWDXTotQDrzDCnPVBp8wKIHHX1FKwtmRkcvEP2isuybwpoCL/lY/4ZmdCf
uKcj7nAMRcH/65hG8blRKRHHclO1RhqhtcmnFiAl2kVcYxCNGZQF4L3JwA8YxbrP
2viIcyOmcTOhhW5BPcGJY+d9JPGTTS3XDwOip3vPEZkFk/0ku0ip3sxf6pHb
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:42 2026 by rpki-client