Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/wU5WB_ji5JrlZ_16qSJUrAilivo.roa
File: wU5WB_ji5JrlZ_16qSJUrAilivo.roa (raw, json)
Hash identifier: U6udo/ByFFGOCnC5vUVII/ZIrb4fHBpEXgV9OsTbTvw=
Subject key identifier: C1:4E:56:07:F8:E2:E4:9A:E5:67:FD:7A:A9:22:54:AC:08:A5:8A:FA
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 01A0A481D5AB787D452A3FBDFD64B8CC61CE
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/wU5WB_ji5JrlZ_16qSJUrAilivo.roa
Signing time: Tue 15 Sep 2026 09:59:27 +0000
ROA not before: Tue 15 Sep 2026 09:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 37.220.32.0/21 maxlen: 24
45.82.44.0/22 maxlen: 24
45.88.16.0/22 maxlen: 24
45.93.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:81:d5:ab:78:7d:45:2a:3f:bd:fd:64:b8:cc:61:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Sep 15 09:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c14e5607f8e2e49ae567fd7aa92254ac08a58afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a7:db:85:fd:c9:8b:d6:88:73:ba:02:0c:d9:
39:ba:4a:ae:02:ec:71:05:39:a8:ae:bc:41:d6:aa:
4a:16:74:24:2a:b5:61:93:b8:fb:76:8e:8b:8f:be:
8e:24:7c:75:cf:fb:ae:1e:2a:69:1c:35:49:48:f7:
83:5a:c1:57:00:86:8a:dd:32:3a:16:d1:a3:45:c8:
d5:9d:7f:73:41:a1:4e:47:85:ad:21:c2:84:7c:1c:
e1:3d:02:e4:96:09:bf:28:7f:f0:87:a4:be:49:96:
7d:15:03:de:f9:9e:85:7c:ec:c4:52:f9:db:13:17:
b9:7c:1e:1d:13:b6:be:6e:47:58:59:d9:aa:13:99:
03:07:8d:ab:dd:9f:70:bd:77:12:29:3d:16:ef:ca:
b2:d3:b9:c9:af:7f:2b:c4:73:92:44:2d:34:5a:13:
bf:27:7c:e3:0c:e0:4a:31:a4:ac:ac:75:e9:5a:95:
8d:8c:89:c4:af:2f:f0:d4:8b:ab:b3:dc:e6:2f:9a:
87:1b:4d:be:c5:1e:0e:88:4f:b7:fa:7d:c2:1c:52:
4a:6f:93:2a:d4:15:65:41:6e:1e:91:b5:86:47:2a:
7e:fd:6b:1b:8a:fd:18:d2:de:50:79:50:45:fc:a3:
c4:cc:92:d3:6e:a2:59:86:aa:99:f7:1e:b3:b6:e8:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:56:07:F8:E2:E4:9A:E5:67:FD:7A:A9:22:54:AC:08:A5:8A:FA
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/wU5WB_ji5JrlZ_16qSJUrAilivo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.32.0/21
45.82.44.0/22
45.88.16.0/22
45.93.32.0/22
Signature Algorithm: sha256WithRSAEncryption
00:50:80:05:31:ca:cf:47:35:57:e7:6b:7c:37:c3:ba:30:cb:
6b:3d:ca:e4:f5:20:fe:34:1a:ea:b6:78:26:87:b0:ea:57:16:
c9:df:f3:de:e2:d1:67:2d:fa:f5:1c:6f:f9:a1:c2:32:0c:6f:
24:b2:af:e1:d5:3f:f3:67:80:16:ef:20:7d:87:e7:38:f2:4e:
86:9d:79:1a:c2:f2:5a:60:f0:0e:90:cb:ac:8a:c5:9d:f0:a2:
c4:d4:31:c4:f2:a8:a9:f7:c6:f0:45:ee:44:2c:8f:1e:09:53:
c5:ad:74:a5:79:bb:8f:53:e9:01:6d:a0:2c:4b:d5:bf:2d:02:
94:ec:54:de:93:91:7c:97:9e:ab:e4:f7:6d:2e:94:19:6d:29:
df:40:6f:5d:7a:62:c8:62:02:ae:39:1a:21:9c:65:5d:33:1c:
1c:c4:3f:85:ae:39:3a:ca:92:df:d0:05:52:7a:70:63:38:cc:
65:f4:19:da:fa:0f:2a:b1:0e:b5:55:e1:c4:5a:e9:89:04:5d:
1e:be:6f:b4:5c:ca:d9:09:bc:0d:cc:19:1f:bc:e9:0b:0b:66:
9e:5a:a2:17:b0:64:89:44:0d:19:f8:17:4a:c9:f7:be:41:84:
78:09:41:c6:e0:f9:31:9f:93:23:16:f5:a7:d8:c0:a7:23:02:
a5:36:de:93
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaCkgdWreH1FKj+9/WS4zGHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz
Zjc5MzAwHhcNMjYwOTE1MDk1OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTRlNTYwN2Y4ZTJlNDlhZTU2N2ZkN2FhOTIyNTRhYzA4YTU4YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Kfbhf3Ji9aIc7oCDNk5ukquAuxx
BTmorrxB1qpKFnQkKrVhk7j7do6Lj76OJHx1z/uuHippHDVJSPeDWsFXAIaK3TI6
FtGjRcjVnX9zQaFOR4WtIcKEfBzhPQLklgm/KH/wh6S+SZZ9FQPe+Z6FfOzEUvnb
Exe5fB4dE7a+bkdYWdmqE5kDB42r3Z9wvXcSKT0W78qy07nJr38rxHOSRC00WhO/
J3zjDOBKMaSsrHXpWpWNjInEry/w1Iurs9zmL5qHG02+xR4OiE+3+n3CHFJKb5Mq
1BVlQW4ekbWGRyp+/Wsbiv0Y0t5QeVBF/KPEzJLTbqJZhqqZ9x6ztuhKtQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMFOVgf44uSa5Wf9eqkiVKwIpYr6MB8GA1UdIwQY
MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt
MDBiY2Q5YjkxYzFiLzEvd1U1V0Jfamk1SnJsWl8xNnFTSlVyQWlsaXZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi
LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJdwgAwQC
LVIsAwQCLVgQAwQCLV0gMA0GCSqGSIb3DQEBCwUAA4IBAQAAUIAFMcrPRzVX52t8
N8O6MMtrPcrk9SD+NBrqtngmh7DqVxbJ3/Pe4tFnLfr1HG/5ocIyDG8ksq/h1T/z
Z4AW7yB9h+c48k6GnXkawvJaYPAOkMusisWd8KLE1DHE8qip98bwRe5ELI8eCVPF
rXSlebuPU+kBbaAsS9W/LQKU7FTek5F8l56r5PdtLpQZbSnfQG9demLIYgKuORoh
nGVdMxwcxD+Frjk6ypLf0AVSenBjOMxl9Bna+g8qsQ61VeHEWumJBF0evm+0XMrZ
CbwNzBkfvOkLC2aeWqIXsGSJRA0Z+BdKyfe+QYR4CUHG4Pkxn5MjFvWn2MCnIwKl
Nt6T
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:34:15 2026 by rpki-client