Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WoHEimLFcnk7Eg3Z8IdvI06Av4o.roa
File: WoHEimLFcnk7Eg3Z8IdvI06Av4o.roa (raw, json)
Hash identifier: 0TkvmjyYN2l4Yw8ZO++X4jfAFb7jvZS72Q9AEuQXIbw=
Subject key identifier: 5A:81:C4:8A:62:C5:72:79:3B:12:0D:D9:F0:87:6F:23:4E:80:BF:8A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C703C6E68EAE2DCD7A1FFF286D997A126
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WoHEimLFcnk7Eg3Z8IdvI06Av4o.roa
Signing time: Wed 18 Feb 2026 10:12:14 +0000
ROA not before: Wed 18 Feb 2026 10:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
151.241.207.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.197.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.244.235.0/24 maxlen: 24
151.245.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:3c:6e:68:ea:e2:dc:d7:a1:ff:f2:86:d9:97:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 18 10:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a81c48a62c572793b120dd9f0876f234e80bf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:b4:ad:c4:3e:b9:f6:60:bb:0e:d2:7e:e6:
fb:14:e2:8a:01:72:59:94:6d:7e:27:d6:76:53:c8:
57:04:77:12:a1:01:89:2a:09:c0:94:5a:96:a3:9c:
23:53:c9:9f:68:11:2a:af:e8:c3:84:53:bd:33:59:
c2:4f:7b:1b:f1:78:af:e7:31:fd:ea:08:15:30:9e:
28:7e:36:02:1f:fa:04:a4:75:c5:21:f3:9a:68:a0:
51:0d:2e:53:bc:fd:c7:31:d2:e8:d6:d2:db:d0:9f:
c3:ec:91:61:59:2c:c1:21:f3:80:6f:24:93:4e:1f:
d4:82:2b:31:cd:ab:0e:4d:e7:99:cc:92:82:7b:9a:
59:18:fc:cb:1b:d2:c9:51:43:63:63:7e:7a:89:e8:
19:52:31:cf:0a:b0:e1:3e:01:2d:b5:b4:77:7a:14:
9a:64:8c:80:4f:fb:be:c9:04:bc:43:93:6a:af:c0:
4a:af:6e:7c:d8:9e:7a:d2:cb:cd:ea:f9:0b:72:1f:
81:b1:2d:f4:33:87:70:46:6d:fa:7e:a8:23:e9:ee:
4c:c4:6f:af:50:90:d7:df:e4:16:27:18:4a:6d:b5:
1e:63:4f:55:6d:78:e0:7f:a3:76:f3:73:2f:10:f5:
c6:df:d9:e4:0e:42:34:4e:ed:81:5e:ad:fd:61:64:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:C4:8A:62:C5:72:79:3B:12:0D:D9:F0:87:6F:23:4E:80:BF:8A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WoHEimLFcnk7Eg3Z8IdvI06Av4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
151.241.207.0/24
151.243.7.0/24
151.243.197.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.224.0/24
151.244.235.0/24
151.245.119.0/24
Signature Algorithm: sha256WithRSAEncryption
30:37:43:19:2c:db:76:37:1a:05:d8:cd:b4:e9:79:f1:14:a8:
be:1b:9f:a5:ac:f8:69:22:ff:c7:a4:a5:95:81:76:09:ce:a0:
ea:f0:df:a3:a2:e6:7c:64:0e:e1:d7:4f:cb:0a:74:5a:1f:28:
34:62:a7:2b:d0:fd:2c:36:33:c6:69:c4:d3:16:f9:7b:e6:fe:
3d:2f:af:11:30:f3:02:65:9e:a5:39:8c:30:84:9c:c4:3e:9c:
f6:b7:28:c1:f3:f6:44:45:d6:6c:0d:3b:9c:4f:7e:77:59:1f:
56:67:53:6b:26:8b:0d:72:76:d2:00:cb:06:3d:fc:0a:ca:96:
36:96:9b:a3:56:cd:4b:c1:88:04:82:7b:84:da:0d:4e:05:77:
d4:b9:96:86:21:32:a7:66:90:a6:52:83:4f:32:d9:5b:d3:ac:
e3:e4:2a:cf:53:61:08:bd:33:9b:cb:a9:dd:a9:35:38:5f:15:
9f:22:f8:ba:36:8b:29:fe:8d:cc:9f:1b:a6:50:c5:c2:a7:1f:
5b:74:03:c8:a4:ce:3e:ab:88:29:8f:e3:35:17:a3:01:17:b3:
bc:fb:52:ca:50:c4:c5:a3:86:a0:8e:d9:b7:3f:8d:35:c5:3c:
e2:91:75:c5:20:33:4f:84:1a:53:f3:95:e6:2b:74:a7:3c:58:
3d:48:3b:40
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZxwPG5o6uLc16H/8obZl6EmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMjE4MTAxMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTgxYzQ4YTYyYzU3Mjc5M2IxMjBkZDlmMDg3NmYyMzRlODBiZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptG0rcQ+ufZguw7Sfub7FOKKAXJZ
lG1+J9Z2U8hXBHcSoQGJKgnAlFqWo5wjU8mfaBEqr+jDhFO9M1nCT3sb8Xiv5zH9
6ggVMJ4ofjYCH/oEpHXFIfOaaKBRDS5TvP3HMdLo1tLb0J/D7JFhWSzBIfOAbyST
Th/UgisxzasOTeeZzJKCe5pZGPzLG9LJUUNjY356iegZUjHPCrDhPgEttbR3ehSa
ZIyAT/u+yQS8Q5Nqr8BKr2582J560svN6vkLch+BsS30M4dwRm36fqgj6e5MxG+v
UJDX3+QWJxhKbbUeY09VbXjgf6N283MvEPXG39nkDkI0Tu2BXq39YWTELwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFFqBxIpixXJ5OxIN2fCHbyNOgL+KMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvV29IRWltTEZjbms3RWczWjhJZHZJMDZBdjRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAJcrCAwQA
l/HPAwQAl/MHAwQAl/PFAwQAl/PkAwQAl/PnAwQAl/Q2AwQAl/SnAwQAl/S0AwQA
l/TgAwQAl/TrAwQAl/V3MA0GCSqGSIb3DQEBCwUAA4IBAQAwN0MZLNt2NxoF2M20
6XnxFKi+G5+lrPhpIv/HpKWVgXYJzqDq8N+jouZ8ZA7h10/LCnRaHyg0Yqcr0P0s
NjPGacTTFvl75v49L68RMPMCZZ6lOYwwhJzEPpz2tyjB8/ZERdZsDTucT353WR9W
Z1NrJosNcnbSAMsGPfwKypY2lpujVs1LwYgEgnuE2g1OBXfUuZaGITKnZpCmUoNP
Mtlb06zj5CrPU2EIvTOby6ndqTU4XxWfIvi6Nosp/o3MnxumUMXCpx9bdAPIpM4+
q4gpj+M1F6MBF7O8+1LKUMTFo4agjtm3P401xTzikXXFIDNPhBpT85XmK3SnPFg9
SDtA
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:31 2026 by rpki-client