Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/WLRoXLz8o5aIoTKu9vysSiArlgU.roa
File: WLRoXLz8o5aIoTKu9vysSiArlgU.roa (raw, json)
Hash identifier: Z0u4BcBUIP4op3aBxiGkfF2ykvUBdw5T+EbUw3CuBFA=
Subject key identifier: 58:B4:68:5C:BC:FC:A3:96:88:A1:32:AE:F6:FC:AC:4A:20:2B:96:05
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01A0C4578D1A3143A2466AB0BAE088628B2A
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/WLRoXLz8o5aIoTKu9vysSiArlgU.roa
Signing time: Mon 21 Sep 2026 14:21:07 +0000
ROA not before: Mon 21 Sep 2026 14:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199967
IP address blocks: 5.181.6.0/24 maxlen: 24
5.181.7.0/24 maxlen: 24
5.183.178.0/24 maxlen: 24
45.12.204.0/24 maxlen: 24
45.66.132.0/24 maxlen: 24
45.66.133.0/24 maxlen: 24
45.82.166.0/24 maxlen: 24
45.128.154.0/24 maxlen: 24
45.134.17.0/24 maxlen: 24
45.134.19.0/24 maxlen: 24
81.90.191.0/24 maxlen: 24
91.217.120.0/24 maxlen: 24
91.217.121.0/24 maxlen: 24
147.78.13.0/24 maxlen: 24
147.78.15.0/24 maxlen: 24
152.89.208.0/24 maxlen: 24
152.89.209.0/24 maxlen: 24
185.105.189.0/24 maxlen: 24
185.105.190.0/24 maxlen: 24
185.120.18.0/24 maxlen: 24
185.126.69.0/24 maxlen: 24
185.126.70.0/24 maxlen: 24
185.126.71.0/24 maxlen: 24
185.126.118.0/24 maxlen: 24
185.126.138.0/24 maxlen: 24
185.159.68.0/24 maxlen: 24
185.159.69.0/24 maxlen: 24
185.159.70.0/24 maxlen: 24
185.160.24.0/24 maxlen: 24
185.160.27.0/24 maxlen: 24
185.168.21.0/24 maxlen: 24
185.168.22.0/24 maxlen: 24
185.168.23.0/24 maxlen: 24
185.171.121.0/24 maxlen: 24
185.175.140.0/24 maxlen: 24
185.175.141.0/24 maxlen: 24
185.187.237.0/24 maxlen: 24
185.187.238.0/24 maxlen: 24
188.119.100.0/24 maxlen: 24
188.119.101.0/24 maxlen: 24
194.156.228.0/24 maxlen: 24
194.156.230.0/24 maxlen: 24
217.197.163.0/24 maxlen: 24
2a0c:8a40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:57:8d:1a:31:43:a2:46:6a:b0:ba:e0:88:62:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Sep 21 14:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58b4685cbcfca39688a132aef6fcac4a202b9605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:32:5d:20:de:0f:11:ce:6b:75:5f:a1:c7:
b2:4a:7c:aa:6d:02:45:0e:92:3b:b3:a6:c7:54:3b:
65:25:2d:cf:8f:30:2e:88:0f:85:10:40:dd:5c:42:
8d:3e:39:e4:39:57:1a:0d:da:14:2e:68:d0:d4:25:
04:6d:64:05:2b:9a:6f:91:a2:c8:d9:00:aa:4e:e3:
a8:d0:28:2e:15:c5:f7:80:d6:35:02:d7:2f:54:4d:
00:51:02:c0:37:c2:2d:f9:5d:e8:89:3d:46:ef:92:
85:2a:13:6c:c7:46:7a:e7:04:7f:bd:0a:e2:a8:a3:
41:cb:9d:b9:22:10:7d:f1:d1:d2:6b:56:63:c7:67:
26:dc:ea:a6:2e:dd:26:46:b5:1d:e7:6a:82:46:44:
c9:29:a4:8a:7e:b5:fb:ee:54:79:6a:c7:44:4a:61:
d2:ac:57:5d:c3:2b:67:03:90:57:96:b8:64:67:4e:
9e:e7:33:61:e2:3f:fe:06:1f:a4:c6:0e:3c:a9:c4:
2f:87:f2:cf:53:78:a7:40:d6:4f:28:9c:b0:5b:67:
04:75:e1:a2:69:11:96:2d:86:4e:fe:1c:3a:e8:c6:
dc:56:cc:bf:a1:c0:e8:91:53:dd:24:52:fe:a4:4f:
b9:20:77:0d:8e:03:f2:23:41:85:8c:4b:f9:30:d2:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B4:68:5C:BC:FC:A3:96:88:A1:32:AE:F6:FC:AC:4A:20:2B:96:05
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/WLRoXLz8o5aIoTKu9vysSiArlgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.6.0/23
5.183.178.0/24
45.12.204.0/24
45.66.132.0/23
45.82.166.0/24
45.128.154.0/24
45.134.17.0/24
45.134.19.0/24
81.90.191.0/24
91.217.120.0/23
147.78.13.0/24
147.78.15.0/24
152.89.208.0/23
185.105.189.0-185.105.190.255
185.120.18.0/24
185.126.69.0-185.126.71.255
185.126.118.0/24
185.126.138.0/24
185.159.68.0-185.159.70.255
185.160.24.0/24
185.160.27.0/24
185.168.21.0-185.168.23.255
185.171.121.0/24
185.175.140.0/23
185.187.237.0-185.187.238.255
188.119.100.0/23
194.156.228.0/24
194.156.230.0/24
217.197.163.0/24
IPv6:
2a0c:8a40:1::/48
Signature Algorithm: sha256WithRSAEncryption
d4:c4:63:3d:03:73:fd:8f:8f:72:d1:88:22:55:39:08:72:bb:
a2:28:2a:28:75:0d:54:80:01:2e:f2:7c:0e:65:8d:48:d6:d3:
d6:92:31:75:01:ac:c5:26:f8:fc:1f:f1:b0:03:e0:54:77:ce:
68:a8:d6:f4:00:77:e7:19:7a:7d:6c:71:a5:91:4b:92:4e:87:
15:04:6e:11:6d:96:a9:66:bc:e0:13:09:37:53:5f:01:1e:f6:
fd:52:80:41:c2:cc:2e:bc:2b:df:5c:a7:0c:b8:9c:07:ea:00:
42:6d:29:06:95:27:3f:06:d8:e1:e5:53:d3:24:9b:a0:86:31:
2a:13:22:73:a3:3d:62:70:d4:5b:95:d9:a9:59:c1:ee:fd:95:
4b:f0:79:63:0f:08:99:b3:ee:81:9c:d7:1e:46:50:97:bb:88:
8c:74:0e:9e:81:36:4b:8c:2d:63:fd:12:a5:7e:54:98:e0:03:
23:24:68:f5:b8:dd:0f:87:69:47:b8:87:43:d8:e4:84:88:2c:
92:c5:6c:30:e7:73:f0:56:56:73:cf:41:61:f6:21:ea:d2:24:
f0:d3:ff:a3:ba:ac:ba:82:05:11:4e:11:f8:14:b0:b3:59:59:
36:0c:74:59:18:f3:ab:bb:92:07:b3:f6:fe:ea:a0:aa:a6:10:
60:ad:09:fb
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISAaDEV40aMUOiRmqwuuCIYosqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjYwOTIxMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGI0Njg1Y2JjZmNhMzk2ODhhMTMyYWVmNmZjYWM0YTIwMmI5NjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7cyXSDeDxHOa3VfoceySnyqbQJF
DpI7s6bHVDtlJS3PjzAuiA+FEEDdXEKNPjnkOVcaDdoULmjQ1CUEbWQFK5pvkaLI
2QCqTuOo0CguFcX3gNY1AtcvVE0AUQLAN8It+V3oiT1G75KFKhNsx0Z65wR/vQri
qKNBy525IhB98dHSa1Zjx2cm3OqmLt0mRrUd52qCRkTJKaSKfrX77lR5asdESmHS
rFddwytnA5BXlrhkZ06e5zNh4j/+Bh+kxg48qcQvh/LPU3inQNZPKJywW2cEdeGi
aRGWLYZO/hw66MbcVsy/ocDokVPdJFL+pE+5IHcNjgPyI0GFjEv5MNKjCwIDAQAB
o4IC8DCCAuwwHQYDVR0OBBYEFFi0aFy8/KOWiKEyrvb8rEogK5YFMB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvV0xSb1hMejhvNWFJb1RLdTl2eXNTaUFybGdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBAYIKwYBBQUHAQcBAf8EgfQwgfEwgd0EAgABMIHWAwQB
BbUGAwQABbeyAwQALQzMAwQBLUKEAwQALVKmAwQALYCaAwQALYYRAwQALYYTAwQA
UVq/AwQBW9l4AwQAk04NAwQAk04PAwQBmFnQMAwDBAC5ab0DBAC5ab4DBAC5eBIw
DAMEALl+RQMEA7l+QAMEALl+dgMEALl+ijAMAwQCuZ9EAwQAuZ9GAwQAuaAYAwQA
uaAbMAwDBAC5qBUDBAO5qBADBAC5q3kDBAG5r4wwDAMEALm77QMEALm77gMEAbx3
ZAMEAMKc5AMEAMKc5gMEANnFozAPBAIAAjAJAwcAKgyKQAABMA0GCSqGSIb3DQEB
CwUAA4IBAQDUxGM9A3P9j49y0YgiVTkIcruiKCoodQ1UgAEu8nwOZY1I1tPWkjF1
AazFJvj8H/GwA+BUd85oqNb0AHfnGXp9bHGlkUuSTocVBG4RbZapZrzgEwk3U18B
Hvb9UoBBwswuvCvfXKcMuJwH6gBCbSkGlSc/Btjh5VPTJJughjEqEyJzoz1icNRb
ldmpWcHu/ZVL8HljDwiZs+6BnNceRlCXu4iMdA6egTZLjC1j/RKlflSY4AMjJGj1
uN0Ph2lHuIdD2OSEiCySxWww53PwVlZzz0Fh9iHq0iTw0/+juqy6ggURThH4FLCz
WVk2DHRZGPOru5IHs/b+6qCqphBgrQn7
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:37 2026 by rpki-client