Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/idlWwutE73q5ebn9rukISZoRsEE.roa
File: idlWwutE73q5ebn9rukISZoRsEE.roa (raw, json)
Hash identifier: vfFoRFUtziFpAG/dj7tDn9PRGM6OB2o8CZVu6nblntM=
Subject key identifier: 89:D9:56:C2:EB:44:EF:7A:B9:79:B9:FD:AE:E9:08:49:9A:11:B0:41
Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial: 01A0803A0286AF23CD393D22E8F605F185DC
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/idlWwutE73q5ebn9rukISZoRsEE.roa
Signing time: Tue 08 Sep 2026 08:54:40 +0000
ROA not before: Tue 08 Sep 2026 08:54:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16236
IP address blocks: 151.87.0.0/16 maxlen: 16
151.88.0.0/16 maxlen: 16
151.88.22.0/24 maxlen: 24
151.88.40.0/24 maxlen: 24
151.88.41.0/24 maxlen: 24
151.88.54.0/24 maxlen: 24
151.88.55.0/24 maxlen: 24
151.88.109.0/24 maxlen: 24
151.88.176.0/24 maxlen: 24
151.91.0.0/16 maxlen: 16
151.91.35.0/24 maxlen: 24
151.91.38.0/24 maxlen: 24
151.92.0.0/16 maxlen: 16
151.92.2.0/24 maxlen: 24
151.92.4.0/24 maxlen: 24
151.92.12.0/24 maxlen: 24
151.92.83.0/24 maxlen: 24
151.92.154.0/24 maxlen: 24
151.92.155.0/24 maxlen: 24
151.92.158.0/24 maxlen: 24
151.92.166.0/24 maxlen: 24
151.92.198.0/24 maxlen: 24
193.43.48.0/20 maxlen: 20
194.56.231.0/24 maxlen: 24
194.104.188.0/22 maxlen: 22
194.104.188.0/24 maxlen: 24
194.104.189.0/24 maxlen: 24
194.104.190.0/24 maxlen: 24
194.104.191.0/24 maxlen: 24
2a00:ec20::/29 maxlen: 29
2a00:ec20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:3a:02:86:af:23:cd:39:3d:22:e8:f6:05:f1:85:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Validity
Not Before: Sep 8 08:54:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89d956c2eb44ef7ab979b9fdaee908499a11b041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:d9:da:16:3e:b1:1f:89:0d:d7:19:28:d3:
9e:4c:65:39:4c:20:fe:ba:31:2b:94:eb:94:31:d8:
cf:1a:ea:53:08:7f:32:38:16:b1:aa:c9:d7:f2:b3:
3b:5e:b9:66:8e:62:51:78:71:3d:23:cf:f8:36:c3:
a7:c7:7a:ea:ba:8b:ed:75:31:92:3d:02:1c:de:d3:
7b:88:8c:0b:4b:d3:2e:78:e8:b1:8d:e6:0e:35:02:
fc:cb:2c:5b:a5:9b:1d:f8:07:58:d4:87:4d:1a:cc:
b3:5b:1d:8e:a2:32:53:2e:7d:e5:5c:3e:f7:89:95:
ae:f3:4a:ba:15:c6:37:7d:f1:bb:18:a3:36:3d:23:
15:26:3b:d5:d0:ea:4e:7c:6e:3e:8d:61:b8:7f:cc:
14:f1:e9:39:36:fc:3e:f3:1e:22:ae:62:99:1b:60:
66:9f:97:ec:84:d5:50:1c:fe:87:a2:8f:48:37:f9:
62:eb:a3:28:8c:be:14:cc:82:2c:82:bf:d3:06:f9:
da:27:83:52:ef:76:49:62:aa:0b:ba:f9:39:bc:07:
d4:1e:0c:b9:c4:f5:4a:d6:4f:5c:27:25:a6:0f:68:
1b:fe:b1:db:97:7a:1c:20:41:4a:8c:76:b7:e3:76:
0b:c1:78:5f:cb:4e:43:d0:37:8a:7b:f5:14:9b:72:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:56:C2:EB:44:EF:7A:B9:79:B9:FD:AE:E9:08:49:9A:11:B0:41
X509v3 Authority Key Identifier:
keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/idlWwutE73q5ebn9rukISZoRsEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.87.0.0-151.88.255.255
151.91.0.0-151.92.255.255
193.43.48.0/20
194.56.231.0/24
194.104.188.0/22
IPv6:
2a00:ec20::/29
Signature Algorithm: sha256WithRSAEncryption
71:88:af:71:d4:94:1a:9a:6f:07:a7:fc:bd:7d:71:5d:29:be:
d1:ec:f4:b8:31:b1:63:e4:83:96:51:8c:a6:b5:fc:ac:c6:ee:
a9:2a:54:13:42:eb:fd:5b:ac:04:5b:62:f7:b2:c0:80:ca:20:
17:a0:5c:6d:e0:bd:d5:ba:97:fc:b7:ec:b5:ec:9b:ba:fc:4e:
7a:79:45:ca:53:38:c6:3e:79:05:45:e1:d1:e7:dd:5c:74:06:
5a:c1:41:7d:cc:f8:a2:83:f4:50:9d:91:da:4b:0f:f7:f7:85:
56:84:a3:ae:79:50:1e:2c:67:8d:bb:9a:62:cd:31:02:6e:60:
88:c3:be:0b:1b:ae:da:f8:d1:b1:a9:ee:5b:2e:7a:b9:9f:e1:
f0:19:59:e9:97:b0:d4:de:2a:d0:5c:4d:95:a8:7c:84:37:fb:
30:51:27:c4:fb:0f:be:58:4f:2b:3d:85:5f:88:57:90:1a:e2:
0c:80:de:e0:c4:3b:32:3a:2a:1c:76:f6:dc:c9:6b:89:cd:82:
40:3f:7d:9e:bf:53:1d:e4:ee:4b:12:6d:e4:8a:68:be:54:41:
29:68:de:17:46:93:77:ae:ce:1e:b8:25:f9:67:1e:71:c4:e9:
05:a1:e9:d3:e8:86:1a:d5:41:5a:bc:e2:c2:c0:ff:42:4a:ee:
0e:4e:42:9b
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAaCAOgKGryPNOT0i6PYF8YXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm
MGViN2IwHhcNMjYwOTA4MDg1NDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWQ5NTZjMmViNDRlZjdhYjk3OWI5ZmRhZWU5MDg0OTlhMTFiMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq/Z2hY+sR+JDdcZKNOeTGU5TCD+
ujErlOuUMdjPGupTCH8yOBaxqsnX8rM7XrlmjmJReHE9I8/4NsOnx3rquovtdTGS
PQIc3tN7iIwLS9MueOixjeYONQL8yyxbpZsd+AdY1IdNGsyzWx2OojJTLn3lXD73
iZWu80q6FcY3ffG7GKM2PSMVJjvV0OpOfG4+jWG4f8wU8ek5Nvw+8x4irmKZG2Bm
n5fshNVQHP6Hoo9IN/li66MojL4UzIIsgr/TBvnaJ4NS73ZJYqoLuvk5vAfUHgy5
xPVK1k9cJyWmD2gb/rHbl3ocIEFKjHa343YLwXhfy05D0DeKe/UUm3J3hQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFInZVsLrRO96uXm5/a7pCEmaEbBBMB8GA1UdIwQY
MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt
MzE4MGFlNDI3NGYzLzEvaWRsV3d1dEU3M3E1ZWJuOXJ1a0lTWm9Sc0VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz
LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqMAoDAwCXVwMD
AJdYMAoDAwCXWwMDAJdcAwQEwSswAwQAwjjnAwQCwmi8MA0EAgACMAcDBQMqAOwg
MA0GCSqGSIb3DQEBCwUAA4IBAQBxiK9x1JQamm8Hp/y9fXFdKb7R7PS4MbFj5IOW
UYymtfysxu6pKlQTQuv9W6wEW2L3ssCAyiAXoFxt4L3Vupf8t+y17Ju6/E56eUXK
UzjGPnkFReHR591cdAZawUF9zPiig/RQnZHaSw/394VWhKOueVAeLGeNu5pizTEC
bmCIw74LG67a+NGxqe5bLnq5n+HwGVnpl7DU3irQXE2VqHyEN/swUSfE+w++WE8r
PYVfiFeQGuIMgN7gxDsyOiocdvbcyWuJzYJAP32ev1Md5O5LEm3kimi+VEEpaN4X
RpN3rs4euCX5Zx5xxOkFoenT6IYa1UFavOLCwP9CSu4OTkKb
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:25:31 2026 by rpki-client