Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/WYwz05XWytebFaVA_u49sTXq4vA.roa
File: WYwz05XWytebFaVA_u49sTXq4vA.roa (raw, json)
Hash identifier: Ji40cgBzh5DAGJwSZnJu29tUWR5tPtn/hQZygjSqJ/g=
Subject key identifier: 59:8C:33:D3:95:D6:CA:D7:9B:15:A5:40:FE:EE:3D:B1:35:EA:E2:F0
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 01A0BC008A6727E7FB0C49408F12B817BAFA
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/WYwz05XWytebFaVA_u49sTXq4vA.roa
Signing time: Sat 19 Sep 2026 23:29:07 +0000
ROA not before: Sat 19 Sep 2026 23:29:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216096
IP address blocks: 109.175.210.0/24 maxlen: 24
109.205.193.0/24 maxlen: 24
158.94.220.0/23 maxlen: 24
158.94.220.0/24 maxlen: 24
158.94.221.0/24 maxlen: 24
2a01:fb00::/32 maxlen: 34
2a01:fb00::/33 maxlen: 34
2a01:fb00::/34 maxlen: 34
2a01:fb01::/32 maxlen: 32
2a01:fb02::/32 maxlen: 34
2a01:fb02::/34 maxlen: 34
2a01:fb02:4000::/34 maxlen: 34
2a01:fb02:8000::/34 maxlen: 34
2a01:fb02:c000::/34 maxlen: 34
2a01:fb03::/32 maxlen: 32
2a01:fb04::/32 maxlen: 32
2a01:fb05::/36 maxlen: 36
2a01:fb05:1000::/36 maxlen: 36
2a01:fb05:2000::/36 maxlen: 36
2a01:fb05:3000::/36 maxlen: 36
2a01:fb05:4000::/36 maxlen: 36
2a01:fb05:5000::/36 maxlen: 36
2a01:fb05:6000::/36 maxlen: 36
2a01:fb05:7000::/36 maxlen: 36
2a01:fb05:8000::/36 maxlen: 36
2a01:fb05:9000::/36 maxlen: 36
2a01:fb05:a000::/36 maxlen: 36
2a01:fb05:b000::/36 maxlen: 36
2a01:fb05:c000::/36 maxlen: 36
2a01:fb05:d000::/36 maxlen: 36
2a01:fb06::/32 maxlen: 32
2a01:fb07::/32 maxlen: 34
2a01:fb07::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:00:8a:67:27:e7:fb:0c:49:40:8f:12:b8:17:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Sep 19 23:29:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=598c33d395d6cad79b15a540feee3db135eae2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:68:8c:3c:de:67:98:f1:d4:fa:73:72:53:
ec:10:31:cb:2c:78:2e:e1:55:ab:fc:46:05:7d:57:
19:25:cc:7d:1d:0f:b1:27:f6:52:ce:3a:b3:43:5c:
7f:9f:e6:c1:a9:eb:b2:b7:97:36:40:75:b7:a5:a0:
bb:56:32:a2:44:06:57:88:31:d8:a8:56:6f:a2:78:
07:49:ef:1e:75:96:b8:c5:05:f6:02:ae:bd:1a:6c:
8a:b1:ee:1f:d9:25:86:ac:cf:0f:fe:64:9a:76:e1:
7a:8f:cb:0d:ad:08:b2:b9:51:0e:1e:ef:92:76:16:
2c:ed:ff:10:b4:09:0e:72:95:f0:ed:0c:20:5a:7f:
86:ab:73:b5:cf:90:47:06:3b:69:23:88:7e:26:5c:
6b:43:78:f5:82:f9:87:af:8c:74:d8:bf:00:15:da:
b4:59:2c:c1:05:3f:12:95:5c:26:52:33:d1:71:80:
2c:e5:b1:5a:7c:5d:7f:e6:dc:4f:e5:2b:28:d9:5a:
43:a4:a0:c1:93:8b:4c:f3:3a:7d:47:2b:3a:ef:87:
6e:00:cc:cb:fe:4d:91:ec:dc:22:34:6c:f1:f7:31:
7c:1a:42:8e:bb:63:5f:5a:4a:ea:7f:5c:47:a0:5e:
44:9b:39:72:20:66:37:da:d2:b8:9b:42:31:74:6e:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8C:33:D3:95:D6:CA:D7:9B:15:A5:40:FE:EE:3D:B1:35:EA:E2:F0
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/WYwz05XWytebFaVA_u49sTXq4vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.210.0/24
109.205.193.0/24
158.94.220.0/23
IPv6:
2a01:fb00::-2a01:fb05:dfff:ffff:ffff:ffff:ffff:ffff
2a01:fb06::/31
Signature Algorithm: sha256WithRSAEncryption
2e:e7:cd:53:22:73:db:54:46:4e:34:43:63:4b:fc:7d:4a:1f:
71:97:71:c1:13:19:68:4f:04:92:33:93:7c:d0:1b:4d:4a:20:
49:b7:77:be:1f:4a:8b:64:d5:64:66:4f:09:bc:50:ad:7d:0a:
af:a3:04:90:11:4e:90:55:99:d2:12:49:5e:6c:a0:0e:04:32:
ae:ca:00:e9:d0:e1:c1:ee:7a:ef:20:dc:12:96:6a:55:59:91:
7d:b0:e1:f8:d9:55:43:e6:c3:90:56:f1:df:de:85:86:e7:c8:
dc:16:19:53:0c:8f:69:a1:80:89:39:36:1f:37:10:dd:53:78:
19:15:81:ad:5e:fe:e7:33:07:8e:03:ac:9d:e6:ea:36:c2:93:
ef:4c:47:79:03:3c:61:05:7e:dc:b2:cb:91:88:c2:e9:94:aa:
53:08:c3:2f:e4:b9:2b:aa:2d:45:39:bd:3b:a4:e0:00:33:93:
b7:f1:e4:95:17:d3:cc:fa:39:d0:42:28:d4:4f:a8:3e:bf:13:
19:51:60:eb:65:77:3e:5d:c3:7f:f0:c9:36:59:8e:04:f1:66:
9c:82:b1:07:3b:74:59:c7:3e:8c:f0:a7:46:b7:01:b9:29:a4:
2b:d0:53:b9:63:85:01:54:88:c7:bd:09:87:f6:df:d5:9f:09:
16:bc:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:19 2026 by rpki-client