Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/wyVZPEnWLphfupuscKUKNMAIMg8.roa
File: wyVZPEnWLphfupuscKUKNMAIMg8.roa (raw, json)
Hash identifier: cW3QQ6Mnex3pAVpBkzFmqz9XYUjvfjbl4McJ3OPDO9k=
Subject key identifier: C3:25:59:3C:49:D6:2E:98:5F:BA:9B:AC:70:A5:0A:34:C0:08:32:0F
Certificate issuer: /CN=b5be0bcfc52dfc8014df3bce1b6046694b572338
Certificate serial: 019F236947EFA0E861F94F53F58F52744FC0
Authority key identifier: B5:BE:0B:CF:C5:2D:FC:80:14:DF:3B:CE:1B:60:46:69:4B:57:23:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/wyVZPEnWLphfupuscKUKNMAIMg8.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41327
IP address blocks: 171.22.208.0/24 maxlen: 24
171.22.209.0/24 maxlen: 24
171.22.210.0/24 maxlen: 24
2a09:3e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:47:ef:a0:e8:61:f9:4f:53:f5:8f:52:74:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5be0bcfc52dfc8014df3bce1b6046694b572338
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c325593c49d62e985fba9bac70a50a34c008320f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:c3:2c:39:75:82:32:6f:e2:df:3d:25:a3:
f4:ba:1c:19:65:db:01:a1:f5:4a:13:1e:ec:ca:11:
46:ab:a2:0c:3e:87:f7:37:0a:97:94:7e:31:6c:29:
1f:aa:85:1b:97:fc:c9:bf:2e:cb:95:20:6c:12:a8:
d9:92:2b:de:81:ef:a2:9b:d9:74:15:bb:32:45:fd:
25:a4:23:91:5c:7c:89:ff:f8:19:1a:35:d7:78:a7:
ad:6b:95:0f:d5:69:de:5e:ec:47:81:22:29:da:46:
ce:e9:8d:6b:6c:9b:1a:db:a4:58:2a:78:6f:b2:1a:
ff:74:91:24:4d:d4:ca:11:ec:a1:48:62:9e:84:e9:
84:4e:75:18:17:45:5c:0c:42:56:37:14:51:04:39:
af:8d:84:cf:56:1e:41:cf:5a:04:f6:21:f3:a7:9e:
d4:b6:86:8a:47:76:74:c2:a4:c6:69:2b:2a:23:05:
a7:a7:73:d5:2b:eb:01:69:37:3a:52:54:43:aa:5b:
b8:bc:9a:4e:f2:56:25:2e:9d:12:36:b7:1c:ba:6a:
77:b9:a9:53:f5:ce:af:2e:e0:16:48:9a:a4:ec:e7:
cb:b0:eb:12:0c:6f:4e:31:bf:2e:22:d6:c0:60:bb:
fb:15:fd:5a:1b:a2:60:7e:c0:ed:8a:8a:da:38:16:
57:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:59:3C:49:D6:2E:98:5F:BA:9B:AC:70:A5:0A:34:C0:08:32:0F
X509v3 Authority Key Identifier:
keyid:B5:BE:0B:CF:C5:2D:FC:80:14:DF:3B:CE:1B:60:46:69:4B:57:23:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/wyVZPEnWLphfupuscKUKNMAIMg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.208.0-171.22.210.255
IPv6:
2a09:3e40::/29
Signature Algorithm: sha256WithRSAEncryption
5b:3a:00:d8:ed:0f:a3:1f:4d:e1:a5:6c:cb:0a:72:63:1b:1d:
80:76:ce:d1:94:9b:fe:16:d4:6b:7f:40:b0:c7:2d:bc:46:2a:
43:8b:3a:2e:9b:e4:34:56:49:82:99:1b:5f:33:95:93:9f:cc:
81:3c:c1:26:cc:6a:82:6a:74:0a:12:02:b0:9e:24:54:ac:9b:
38:e8:8a:99:20:b3:bf:86:15:70:4d:51:29:24:57:16:fe:c0:
f2:e2:4c:49:71:0d:b5:e9:ae:89:5f:7b:e4:a6:db:f0:b9:fa:
ad:42:e3:82:d6:1f:33:d9:21:3f:44:94:f5:6c:30:62:33:ff:
f7:61:73:e1:ad:34:47:d5:92:ac:d1:4a:f7:9a:30:21:1a:4d:
cc:00:4d:24:eb:a3:80:2b:07:fc:77:ea:e1:0e:a7:72:38:08:
bf:f0:31:88:bb:2a:4a:d7:12:7b:62:94:7a:b2:60:ec:1f:d7:
ef:c8:05:7f:91:11:25:a5:62:a1:ff:64:b4:47:4b:8c:f8:47:
69:b4:79:ee:a5:6b:8f:e3:b5:f7:1e:60:ae:8c:90:e1:23:06:
11:fc:36:53:6d:18:b9:ac:41:39:71:64:ec:df:7a:2f:60:77:
5d:de:66:23:7f:0b:22:92:d7:c3:8b:58:e1:67:64:8d:2b:be:
b1:d1:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:35 2026 by rpki-client