Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/WA_ut0USwXJap-5nUQJ8KuZlhZ8.roa
File: WA_ut0USwXJap-5nUQJ8KuZlhZ8.roa (raw, json)
Hash identifier: RswQlJLr5XOk/2t0RRal0mPaooe1UtDVQeW1q2GorOY=
Subject key identifier: 58:0F:EE:B7:45:12:C1:72:5A:A7:EE:67:51:02:7C:2A:E6:65:85:9F
Certificate issuer: /CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Certificate serial: 01A0FB9E9A958526F1715A3FAC52BBDB886B
Authority key identifier: 05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/WA_ut0USwXJap-5nUQJ8KuZlhZ8.roa
Signing time: Fri 02 Oct 2026 07:57:50 +0000
ROA not before: Fri 02 Oct 2026 07:57:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 185.70.240.0/24 maxlen: 24
185.70.241.0/24 maxlen: 24
185.70.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:9e:9a:95:85:26:f1:71:5a:3f:ac:52:bb:db:88:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Validity
Not Before: Oct 2 07:57:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=580feeb74512c1725aa7ee6751027c2ae665859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:b6:e4:56:5f:54:40:81:bd:ac:09:d9:30:
c1:44:1b:3d:e9:61:b5:82:61:e1:e1:2a:87:27:01:
7b:d7:f8:5f:95:92:8b:64:18:19:e8:3a:26:aa:bd:
42:f3:5a:3c:b9:a8:62:d6:4e:68:3a:1d:9e:a6:eb:
5c:8a:90:86:65:c2:16:7f:44:3c:4c:3e:1d:f5:ce:
6d:2b:b9:01:bb:cb:66:50:21:93:63:64:34:6d:3c:
16:e8:49:71:46:4b:73:ed:89:9f:d1:77:bf:6a:2e:
0d:8e:44:ef:8c:6f:00:b9:6a:43:26:ce:36:b6:46:
7f:28:90:5d:87:db:55:1c:18:11:fd:3b:9f:1f:c6:
1f:17:3b:33:95:40:83:55:f1:ff:c9:be:d5:d3:53:
86:34:46:e8:b2:45:50:55:99:8c:25:90:79:25:d5:
22:47:6a:58:85:a4:ed:2d:5a:84:e6:16:5a:a5:69:
99:05:a8:24:c8:67:ba:4d:d5:f7:cc:bc:01:c6:e2:
8c:de:3d:1b:72:cd:6e:b4:db:41:7d:71:0a:cb:3a:
be:13:08:8f:4e:19:e1:ef:d1:0d:a3:63:53:1b:d5:
1e:19:02:da:e8:b9:2a:ef:6d:da:69:b1:82:de:9d:
ae:62:43:b7:fd:fe:09:ab:5a:ab:2a:ff:25:77:db:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:EE:B7:45:12:C1:72:5A:A7:EE:67:51:02:7C:2A:E6:65:85:9F
X509v3 Authority Key Identifier:
keyid:05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/WA_ut0USwXJap-5nUQJ8KuZlhZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.240.0/22
Signature Algorithm: sha256WithRSAEncryption
67:1e:07:2f:41:4a:6e:b4:9d:83:3f:35:1c:d3:f1:8e:80:dc:
79:8c:dc:ed:31:51:32:1d:06:68:a2:37:ff:f5:79:15:45:f8:
30:e5:d6:1e:e4:b3:67:1e:69:b8:a0:05:7f:63:85:36:b4:e5:
cb:d4:4e:0c:dc:79:03:ca:ce:b3:a6:32:7c:54:58:4d:b2:ef:
87:ad:ee:b8:11:ea:ff:ee:e9:ae:4f:89:a2:d6:b5:cb:3c:66:
e6:82:f3:9f:8f:5e:2a:08:02:ec:4e:1d:89:49:57:24:d7:0d:
ea:73:c1:52:d6:65:02:a9:0b:24:73:bc:4e:08:0a:48:22:47:
93:13:cc:12:2d:79:6b:3a:a2:32:b1:b6:a2:79:26:a8:00:8e:
9e:33:02:75:80:21:df:95:9c:19:d1:69:ce:26:b3:67:a6:9b:
48:0a:56:a9:2d:48:7a:22:40:27:78:b5:d9:90:10:f3:82:62:
c2:15:e0:8d:5b:5b:ff:e5:80:79:23:e9:06:b2:1f:5c:a5:37:
9f:4a:91:de:3a:53:11:3b:bb:5e:c4:c1:33:8c:de:71:39:4b:
2e:4f:f2:da:3c:03:ad:9b:6e:d6:56:51:02:a5:09:f0:44:8e:
38:3b:52:2c:0e:0f:b1:49:8e:71:c4:6b:a6:18:24:5a:40:04:
57:af:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:48:59 2026 by rpki-client