Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/Wzpvq20Q104WNtTwEdp0DKCiG48.roa
File: Wzpvq20Q104WNtTwEdp0DKCiG48.roa (raw, json)
Hash identifier: ck4EoF+I6v4styvl8S2jCyvOB80Weuf2rtyShv+YNoI=
Subject key identifier: 5B:3A:6F:AB:6D:10:D7:4E:16:36:D4:F0:11:DA:74:0C:A0:A2:1B:8F
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 01A0F8492965B5FFD5DBE87DEA00DB07E178
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/Wzpvq20Q104WNtTwEdp0DKCiG48.roa
Signing time: Thu 01 Oct 2026 16:25:39 +0000
ROA not before: Thu 01 Oct 2026 16:25:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22351
IP address blocks: 83.170.128.0/19 maxlen: 19
83.170.160.0/21 maxlen: 21
83.170.160.0/24 maxlen: 24
83.170.161.0/24 maxlen: 24
83.170.162.0/24 maxlen: 24
83.170.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:49:29:65:b5:ff:d5:db:e8:7d:ea:00:db:07:e1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Oct 1 16:25:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b3a6fab6d10d74e1636d4f011da740ca0a21b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:50:20:83:57:a5:a9:70:96:6c:bd:aa:62:
43:b7:f9:fe:d0:25:70:3c:84:08:67:00:5a:44:f8:
e3:3a:cf:b5:0c:46:b8:b1:18:33:83:a6:14:76:94:
1a:fb:59:af:e8:2d:11:67:d8:c8:4e:1d:0f:61:e4:
8c:66:1f:54:d6:50:48:a9:1d:ef:b8:0b:15:58:4f:
cd:7d:e5:bd:5e:56:b3:2f:d7:b4:c1:9d:d0:f8:cc:
59:d9:03:f7:93:ad:c9:79:d7:c8:7e:1f:14:21:dd:
8a:de:38:8c:17:26:5e:2d:63:35:0d:12:c0:75:93:
51:9c:16:af:18:fc:61:16:07:9e:8a:b2:d0:40:05:
ec:01:cb:37:19:bd:24:b8:81:8c:03:5e:39:a0:9c:
aa:68:58:a1:86:8d:1c:61:6b:2c:45:99:86:e6:1a:
17:ef:29:32:37:46:00:d7:4d:29:d5:c5:1d:bd:e8:
36:b8:a8:69:2d:cd:db:39:81:6b:a7:77:1f:d6:21:
2f:eb:92:83:80:75:8a:d9:49:14:e0:f7:f8:49:22:
bc:47:99:24:c1:a5:01:8a:62:59:55:9c:73:7b:2c:
27:2d:a4:32:4a:a6:df:b3:81:e1:c9:46:06:c6:b3:
05:30:1f:93:d7:ca:80:82:c8:f8:04:e6:ae:99:ca:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:6F:AB:6D:10:D7:4E:16:36:D4:F0:11:DA:74:0C:A0:A2:1B:8F
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/Wzpvq20Q104WNtTwEdp0DKCiG48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.170.128.0-83.170.167.255
83.170.176.0/20
Signature Algorithm: sha256WithRSAEncryption
49:e5:a3:3f:66:21:8b:a3:14:33:2f:cb:b9:2d:f5:3a:f0:1c:
cc:fb:28:d4:3b:bf:a6:5b:3b:78:59:f4:16:96:2e:f0:08:c9:
5a:90:65:2b:81:11:fd:af:14:f9:80:ba:2d:87:7f:f1:0d:3e:
9a:54:7f:d6:86:ec:2b:a8:c2:b2:89:11:14:8d:8f:25:6e:6f:
7e:56:d5:e9:a1:9b:e1:f0:e5:1e:43:dd:a1:fd:40:ce:f2:c1:
2a:77:69:44:1a:bf:8a:e4:11:be:90:e3:40:f0:6a:fc:cf:1d:
fa:95:8d:b6:7b:ea:e9:e4:65:79:4d:15:c8:e5:43:99:86:18:
85:19:e4:0c:7d:83:ff:07:84:d1:7a:dc:20:e4:52:d4:50:55:
ba:42:ac:91:5d:33:00:fe:30:52:4a:e5:83:4c:5c:38:35:cb:
2e:09:3d:04:13:4b:6f:79:67:84:0a:57:2f:07:f7:26:4d:c9:
b4:95:0e:17:49:ec:1b:7d:d9:8f:23:e2:52:21:03:e9:70:8c:
a2:d1:4b:9b:3e:25:71:b6:4c:21:37:ab:b6:aa:b8:f1:fa:d8:
24:45:c6:ad:5f:85:de:b8:dc:34:f7:6c:b7:0c:58:6b:3d:75:
a3:8e:ea:b2:7a:12:79:18:42:83:13:b9:d4:02:9b:35:79:a7:
f9:e9:eb:ed
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaD4SSlltf/V2+h96gDbB+F4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2Mzg1MTVmMzI5NDQ5NjlhZTAwMzFiZGUwMmQxZjRjYmQw
ZDJiOTgwHhcNMjYxMDAxMTYyNTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjNhNmZhYjZkMTBkNzRlMTYzNmQ0ZjAxMWRhNzQwY2EwYTIxYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA065QIINXpalwlmy9qmJDt/n+0CVw
PIQIZwBaRPjjOs+1DEa4sRgzg6YUdpQa+1mv6C0RZ9jITh0PYeSMZh9U1lBIqR3v
uAsVWE/NfeW9XlazL9e0wZ3Q+MxZ2QP3k63JedfIfh8UId2K3jiMFyZeLWM1DRLA
dZNRnBavGPxhFgeeirLQQAXsAcs3Gb0kuIGMA145oJyqaFihho0cYWssRZmG5hoX
7ykyN0YA100p1cUdveg2uKhpLc3bOYFrp3cf1iEv65KDgHWK2UkU4Pf4SSK8R5kk
waUBimJZVZxzeywnLaQySqbfs4HhyUYGxrMFMB+T18qAgsj4BOaumcodMQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFs6b6ttENdOFjbU8BHadAygohuPMB8GA1UdIwQY
MBaAFGY4UV8ylElprgAxveAtH0y9DSuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzct
Yzk5NGZkMTc0ZTZlLzEvV3pwdnEyMFExMDRXTnRUd0VkcDBES0NpRzQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzctYzk5NGZkMTc0ZTZl
LzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAdTqoAD
BANTqqADBARTqrAwDQYJKoZIhvcNAQELBQADggEBAEnloz9mIYujFDMvy7kt9Trw
HMz7KNQ7v6ZbO3hZ9BaWLvAIyVqQZSuBEf2vFPmAui2Hf/ENPppUf9aG7CuowrKJ
ERSNjyVub35W1emhm+Hw5R5D3aH9QM7ywSp3aUQav4rkEb6Q40DwavzPHfqVjbZ7
6unkZXlNFcjlQ5mGGIUZ5Ax9g/8HhNF63CDkUtRQVbpCrJFdMwD+MFJK5YNMXDg1
yy4JPQQTS295Z4QKVy8H9yZNybSVDhdJ7Bt92Y8j4lIhA+lwjKLRS5s+JXG2TCE3
q7aquPH62CRFxq1fhd643DT3bLcMWGs9daOO6rJ6EnkYQoMTudQCmzV5p/np6+0=
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:32 2026 by rpki-client