Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WBGhEgaP4OrGtxbz4yT7HBkvNHQ.roa
File: WBGhEgaP4OrGtxbz4yT7HBkvNHQ.roa (raw, json)
Hash identifier: 8RvBxHMlKDpcBrBP/pLFO/A/Wp/HMnE+/gCJx1rNgZg=
Subject key identifier: 58:11:A1:12:06:8F:E0:EA:C6:B7:16:F3:E3:24:FB:1C:19:2F:34:74
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A1058D0673EFE8F16760F5BD327388D2B7
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WBGhEgaP4OrGtxbz4yT7HBkvNHQ.roa
Signing time: Sun 04 Oct 2026 06:14:50 +0000
ROA not before: Sun 04 Oct 2026 06:14:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218674
IP address blocks: 193.187.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:8d:06:73:ef:e8:f1:67:60:f5:bd:32:73:88:d2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 4 06:14:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5811a112068fe0eac6b716f3e324fb1c192f3474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:46:75:75:9b:62:8d:ab:ee:64:fc:7a:0a:
5e:bc:84:ec:c9:7b:94:93:de:7a:aa:8d:66:41:7f:
59:67:26:4e:6e:de:5b:f8:c7:19:17:30:35:e5:28:
89:07:38:74:4a:2d:42:02:28:45:c6:01:6c:9a:38:
3b:6f:2a:45:a6:2d:bf:3b:25:7a:71:d3:5d:06:ce:
bf:76:e3:0f:4b:38:5d:98:20:69:5e:3e:95:74:9e:
77:bb:c5:8e:3f:49:16:a9:e3:b3:86:47:cc:dd:a6:
33:8f:72:3a:73:3a:6c:03:1d:69:31:25:44:50:7e:
26:e4:21:b4:d8:4a:68:5c:5c:46:ae:7a:6b:74:36:
06:05:f3:7d:a7:5b:6c:81:77:c2:3d:b8:8b:4c:a7:
bc:6e:5d:2c:5f:25:0f:75:f8:88:42:9b:ee:7a:95:
03:93:e0:a9:b6:1f:88:ef:12:59:04:f2:bf:f4:d7:
65:47:6b:fe:db:75:18:8d:99:81:55:a9:54:e9:2a:
9d:a9:3f:97:cd:4c:e8:dd:4e:b6:32:7a:22:3a:bc:
b6:b7:eb:03:bf:83:dd:95:7d:66:9f:3b:a7:d6:be:
23:b0:39:1c:5a:48:54:3b:98:b1:4e:56:21:76:7e:
bd:6f:4d:f7:e5:f6:ac:d8:be:30:7e:6d:1f:c2:8e:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:A1:12:06:8F:E0:EA:C6:B7:16:F3:E3:24:FB:1C:19:2F:34:74
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WBGhEgaP4OrGtxbz4yT7HBkvNHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.111.0/24
Signature Algorithm: sha256WithRSAEncryption
82:52:06:ae:d1:a1:6b:cb:94:b5:34:70:5d:c3:75:2c:96:23:
63:9b:1e:1e:35:ca:57:c1:c2:92:64:f3:97:62:e8:1a:ac:b7:
10:bd:83:99:da:c4:96:43:e3:77:6e:96:d2:65:eb:49:e3:f3:
fc:e5:0e:92:89:a8:ff:a4:a4:1e:bb:ed:c0:3b:92:23:7e:3d:
31:ee:3c:85:6e:01:51:62:ec:76:ae:98:78:d8:b3:e6:91:5f:
2c:40:9b:55:16:6a:b3:5b:f5:70:fe:82:00:5f:08:7b:5c:1c:
f3:6b:05:8a:cf:1f:fd:4c:48:ef:29:de:84:e5:4d:30:d8:a8:
2a:eb:b7:80:33:4c:94:d8:41:11:a8:2c:f3:e7:12:51:90:fe:
40:8a:7d:15:2d:bc:71:02:c4:1a:be:7c:c6:31:5a:52:9b:a3:
48:b8:c7:34:c0:1d:89:74:76:a4:80:72:e6:97:30:91:b3:12:
32:37:d3:40:ef:bd:a5:89:36:bc:35:1d:4e:31:ac:ab:1f:ea:
98:cb:c8:d6:df:3b:dd:46:80:ae:d4:17:89:4b:28:73:1a:c7:
37:fe:f0:6a:26:a2:e1:02:4a:7f:f9:58:87:8f:0a:b2:5b:39:
6b:89:6c:af:c5:8f:3b:a7:9e:78:81:01:84:0d:75:42:ee:56:
ad:54:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:04:56 2026 by rpki-client