Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WYuiIgbGPkAbgTItSWt6b8xpwtk.roa
File: WYuiIgbGPkAbgTItSWt6b8xpwtk.roa (raw, json)
Hash identifier: Ols0UwFcO0BQNxnaNS1XLl78OUn6UWR5i6PsVqYF4A8=
Subject key identifier: 59:8B:A2:22:06:C6:3E:40:1B:81:32:2D:49:6B:7A:6F:CC:69:C2:D9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019D6C9420F5C6D55E24C64EB72C070069C7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WYuiIgbGPkAbgTItSWt6b8xpwtk.roa
Signing time: Wed 08 Apr 2026 10:12:20 +0000
ROA not before: Wed 08 Apr 2026 10:12:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 193.93.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:94:20:f5:c6:d5:5e:24:c6:4e:b7:2c:07:00:69:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 8 10:12:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=598ba22206c63e401b81322d496b7a6fcc69c2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:c4:ec:2d:90:f2:bc:1a:03:81:6a:16:78:
e3:0f:77:1e:0d:ba:fb:96:56:bd:54:1d:1d:90:54:
14:8a:c6:ec:4c:18:42:5d:da:4f:88:59:85:15:c5:
62:6c:a2:9f:80:d8:32:e8:f5:2c:6c:9f:1d:08:f1:
12:4f:41:59:3f:30:81:f0:44:12:c1:8c:59:c7:c1:
60:32:af:94:cc:dc:af:18:d6:e1:38:5f:d7:16:d3:
d7:64:46:3d:85:3b:a6:16:f0:ae:60:31:ae:0e:f2:
41:79:24:e2:98:dd:b4:c8:62:16:9c:da:7d:6e:6e:
d3:de:6b:7a:bd:e3:84:24:7c:6a:80:45:65:bf:33:
71:3f:a8:a2:2c:f1:18:e7:5c:4e:de:0c:35:18:75:
d5:59:0c:6d:77:98:d3:37:cc:4e:ef:70:b8:fa:4b:
d3:99:7a:0a:3d:9a:1b:48:36:f4:8c:f5:16:08:55:
ec:d4:fb:8b:70:83:f3:29:33:42:29:77:93:d7:fa:
aa:43:24:99:1d:74:c4:99:a6:82:c1:9d:a2:a7:cf:
ba:4c:e2:ec:d9:d9:f6:65:25:b1:f0:c8:17:65:4d:
e7:b8:de:5e:45:00:24:6b:d7:f7:f7:b3:f8:58:d1:
be:89:7e:d4:f4:c3:f0:20:52:bc:c6:b3:30:ff:80:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:A2:22:06:C6:3E:40:1B:81:32:2D:49:6B:7A:6F:CC:69:C2:D9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WYuiIgbGPkAbgTItSWt6b8xpwtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.54.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a2:5b:82:3b:6f:18:a2:8f:b3:c0:21:c9:22:33:02:e9:59:
7a:ef:dc:75:c0:ed:a1:e0:71:6e:7c:b4:31:bf:80:a7:f1:35:
6c:61:aa:b1:d2:41:d7:35:1e:e8:5c:37:8f:1e:26:ac:54:e9:
7d:3f:26:64:b1:2c:b8:66:ba:32:c3:80:aa:b5:a0:4b:89:05:
ff:7d:e9:e8:e9:24:83:70:99:5e:88:4d:d8:99:37:34:f4:98:
71:09:0c:1f:df:09:cf:10:61:5d:2b:81:45:0a:78:2b:97:d4:
2e:85:98:7d:36:26:15:12:0a:20:4c:09:96:54:f3:9a:8e:1f:
18:a2:6a:56:a8:9f:66:a2:53:4a:88:66:1a:ce:65:50:72:dc:
c0:35:b9:8b:ec:30:bb:ff:43:d1:ea:d9:8e:01:55:6d:3a:a4:
bd:88:67:6b:01:e7:45:dd:0f:50:16:09:3f:39:d1:3c:56:57:
08:c5:c6:2a:f6:80:c9:c0:02:68:28:a7:fe:10:6d:e1:49:ab:
47:76:67:3a:80:19:64:7a:b8:73:34:25:57:26:71:9e:0a:be:
53:cd:62:39:08:25:0d:16:2a:90:fa:f4:f4:79:e6:89:3d:97:
e8:3e:2f:02:2c:68:64:8b:c8:dc:f7:3e:3c:af:37:aa:94:61:
cb:2f:86:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1slCD1xtVeJMZOtywHAGnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwNDA4MTAxMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OThiYTIyMjA2YzYzZTQwMWI4MTMyMmQ0OTZiN2E2ZmNjNjljMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5LE7C2Q8rwaA4FqFnjjD3ceDbr7
lla9VB0dkFQUisbsTBhCXdpPiFmFFcVibKKfgNgy6PUsbJ8dCPEST0FZPzCB8EQS
wYxZx8FgMq+UzNyvGNbhOF/XFtPXZEY9hTumFvCuYDGuDvJBeSTimN20yGIWnNp9
bm7T3mt6veOEJHxqgEVlvzNxP6iiLPEY51xO3gw1GHXVWQxtd5jTN8xO73C4+kvT
mXoKPZobSDb0jPUWCFXs1PuLcIPzKTNCKXeT1/qqQySZHXTEmaaCwZ2ip8+6TOLs
2dn2ZSWx8MgXZU3nuN5eRQAka9f397P4WNG+iX7U9MPwIFK8xrMw/4CK5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFmLoiIGxj5AG4EyLUlrem/MacLZMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvV1l1aUlnYkdQa0FiZ1RJdFNXdDZiOHhwd3RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV02MA0G
CSqGSIb3DQEBCwUAA4IBAQAColuCO28Yoo+zwCHJIjMC6Vl679x1wO2h4HFufLQx
v4Cn8TVsYaqx0kHXNR7oXDePHiasVOl9PyZksSy4Zroyw4CqtaBLiQX/feno6SSD
cJleiE3YmTc09JhxCQwf3wnPEGFdK4FFCngrl9QuhZh9NiYVEgogTAmWVPOajh8Y
ompWqJ9molNKiGYazmVQctzANbmL7DC7/0PR6tmOAVVtOqS9iGdrAedF3Q9QFgk/
OdE8VlcIxcYq9oDJwAJoKKf+EG3hSatHdmc6gBlkerhzNCVXJnGeCr5TzWI5CCUN
FiqQ+vT0eeaJPZfoPi8CLGhki8jc9z48rzeqlGHLL4Yn
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:05:20 2026 by rpki-client