Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/wzFUmExrbfhJGO9J_KmqSJOAv_s.roa
File: wzFUmExrbfhJGO9J_KmqSJOAv_s.roa (raw, json)
Hash identifier: EUfocXXtzQ4PPAMu6osjSAolxe2DCe3wU+6Eub2eN14=
Subject key identifier: C3:31:54:98:4C:6B:6D:F8:49:18:EF:49:FC:A9:AA:48:93:80:BF:FB
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 019FC6C96659D345622567C01457C6537BF4
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/wzFUmExrbfhJGO9J_KmqSJOAv_s.roa
Signing time: Mon 03 Aug 2026 08:41:55 +0000
ROA not before: Mon 03 Aug 2026 08:41:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205184
IP address blocks: 23.19.48.0/22 maxlen: 22
185.84.200.0/23 maxlen: 23
185.129.40.0/22 maxlen: 22
185.151.204.0/24 maxlen: 24
185.230.36.0/23 maxlen: 23
185.230.38.0/24 maxlen: 24
2a0b:14c0::/48 maxlen: 48
2a0b:14c0:1::/48 maxlen: 48
2a0b:14c0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:c9:66:59:d3:45:62:25:67:c0:14:57:c6:53:7b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Aug 3 08:41:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c33154984c6b6df84918ef49fca9aa489380bffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:6d:0d:10:cf:2c:b6:7d:a9:f0:ad:1a:02:
b3:fc:29:4d:68:0d:83:e0:2e:31:58:0a:47:b2:33:
83:2b:6c:22:3b:31:79:0d:cd:ab:15:5d:d8:3c:de:
90:54:a4:4c:a6:29:fb:29:64:aa:79:8f:b9:fd:ab:
0f:9d:aa:fd:f5:f9:03:92:1c:5b:b8:e6:6b:6a:e3:
dd:56:d0:3a:55:b5:db:96:6d:22:c5:0a:10:4e:06:
99:d6:58:23:e4:d8:a0:85:c8:25:18:12:69:a9:0b:
80:3a:26:d6:68:08:9b:73:ed:68:94:b1:2b:66:72:
be:db:93:3a:26:a7:0d:64:d2:b1:85:ae:8e:49:9c:
3b:d8:ce:70:d2:42:dc:66:a5:12:87:54:ec:28:90:
22:2d:63:3c:3e:f3:ac:2d:e0:cd:5e:07:81:9f:5f:
dd:1f:b0:28:af:9e:3d:e9:90:c2:93:8a:1e:d3:21:
27:62:a9:eb:6f:fc:22:09:be:ad:28:a9:69:1c:e9:
b9:7f:f7:97:fe:b7:0b:c1:d0:c7:ef:29:06:24:4d:
b0:d8:ff:b3:b8:a2:b2:f6:49:69:d8:17:cb:31:61:
27:40:bb:ca:5e:91:7e:09:91:dc:09:8a:52:22:ed:
61:36:9a:d4:04:a4:89:bf:fb:2d:da:0c:21:58:f1:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:54:98:4C:6B:6D:F8:49:18:EF:49:FC:A9:AA:48:93:80:BF:FB
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/wzFUmExrbfhJGO9J_KmqSJOAv_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.19.48.0/22
185.84.200.0/23
185.129.40.0/22
185.151.204.0/24
185.230.36.0-185.230.38.255
IPv6:
2a0b:14c0::/47
2a0b:14c0:6::/48
Signature Algorithm: sha256WithRSAEncryption
56:f9:8d:7e:b4:ac:b0:fc:b8:ab:c8:a1:61:44:60:0e:ed:1b:
eb:3f:27:97:44:07:4e:a3:75:1c:55:a2:ce:e2:51:43:f6:b2:
08:82:3d:d9:f5:f3:a9:c2:16:ec:12:5a:85:35:a9:56:92:8d:
9a:01:62:eb:7c:16:e8:c6:cf:31:49:27:1e:47:77:5c:1f:b9:
aa:af:82:7b:77:8b:01:95:33:58:24:e4:73:aa:53:b6:d1:fd:
34:3b:46:f5:b5:d6:83:54:26:76:a5:37:96:07:60:b8:c1:e9:
14:b5:cd:60:ae:52:51:3a:3c:b5:01:4d:7c:93:66:d0:d6:40:
f1:98:c3:84:71:85:3a:f7:e1:71:c6:2a:7e:db:9d:29:9d:17:
c6:97:69:c2:c0:80:85:94:bd:a4:82:73:d2:98:3c:da:17:2d:
45:67:be:93:4c:dc:23:64:ae:6b:8e:f2:f1:b1:1d:bf:20:1e:
46:b6:f8:81:91:b5:3d:01:09:12:d3:51:ef:56:62:20:bc:fe:
d1:ed:e0:41:ca:83:a2:fe:9d:0d:3e:7a:86:4f:b5:1d:ad:51:
a2:53:23:7f:8d:fd:1c:19:2d:35:aa:71:4c:e9:f5:ae:e2:38:
fb:bd:d4:de:10:be:32:3d:2d:76:17:45:9d:26:f0:c6:a3:b3:
ee:ba:da:bb
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZ/GyWZZ00ViJWfAFFfGU3v0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw
Y2MyNzAwHhcNMjYwODAzMDg0MTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzMxNTQ5ODRjNmI2ZGY4NDkxOGVmNDlmY2E5YWE0ODkzODBiZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGhtDRDPLLZ9qfCtGgKz/ClNaA2D
4C4xWApHsjODK2wiOzF5Dc2rFV3YPN6QVKRMpin7KWSqeY+5/asPnar99fkDkhxb
uOZrauPdVtA6VbXblm0ixQoQTgaZ1lgj5NighcglGBJpqQuAOibWaAibc+1olLEr
ZnK+25M6JqcNZNKxha6OSZw72M5w0kLcZqUSh1TsKJAiLWM8PvOsLeDNXgeBn1/d
H7Aor5496ZDCk4oe0yEnYqnrb/wiCb6tKKlpHOm5f/eX/rcLwdDH7ykGJE2w2P+z
uKKy9klp2BfLMWEnQLvKXpF+CZHcCYpSIu1hNprUBKSJv/st2gwhWPERewIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFMMxVJhMa234SRjvSfypqkiTgL/7MB8GA1UdIwQY
MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt
NmMxYjQ0NzFmN2VlLzEvd3pGVW1FeHJiZmhKR085Sl9LbXFTSk9Bdl9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl
LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAsBAIAATAmAwQCFxMwAwQB
uVTIAwQCuYEoAwQAuZfMMAwDBAK55iQDBAC55iYwGAQCAAIwEgMHASoLFMAAAAMH
ACoLFMAABjANBgkqhkiG9w0BAQsFAAOCAQEAVvmNfrSssPy4q8ihYURgDu0b6z8n
l0QHTqN1HFWizuJRQ/ayCII92fXzqcIW7BJahTWpVpKNmgFi63wW6MbPMUknHkd3
XB+5qq+Ce3eLAZUzWCTkc6pTttH9NDtG9bXWg1QmdqU3lgdguMHpFLXNYK5SUTo8
tQFNfJNm0NZA8ZjDhHGFOvfhccYqftudKZ0XxpdpwsCAhZS9pIJz0pg82hctRWe+
k0zcI2Sua47y8bEdvyAeRrb4gZG1PQEJEtNR71ZiILz+0e3gQcqDov6dDT56hk+1
Ha1RolMjf439HBktNapxTOn1ruI4+73U3hC+Mj0tdhdFnSbwxqOz7rrauw==
-----END CERTIFICATE-----
Generated at Sat Aug 22 06:14:41 2026 by rpki-client