Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Wgz-LAxIGGbPc-vcNnscTunH_x8.roa
File: Wgz-LAxIGGbPc-vcNnscTunH_x8.roa (raw, json)
Hash identifier: ILeWtcSkW1eO8qLTRqXYJLDt7tPWExa52z2i2Y8WW2k=
Subject key identifier: 5A:0C:FE:2C:0C:48:18:66:CF:73:EB:DC:36:7B:1C:4E:E9:C7:FF:1F
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A032A0B4CB52A0135AC7940619DC1C2C4D
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Wgz-LAxIGGbPc-vcNnscTunH_x8.roa
Signing time: Mon 24 Aug 2026 07:16:27 +0000
ROA not before: Mon 24 Aug 2026 07:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219207
IP address blocks: 2a0e:4001:8400::/38 maxlen: 38
2a0e:4001:9800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:a0:b4:cb:52:a0:13:5a:c7:94:06:19:dc:1c:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 24 07:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a0cfe2c0c481866cf73ebdc367b1c4ee9c7ff1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:a0:ec:ab:50:35:fc:61:f8:f4:82:3d:f2:
ef:0b:94:76:03:5e:f4:d0:da:8e:66:6e:36:2c:f1:
5b:85:f2:75:2b:45:4f:08:65:30:bf:4e:88:95:44:
d6:09:cf:99:d1:d6:c9:c2:f1:ee:49:af:87:9f:20:
74:7c:28:32:93:b5:09:25:01:e3:a5:35:71:13:01:
4a:59:14:e2:b6:df:74:f2:68:94:bf:34:e1:28:28:
f6:93:58:bf:7f:ba:18:c4:b6:36:e5:d0:de:7c:38:
21:c9:d9:a1:d2:44:41:98:e7:b0:f8:da:32:60:cd:
8c:5f:40:19:40:d0:f9:c8:8d:70:aa:14:5b:a9:b7:
a3:ea:63:05:e8:14:5d:5e:d6:c7:ce:5e:a3:d9:4e:
4b:f4:c9:f7:01:da:ac:f3:68:11:bc:16:e1:97:94:
49:9e:7a:cd:5f:b6:20:9e:97:ab:e3:a9:6e:0d:93:
16:99:a5:1c:f3:83:e4:fb:74:d6:ba:c6:24:81:6e:
aa:9b:75:47:98:43:c6:9e:5e:1d:18:49:f6:df:20:
b7:c1:1d:c1:b9:d9:7a:e7:38:69:f2:f1:30:32:27:
6d:9f:9f:b7:a1:75:b2:34:dc:c0:da:de:f3:8a:28:
89:c0:20:f1:f8:ff:31:26:ff:7b:2c:5c:55:e0:7e:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0C:FE:2C:0C:48:18:66:CF:73:EB:DC:36:7B:1C:4E:E9:C7:FF:1F
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Wgz-LAxIGGbPc-vcNnscTunH_x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:8400::/38
2a0e:4001:9800::/37
Signature Algorithm: sha256WithRSAEncryption
c5:56:19:2b:17:bb:58:c6:e6:0d:51:59:cb:b9:c5:96:55:f1:
9c:67:2a:b7:d6:2c:b0:f8:16:7c:24:dc:71:62:6e:24:14:fd:
8c:6a:db:b5:8a:3e:f9:93:ba:d1:2d:83:50:96:53:31:72:b7:
de:53:cf:40:f2:25:b3:d4:86:8b:57:aa:a5:ed:70:ce:f5:b5:
92:b2:be:cb:78:11:25:5a:63:65:46:82:8f:73:f6:95:38:69:
d6:4d:98:1e:95:e4:2e:ab:6e:de:8d:6f:bf:80:8e:ab:f0:7b:
44:13:31:e4:53:0b:3b:e3:70:d7:7f:31:c9:3f:1e:19:37:cb:
b2:04:af:ed:d0:b8:61:86:c8:84:dd:d1:6c:93:87:99:f4:3c:
a9:b1:82:c0:70:6f:80:e7:58:01:e3:50:b3:aa:e0:f4:70:b7:
87:f1:cd:1f:07:4a:13:2e:81:22:12:d3:6c:ec:e1:38:b2:08:
7e:ab:c3:c7:7e:8f:01:2c:40:bf:fc:5c:fa:3c:7b:30:5e:77:
6f:bf:b9:f9:b2:9b:51:69:cb:be:cf:ac:96:fe:fc:58:e4:9d:
fb:a4:9a:be:78:62:63:b2:ed:ea:3e:c8:82:e6:8f:01:4a:9c:
da:5e:7a:5c:d1:cc:b8:dd:66:8e:0b:02:36:e9:3b:d0:aa:be:
8c:7e:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:23 2026 by rpki-client