Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/gwfkpOpPzc-UUNBRNurVqQ1BnOU.roa
File: gwfkpOpPzc-UUNBRNurVqQ1BnOU.roa (raw, json)
Hash identifier: QBi5IqWkfubZgMUQCUMhG623BzbGTNquHl5ghz5pfQU=
Subject key identifier: 83:07:E4:A4:EA:4F:CD:CF:94:50:D0:51:36:EA:D5:A9:0D:41:9C:E5
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01A087FAAC96D3E02DD6B04982F1493BEF7F
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/gwfkpOpPzc-UUNBRNurVqQ1BnOU.roa
Signing time: Wed 09 Sep 2026 21:02:27 +0000
ROA not before: Wed 09 Sep 2026 21:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 84.252.100.0/23 maxlen: 24
93.177.78.0/23 maxlen: 24
93.177.79.0/24 maxlen: 24
185.243.243.0/24 maxlen: 24
185.245.40.0/24 maxlen: 24
185.245.42.0/23 maxlen: 24
185.245.42.0/24 maxlen: 24
185.245.43.0/24 maxlen: 24
212.115.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:fa:ac:96:d3:e0:2d:d6:b0:49:82:f1:49:3b:ef:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Sep 9 21:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8307e4a4ea4fcdcf9450d05136ead5a90d419ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:c8:95:7a:b2:3e:74:a3:96:60:d4:5c:2c:
1f:02:f6:da:b2:30:12:7a:9f:0c:9a:19:cb:b5:da:
54:6a:ee:d5:0a:c1:49:a8:bf:03:43:83:95:01:dc:
d6:32:7b:29:8a:4c:ec:a6:3e:e4:09:b9:e9:ef:e4:
15:53:67:2d:f0:2a:f6:9d:80:cc:99:ee:2c:9d:ba:
22:fa:19:4a:4b:fa:9c:2d:9a:4d:b9:74:04:a9:c8:
1b:a9:8e:8f:61:01:35:bb:60:35:e8:93:31:7c:69:
c6:bb:3b:8f:89:45:86:2d:18:08:8e:d8:51:67:72:
07:81:5c:22:68:65:2c:37:fa:03:fd:5a:0c:1d:e1:
5b:64:7d:38:54:c4:ac:83:68:68:40:67:b6:9b:f4:
f3:41:db:8e:80:b1:b9:3c:22:13:2c:9e:21:9b:ba:
fe:8b:d8:11:2c:b7:d3:da:ac:b0:38:96:53:3e:47:
f3:c5:dd:ae:4d:cd:26:0b:f2:61:84:b1:b2:5e:95:
00:a5:af:77:be:6c:90:a8:6d:7e:51:aa:af:87:f0:
ac:2b:55:08:36:e1:e7:ba:55:f2:0e:cb:9a:62:7b:
3b:09:c3:cf:97:6d:b8:61:ba:5c:52:58:68:58:ca:
94:3d:c5:15:d9:90:a9:66:4b:34:af:49:70:53:91:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:07:E4:A4:EA:4F:CD:CF:94:50:D0:51:36:EA:D5:A9:0D:41:9C:E5
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/gwfkpOpPzc-UUNBRNurVqQ1BnOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.100.0/23
93.177.78.0/23
185.243.243.0/24
185.245.40.0/24
185.245.42.0/23
212.115.55.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f1:3e:0f:d8:86:22:af:36:e5:37:b2:83:1d:eb:cd:c6:f9:
f6:3a:69:c1:84:33:ea:a6:a5:99:3f:32:63:0d:3a:46:21:1c:
45:dc:ae:ac:8f:7a:5c:31:a4:21:d3:7a:e7:8b:36:51:ea:a9:
e5:ed:34:ca:52:63:9d:8a:93:27:b1:b8:39:c1:56:19:86:98:
08:a7:9e:f3:3f:eb:67:09:02:7d:7f:00:35:84:13:2b:4a:40:
5d:22:97:63:a1:13:14:18:cd:d6:17:b9:26:35:94:92:4a:93:
99:23:53:cd:11:11:94:4e:d8:dc:9c:c9:bb:4f:2b:91:80:55:
9d:fc:37:52:83:be:fb:4e:1b:a8:81:6b:e3:4b:b5:b6:f8:88:
da:72:b1:6f:98:5c:c8:a9:1d:25:f2:2e:29:2a:a1:af:81:2a:
20:15:c5:4d:09:6a:28:14:cf:45:1e:5d:40:c5:4e:2d:ca:ae:
03:0f:f7:44:c2:97:bd:2c:99:fd:73:09:6d:71:0e:36:8e:92:
89:2c:27:a2:ef:42:c7:71:9f:d2:ea:bd:6d:b7:e1:dd:d2:71:
e5:25:8a:2a:24:9a:5a:6f:65:bc:da:02:a6:11:ed:a5:45:56:
d3:47:3b:b5:48:23:9c:44:82:45:c2:56:bb:f1:f9:d4:f9:81:
da:ac:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:16:12 2026 by rpki-client