Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wsp-YsM8KkAVTcPd3MwOoelMTgM.roa
File: wsp-YsM8KkAVTcPd3MwOoelMTgM.roa (raw, json)
Hash identifier: QiGxQ5QcYaOrOmQX6tJlO5YJwleRXqWC+WTs2EsNUGU=
Subject key identifier: C2:CA:7E:62:C3:3C:2A:40:15:4D:C3:DD:DC:CC:0E:A1:E9:4C:4E:03
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A04336BFA203E836C8C98B0FBE17668A0A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wsp-YsM8KkAVTcPd3MwOoelMTgM.roa
Signing time: Thu 27 Aug 2026 12:34:16 +0000
ROA not before: Thu 27 Aug 2026 12:34:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 195.21.128.0/24 maxlen: 24
195.21.148.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:36:bf:a2:03:e8:36:c8:c9:8b:0f:be:17:66:8a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 27 12:34:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2ca7e62c33c2a40154dc3dddccc0ea1e94c4e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:f1:83:82:05:eb:49:b7:6f:da:9c:dc:e3:
cc:b6:b8:d3:26:ef:d3:2f:59:34:96:b8:e9:f0:5b:
f5:37:9a:ae:3f:d8:82:32:76:47:2c:e4:f5:96:94:
59:e0:0c:58:2b:91:6e:5a:a0:ae:8b:3c:5b:d8:4b:
b1:13:ab:03:17:af:c4:66:4c:f6:bf:d2:26:fb:f4:
86:ea:7e:e1:e2:34:ed:91:1e:6c:87:1e:78:8b:f8:
cd:b5:b4:58:d3:44:ac:15:16:70:2f:bc:ff:f5:47:
86:84:ea:2b:7f:f7:bf:9d:6f:02:8c:53:9c:b5:d2:
3e:31:64:74:d2:b1:25:14:2e:f8:fe:db:4b:05:dc:
96:82:95:83:94:d4:6c:df:52:f5:cc:c7:10:a3:ee:
7a:59:10:c0:e7:d5:91:a8:21:da:fd:21:d6:7c:44:
9e:c3:46:4a:be:10:5d:c7:d1:77:5d:a7:45:c0:63:
8b:96:fc:8e:ba:5d:28:11:72:6e:24:54:a5:51:18:
7c:97:35:27:9b:f6:7f:68:bc:98:41:16:c2:bc:e7:
21:43:9d:4f:fc:0a:86:94:61:0a:d8:9e:89:6a:86:
41:56:1c:7f:05:2b:b4:33:a9:d3:21:5b:48:59:f1:
71:62:65:72:9c:49:49:d9:b4:90:cc:71:cb:2d:01:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CA:7E:62:C3:3C:2A:40:15:4D:C3:DD:DC:CC:0E:A1:E9:4C:4E:03
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wsp-YsM8KkAVTcPd3MwOoelMTgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.128.0/24
195.21.148.0/24
212.189.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2b:ef:c2:94:28:38:6a:6f:9f:f0:f6:b8:50:49:f5:2c:74:
c3:22:c7:8f:3c:4e:a2:63:4e:22:ea:ad:c6:e9:5b:9c:5b:cb:
21:d2:21:f0:f6:45:2d:0d:af:54:28:9a:e8:0a:85:1d:4d:9d:
09:ff:91:1b:d5:fc:64:98:f1:d3:d3:41:24:ee:fb:ea:c8:be:
4b:6a:da:36:2c:80:47:28:e9:94:96:e4:e1:23:75:bc:07:cf:
81:6b:7a:66:1b:75:6a:27:f6:92:1c:aa:00:cc:a4:3b:bf:fa:
8c:00:2c:0a:b2:d1:94:0d:65:19:e5:0f:74:19:f3:ce:cb:61:
56:7c:a9:6c:1a:10:13:0b:2b:1b:93:65:6e:14:9e:0b:fc:cb:
3d:8b:9b:69:88:2f:09:c4:8b:7f:bb:11:a6:19:3d:4c:90:94:
e3:47:b5:df:40:c2:65:d2:76:32:8b:73:b7:b6:59:90:6c:63:
40:d4:08:f6:07:06:d6:a8:80:aa:e3:68:95:de:98:55:37:2d:
b2:54:82:1c:ef:63:89:27:54:b2:a4:1e:0c:66:27:c5:19:4c:
d1:35:c2:42:a7:59:81:1a:d0:8b:66:98:34:df:77:30:7f:7e:
b5:d4:2c:01:6c:39:f4:3c:be:8a:51:5c:f5:ee:95:f6:0a:d9:
57:89:a3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:14 2026 by rpki-client