Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/WEYg1QN4WwnmDh1pgwI66IouCEE.roa
File: WEYg1QN4WwnmDh1pgwI66IouCEE.roa (raw, json)
Hash identifier: uprlbCHbYZo6D0zDSxTUV0SNPUa62AkDYYdjLLblq6o=
Subject key identifier: 58:46:20:D5:03:78:5B:09:E6:0E:1D:69:83:02:3A:E8:8A:2E:08:41
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A156292310FDCB90CA9D5008045AD86D1B
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/WEYg1QN4WwnmDh1pgwI66IouCEE.roa
Signing time: Mon 19 Oct 2026 21:54:58 +0000
ROA not before: Mon 19 Oct 2026 21:54:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26636
IP address blocks: 185.225.14.0/24 maxlen: 24
185.228.46.0/24 maxlen: 24
193.163.35.0/24 maxlen: 24
193.176.118.0/24 maxlen: 24
217.18.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:29:23:10:fd:cb:90:ca:9d:50:08:04:5a:d8:6d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 19 21:54:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=584620d503785b09e60e1d6983023ae88a2e0841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:aa:fd:7b:bf:22:61:3b:8d:22:e3:1d:49:
5b:42:4d:5e:e0:d9:09:a9:b2:1e:b9:94:1e:0b:fe:
5b:dd:4c:07:f4:59:cb:09:95:45:16:92:d3:f8:b7:
cd:3f:bf:31:2d:f4:88:5d:4f:6e:a6:cc:6e:1a:cc:
8f:d5:c0:cc:d4:39:1d:51:69:6e:8f:f0:8c:51:6d:
54:e9:25:f8:3a:0c:15:2f:1c:a9:18:5c:ff:8a:9f:
d6:12:38:b0:08:d7:4d:6a:ef:7e:b6:24:59:6c:9c:
24:28:7c:be:47:4d:e0:69:2c:1e:2b:6c:19:30:51:
0f:55:52:50:06:30:2d:ab:d3:bd:6b:1f:50:6d:de:
47:62:6c:d7:83:28:9f:87:82:9e:41:88:e6:a8:9b:
05:3a:f9:a8:4a:d4:d1:79:12:ce:ef:90:1b:cc:14:
a1:e6:28:99:49:53:8a:77:fc:f4:25:8d:a2:2d:3b:
49:29:a2:4d:8e:37:48:a8:31:c8:0f:ef:3a:09:42:
90:ed:20:08:81:07:e9:69:1d:e6:68:de:b1:10:a6:
f4:f5:c4:b3:cc:e1:35:c8:25:1a:64:ed:b2:0e:16:
7b:8f:71:1a:86:b8:b8:16:c5:59:19:b2:7a:fa:05:
c3:ba:95:b4:d5:5c:d0:5a:00:fc:22:5c:df:a6:d7:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:46:20:D5:03:78:5B:09:E6:0E:1D:69:83:02:3A:E8:8A:2E:08:41
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/WEYg1QN4WwnmDh1pgwI66IouCEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.14.0/24
185.228.46.0/24
193.163.35.0/24
193.176.118.0/24
217.18.59.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ce:cc:1c:60:89:c7:b2:ff:27:6a:6d:d0:24:2a:41:98:22:
65:ad:5c:4d:cb:15:f3:5a:48:7a:ef:e1:d8:06:df:ba:89:2f:
44:c1:43:5f:86:47:ee:07:6d:b1:ae:c9:b1:04:98:37:47:a4:
3b:a9:64:8a:f3:25:5d:94:c6:f3:44:47:f6:b4:aa:66:29:ce:
39:7c:cd:0b:3e:e8:a0:5b:19:56:4c:60:22:82:82:be:b0:8a:
21:b9:ca:89:13:f6:0b:fe:8e:82:b5:4b:30:52:4f:84:b5:a7:
04:60:e0:c7:6b:cf:87:fa:45:a6:b8:f7:42:5a:b0:46:08:b4:
e6:47:89:af:dc:b7:68:b4:59:a0:a7:c3:2c:bf:7b:bc:a0:59:
f2:92:ae:32:be:bc:45:d6:9b:7b:71:c8:6c:e6:c1:4b:01:2d:
14:9d:e6:cc:90:5b:ad:43:13:b5:43:be:c8:02:99:41:88:68:
71:e7:38:10:47:60:0c:aa:67:56:3c:8d:c7:81:a3:f8:8a:c4:
f0:ad:6f:19:70:cb:2c:66:e9:52:d6:ad:99:5c:65:ce:f3:3d:
32:2e:40:d2:5b:e0:cb:5c:2f:b7:f8:0c:db:5e:15:27:ba:a8:
ef:71:96:2a:c6:24:fb:51:98:2b:be:84:3d:6c:0f:ae:b2:81:
9d:9d:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:19 2026 by rpki-client