Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/bYwuKWLGOAiz-Xyi-FP3iiOfuOM.roa
File: bYwuKWLGOAiz-Xyi-FP3iiOfuOM.roa (raw, json)
Hash identifier: 7a2nIjdrNhg3Alb/N/10aBxPMBPyYoy/L70HpXzO0Mo=
Subject key identifier: 6D:8C:2E:29:62:C6:38:08:B3:F9:7C:A2:F8:53:F7:8A:23:9F:B8:E3
Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial: 01A1396046AC7FF052C21EC075AEC3DF2141
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/bYwuKWLGOAiz-Xyi-FP3iiOfuOM.roa
Signing time: Wed 14 Oct 2026 07:46:13 +0000
ROA not before: Wed 14 Oct 2026 07:46:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203771
IP address blocks: 185.133.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:60:46:ac:7f:f0:52:c2:1e:c0:75:ae:c3:df:21:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Validity
Not Before: Oct 14 07:46:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d8c2e2962c63808b3f97ca2f853f78a239fb8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:48:e9:72:5d:53:e8:43:b1:f9:ee:dd:88:
f4:40:7f:cd:52:fd:1e:0c:72:90:7e:ff:84:7b:ad:
46:81:0c:95:c7:22:2b:95:f3:98:ee:21:8d:84:a8:
20:90:58:62:b8:c2:8c:1c:b8:47:ee:9e:24:bd:b9:
02:e0:59:8b:4d:ce:ae:c0:0d:4d:6b:0d:7e:c4:ae:
78:33:38:8f:b5:2c:d3:4a:ad:45:7c:fb:50:a7:be:
a6:e2:ae:b9:50:7c:b7:4d:77:1f:38:98:7b:3f:25:
fb:35:30:76:a4:87:ac:3d:88:8f:e9:2c:17:43:8d:
4c:bd:78:ae:42:94:12:96:eb:3c:b4:75:53:35:aa:
db:6e:21:15:d7:a6:b2:22:44:45:64:05:c5:1d:b9:
e7:14:6e:b2:77:32:43:b7:90:9a:38:76:f1:09:5d:
4b:99:f3:4b:36:68:50:1e:f2:da:91:80:e7:f0:ee:
18:00:1b:6d:6a:c5:f6:f5:ff:dc:d6:36:d1:f6:dc:
a2:eb:2b:b7:ac:a0:e6:c3:78:9b:58:a6:50:e0:2a:
24:f5:47:b0:6a:1c:7f:b0:c2:32:3d:65:01:93:12:
63:a4:db:8f:24:1c:99:7a:94:73:62:24:89:67:ab:
69:fd:82:ae:44:67:2d:6b:5d:17:cf:43:4f:d9:27:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:2E:29:62:C6:38:08:B3:F9:7C:A2:F8:53:F7:8A:23:9F:B8:E3
X509v3 Authority Key Identifier:
keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/bYwuKWLGOAiz-Xyi-FP3iiOfuOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.32.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cf:48:a9:d0:50:05:94:bf:a9:b3:77:a2:87:7f:0c:0c:14:
40:1a:aa:39:0d:05:74:45:55:cd:d8:4a:d9:64:cb:dd:37:50:
1b:39:15:d6:f0:9e:d7:f8:f6:40:d9:aa:28:15:14:4c:36:3e:
77:e9:81:46:df:ee:02:dc:03:77:cf:87:fa:75:f3:aa:42:83:
9c:3c:a5:06:d8:cf:f3:61:0e:8c:11:2f:85:52:04:f5:fa:d1:
42:69:50:a2:aa:fb:03:1e:2a:74:62:87:39:2f:a0:2a:04:50:
7c:3c:ae:fe:56:a2:e7:09:df:f2:a2:e7:8d:59:24:87:f4:8a:
08:14:bb:6a:d9:82:97:67:dc:d1:b6:d8:a0:06:64:9e:0c:49:
a3:b4:0c:37:38:3c:06:97:f0:fe:ea:74:88:e5:2a:25:ac:05:
d3:90:cb:ee:ba:e4:c5:34:fd:a7:fe:44:74:20:58:87:9e:5c:
89:4c:ef:70:53:9c:83:a7:19:0c:4c:86:4f:97:ae:fb:47:cc:
eb:64:9d:0f:d6:e5:0f:d6:d0:8f:43:fc:31:c2:60:64:ad:bb:
de:21:2f:b2:14:30:fe:8d:b2:37:b6:cd:f6:17:6c:71:d2:45:
f3:a7:13:3a:14:d6:45:b9:75:0b:48:7c:84:54:66:87:96:4a:
56:f6:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:05 2026 by rpki-client