Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/W1_o2jcYywYPdIDwRjjua7ADCe8.roa
File: W1_o2jcYywYPdIDwRjjua7ADCe8.roa (raw, json)
Hash identifier: /W3HAGY8K/NpemVGTOjobPBaP3NbwhIa/jER44sGzpc=
Subject key identifier: 5B:5F:E8:DA:37:18:CB:06:0F:74:80:F0:46:38:EE:6B:B0:03:09:EF
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 01A15F35CD9B7B3FA18644B3E34D47E2CE84
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/W1_o2jcYywYPdIDwRjjua7ADCe8.roa
Signing time: Wed 21 Oct 2026 16:05:23 +0000
ROA not before: Wed 21 Oct 2026 16:05:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 185.42.215.0/24 maxlen: 24
185.83.184.0/24 maxlen: 24
185.83.185.0/24 maxlen: 24
185.83.186.0/24 maxlen: 24
185.83.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:35:cd:9b:7b:3f:a1:86:44:b3:e3:4d:47:e2:ce:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Oct 21 16:05:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b5fe8da3718cb060f7480f04638ee6bb00309ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:87:3d:7b:7b:20:93:c0:32:cd:49:92:61:
ed:25:49:34:43:57:de:45:51:83:9a:ad:1b:5b:91:
f8:6d:37:b5:66:93:c6:e8:1e:78:fe:34:75:72:87:
e4:74:32:c9:a2:e3:21:f6:b8:83:fb:bb:74:51:60:
e9:32:35:27:fc:1a:c7:96:ea:59:ed:79:b8:81:26:
bd:02:5c:e1:31:4f:15:16:1d:d0:54:59:13:f3:26:
91:51:7c:8d:af:47:24:be:e1:60:85:cb:5c:49:db:
a7:cd:dc:03:2d:0f:3f:7d:f1:ab:26:3c:5b:48:a1:
6a:5e:3b:59:89:bd:54:d3:1c:f5:96:46:19:50:e9:
9e:66:e3:5a:80:af:62:76:ec:29:9e:dc:34:4f:63:
2f:83:18:d2:9e:fd:77:43:19:90:6a:92:9c:28:b0:
f2:9d:01:22:0c:d0:62:65:6c:44:1a:06:1f:23:b1:
5c:63:df:dc:3a:c4:8a:c9:9b:d0:25:9e:66:8c:9a:
a0:0c:a6:48:12:6b:b4:f0:4e:6c:18:cf:95:31:3f:
76:0e:c9:40:ef:97:fd:d0:4b:98:67:15:69:e9:8f:
9d:37:44:d8:26:be:a0:58:3f:60:62:c5:b9:a0:2f:
7f:50:b6:42:e0:37:59:98:b5:92:53:f1:58:6f:b7:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:E8:DA:37:18:CB:06:0F:74:80:F0:46:38:EE:6B:B0:03:09:EF
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/W1_o2jcYywYPdIDwRjjua7ADCe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.215.0/24
185.83.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:a9:8c:f9:94:4d:71:0c:e7:a3:9e:c5:20:d3:15:28:07:90:
45:a2:e1:da:a9:da:89:ad:8d:b4:36:ba:47:3e:44:e6:1c:b0:
58:be:0c:39:02:0f:13:f2:d1:75:80:01:1b:cd:0b:33:64:c2:
1b:6a:89:c1:f1:91:f1:76:ae:b7:bc:7f:8f:5d:f5:95:f8:17:
17:fc:de:6c:71:c8:db:c7:98:fb:19:df:0d:20:c3:a9:04:26:
2a:8f:81:be:d1:e2:61:5a:f5:9d:aa:e3:d2:f6:bd:55:db:65:
20:fe:a3:20:a0:54:ca:7f:7f:dc:c1:7f:74:77:f3:88:dc:53:
62:24:3c:5c:77:0e:e6:4a:3c:c5:3e:36:37:25:a4:b6:26:72:
de:11:ed:df:a4:57:af:cf:41:11:df:c9:b0:9d:5c:a6:88:96:
fd:0e:cb:8e:87:fb:4c:36:3f:48:c9:20:2a:a5:5e:e8:90:46:
5e:6b:9b:0d:d3:86:16:91:cb:af:eb:42:45:90:4c:09:a0:86:
ed:cb:5f:f4:29:46:dd:b9:e6:bb:7b:99:d0:69:90:fd:96:05:
2b:e7:a6:e4:6e:fe:54:26:55:ce:99:d6:26:39:15:da:4e:7e:
43:e9:06:90:45:27:ec:65:ed:6f:ed:b2:26:0d:d1:b6:4f:e0:
06:53:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:08:54 2026 by rpki-client