Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/WAHAZBZUG3G3M1Fraob2sMXNG6Q.roa
File: WAHAZBZUG3G3M1Fraob2sMXNG6Q.roa (raw, json)
Hash identifier: M4MzIOFckZBP8LUTotYHf+/gnIEip0Vye9fvkDDwlpM=
Subject key identifier: 58:01:C0:64:16:54:1B:71:B7:33:51:6B:6A:86:F6:B0:C5:CD:1B:A4
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 01A10D06DF370B83DB0639A1BB15104A111B
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/WAHAZBZUG3G3M1Fraob2sMXNG6Q.roa
Signing time: Mon 05 Oct 2026 17:05:16 +0000
ROA not before: Mon 05 Oct 2026 17:05:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42724
IP address blocks: 185.235.77.0/24 maxlen: 24
194.169.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:06:df:37:0b:83:db:06:39:a1:bb:15:10:4a:11:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Oct 5 17:05:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5801c06416541b71b733516b6a86f6b0c5cd1ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:0d:5e:eb:2b:30:ef:5a:fd:a5:84:41:b7:
f8:7b:d7:0d:f0:7c:c3:4e:96:fb:8a:4f:ca:08:31:
b4:da:f3:91:4f:d4:89:ff:13:b2:d5:ce:df:a1:6e:
a2:e7:c2:86:8c:f6:d8:c5:8e:f1:ae:d9:50:8d:cf:
7b:f0:d3:e8:bd:44:7d:aa:cf:3a:ee:11:a3:a2:f4:
b0:e9:81:eb:26:a1:d1:0f:9d:c4:1c:9b:fb:14:77:
11:ce:b1:11:22:b6:49:f7:24:04:3c:83:0f:eb:d7:
49:a4:ff:8a:00:c7:24:62:36:85:4c:8b:4d:12:ac:
27:17:51:18:30:29:f0:6d:c0:4c:f7:1d:2e:9e:06:
3e:77:d0:44:c4:77:de:bd:0a:68:49:65:a6:b9:2f:
f5:af:ef:42:ef:8f:a8:5f:83:e2:fa:11:ce:0b:02:
61:a0:7f:19:d8:5e:a2:ef:68:cf:ce:d9:cd:69:cd:
6c:8c:58:de:06:81:ce:14:71:5d:5f:10:83:ca:98:
e4:9b:ea:14:ae:7e:fd:5a:94:98:10:08:0b:33:c5:
b1:90:48:e9:a9:77:aa:40:e2:24:19:b2:6e:e6:df:
c0:4d:14:2e:b5:c2:f9:13:56:ca:46:d8:2b:a8:20:
45:ec:c4:79:f2:ac:c3:f8:09:6b:d9:86:90:8a:03:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:C0:64:16:54:1B:71:B7:33:51:6B:6A:86:F6:B0:C5:CD:1B:A4
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/WAHAZBZUG3G3M1Fraob2sMXNG6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.77.0/24
194.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:3d:f0:19:4b:9d:70:af:c2:68:1e:17:3f:4d:6f:42:a0:6f:
bc:19:f3:ce:32:e6:95:28:66:e2:77:a0:9c:88:4e:d7:fc:3d:
12:35:e9:61:3b:37:44:88:95:69:b7:44:cf:a2:21:6d:10:11:
d5:f2:c8:6c:36:a6:2c:b3:c6:2c:2a:5b:49:2a:b6:3d:ac:67:
9e:2b:bb:06:78:42:85:97:f8:53:74:d2:95:18:7c:10:06:07:
86:6b:f6:3b:08:48:2e:f3:b5:79:7c:53:00:5e:23:92:78:f9:
8b:b6:aa:9d:cf:50:5e:dd:6e:55:cb:a3:52:cc:57:9a:1f:57:
c7:1e:e8:50:13:8f:6e:ad:84:99:c1:33:cb:ce:9c:51:b0:4d:
b4:46:c6:64:09:ae:7a:a3:65:d4:a9:9e:37:7c:49:05:23:05:
9f:e2:04:cb:6d:31:9f:a2:94:0a:88:fb:33:c2:d4:76:33:15:
e8:3a:e4:6e:72:23:6c:97:95:6c:16:ff:e0:b8:67:10:a5:99:
df:53:87:74:5d:53:33:95:72:7c:89:7b:15:3a:22:39:ac:b7:
b8:c0:5f:ff:43:da:91:cc:e5:ba:06:95:29:d6:15:89:ee:75:
06:f7:62:48:a4:89:7e:88:d4:1b:fd:40:f5:ff:aa:f7:e6:26:
56:f0:bd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:28 2026 by rpki-client