Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wBYA1Z8LYtnKqSwnKA8hwrolIJc.roa
File: wBYA1Z8LYtnKqSwnKA8hwrolIJc.roa (raw, json)
Hash identifier: TDDcS+/ukQqSqdHjq0a0vf8SB/v2/c/ZPb4Efbz0S7w=
Subject key identifier: C0:16:00:D5:9F:0B:62:D9:CA:A9:2C:27:28:0F:21:C2:BA:25:20:97
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FCCFD27618FDA3CA010CAF2B354F0F7FC
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wBYA1Z8LYtnKqSwnKA8hwrolIJc.roa
Signing time: Tue 04 Aug 2026 13:36:10 +0000
ROA not before: Tue 04 Aug 2026 13:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212598
IP address blocks: 185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:fd:27:61:8f:da:3c:a0:10:ca:f2:b3:54:f0:f7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 4 13:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c01600d59f0b62d9caa92c27280f21c2ba252097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:96:ae:32:56:6c:64:43:88:14:27:65:c7:
df:b5:e6:03:9d:6a:e0:dc:23:62:a6:4a:0c:fa:9a:
e6:34:4b:15:35:63:43:62:0d:0d:0d:5c:5e:68:06:
25:a3:c9:28:8e:13:5d:ab:79:a8:4c:c3:dc:28:31:
55:75:51:ac:59:43:68:19:d4:71:ed:21:ec:1c:43:
7e:9a:18:b8:d5:35:f6:30:88:32:7c:1c:e4:12:c0:
22:0a:0f:fe:a4:d3:c2:0b:d9:35:3a:7a:57:76:81:
46:b6:93:c4:67:6c:48:a1:37:6e:0e:44:f5:ee:16:
e7:78:dd:df:b2:5b:37:6f:62:24:36:4d:43:44:3a:
58:6e:2f:b1:39:a4:aa:3c:53:8b:2b:2c:ae:e6:56:
ab:c3:96:7b:fd:2d:aa:1a:81:19:62:cd:11:44:fd:
10:73:55:7f:5b:63:0d:00:68:01:ed:d1:67:e8:5d:
5e:17:ee:12:8d:8b:4b:08:42:2a:02:58:4b:99:d1:
8b:5b:24:80:6e:e5:e7:6f:5d:bd:ed:52:0f:99:dd:
4a:6a:35:51:d5:9e:01:1c:95:2f:41:98:1c:75:f3:
c3:ac:9b:f7:f3:fe:f9:5f:7e:b1:54:47:63:0d:99:
9c:9d:e1:74:7d:da:0c:f9:4a:d5:0c:26:17:82:5e:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:00:D5:9F:0B:62:D9:CA:A9:2C:27:28:0F:21:C2:BA:25:20:97
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wBYA1Z8LYtnKqSwnKA8hwrolIJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.29.0/24
193.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:52:01:b0:0f:ed:3c:11:0e:b4:78:cb:87:90:bf:da:f5:cb:
bc:ab:16:3d:5b:07:8f:1b:7f:ca:f8:2b:8b:17:03:36:f6:a0:
64:2f:14:9d:85:f3:cd:7f:36:2a:e3:f9:13:f5:c9:f6:17:1e:
21:b6:6c:21:97:fa:1a:93:e1:79:91:b1:1e:a7:61:c2:86:66:
c0:be:24:2f:68:3b:2b:6b:e8:f3:0b:d3:41:f6:c7:b4:fb:60:
6d:6a:c2:61:d8:9b:c6:27:f6:29:18:1b:7d:b7:a6:d5:c5:83:
62:3a:7e:c3:97:6f:88:37:8e:fe:bb:9c:60:de:f6:82:ad:61:
4c:91:66:0e:63:a6:2a:1a:3f:c9:93:7f:61:b0:75:3b:2c:e8:
e3:ab:68:0d:08:d6:a8:e3:53:1f:4a:b7:29:a6:69:95:ab:5d:
71:55:31:96:4a:e4:e7:d9:01:08:7d:3c:94:1f:14:f3:58:69:
02:8a:3c:ae:60:67:1b:b3:a7:a1:85:55:e2:91:eb:0a:f6:c8:
82:1d:de:ce:23:41:69:36:0f:5e:98:b4:8e:75:bc:f6:78:02:
f5:fe:f0:5c:91:62:66:d1:08:6e:41:45:75:38:89:6a:ac:ff:
85:97:8e:fc:62:1c:b3:f6:ec:0a:b5:e3:0a:80:f6:b3:5f:3c:
6e:e5:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:40 2026 by rpki-client