Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/WbwwutC6DmoQCpS_cnHm2C8PgEQ.roa
File: WbwwutC6DmoQCpS_cnHm2C8PgEQ.roa (raw, json)
Hash identifier: xYQzg16giCNV2eF02/LXWh87czuHOXsA41TWL+xRxDQ=
Subject key identifier: 59:BC:30:BA:D0:BA:0E:6A:10:0A:94:BF:72:71:E6:D8:2F:0F:80:44
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A0E862F57988838E33C6D914BB1E19D08A
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/WbwwutC6DmoQCpS_cnHm2C8PgEQ.roa
Signing time: Mon 28 Sep 2026 14:19:54 +0000
ROA not before: Mon 28 Sep 2026 14:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 194.116.144.0/24 maxlen: 24
194.116.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:62:f5:79:88:83:8e:33:c6:d9:14:bb:1e:19:d0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Sep 28 14:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59bc30bad0ba0e6a100a94bf7271e6d82f0f8044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:1d:97:3b:d1:8e:97:00:e3:de:4f:0e:45:
5b:66:78:35:5a:b0:be:d3:17:dd:d0:23:35:04:18:
d7:6d:c5:d5:28:71:e2:6e:59:3f:d5:3f:bb:83:8e:
aa:6a:8c:93:a0:c8:9f:2b:b0:23:e3:4b:21:c5:65:
34:61:84:50:38:f7:27:a5:e4:a5:36:8c:63:cf:b8:
64:d0:48:81:86:c2:f8:51:65:ec:c2:24:0f:2b:9e:
39:76:59:22:8b:d0:9a:60:70:c6:28:a7:5b:1d:06:
d6:35:9c:2e:17:c6:39:4b:81:74:27:78:83:7c:be:
1c:c0:75:79:99:e3:ff:14:f3:39:b9:17:d7:ef:d2:
89:bc:33:39:27:ae:80:0b:dc:ad:6a:61:45:27:38:
5d:1a:a5:bd:8f:9f:22:4b:ea:48:d8:b3:ca:b4:e3:
1b:38:e6:8b:8d:1d:8c:85:c1:79:01:42:5c:1b:2c:
fc:77:a3:96:17:38:45:d8:3c:8f:bc:27:36:47:aa:
71:20:ea:5e:ca:17:b2:19:76:88:10:6a:76:a2:4a:
50:30:b0:56:03:a8:6e:4c:b0:b6:c8:dd:a5:66:63:
40:06:a6:ff:80:e4:22:b7:82:17:de:60:cc:45:f4:
33:b5:49:22:75:b4:20:ac:d7:8a:28:67:36:58:ef:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BC:30:BA:D0:BA:0E:6A:10:0A:94:BF:72:71:E6:D8:2F:0F:80:44
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/WbwwutC6DmoQCpS_cnHm2C8PgEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.144.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:4c:21:b2:3a:af:f9:60:e9:58:ae:ce:f2:38:ff:c7:3a:72:
9c:35:b8:54:eb:f6:6a:2e:fd:30:17:49:f2:82:6a:68:56:da:
84:51:a3:cf:b5:ba:ba:7f:51:fe:15:47:e2:c8:c6:c7:64:71:
80:75:4c:ec:70:1d:f0:24:30:40:33:4c:3b:cc:a6:26:8b:6a:
ee:8c:0d:9c:b7:9c:c9:92:f7:84:47:a6:54:d7:f7:45:c9:5e:
63:1b:eb:55:1d:d5:2a:f9:9d:a8:a8:61:a6:18:40:0d:67:f7:
b2:20:2c:6a:54:f6:47:f1:37:41:79:b0:dc:f0:a4:8f:70:20:
08:9f:13:b1:8b:d6:f4:e4:a0:91:4f:13:6b:29:d5:a7:b1:a6:
80:d7:af:be:bb:c7:35:0a:e2:c2:a2:77:e0:ba:2a:dd:6c:17:
20:b1:81:8a:5c:59:82:08:cb:13:52:b8:50:66:7f:03:38:63:
b7:db:d9:aa:97:3d:e6:80:67:2a:6f:82:a4:76:f6:26:1b:84:
3a:10:94:3c:bc:c5:2d:d7:93:0c:12:cd:3b:d3:f5:d6:97:e2:
ef:27:c2:6b:5d:aa:5b:57:80:d6:7e:9e:d3:2f:8c:eb:53:bf:
70:ea:15:02:ae:f9:a5:81:82:62:40:5a:32:27:1d:fb:bd:e4:
d3:b9:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:09 2026 by rpki-client