Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wYz1NbFR--TQu-FmAhDzEC4IQak.roa
File: wYz1NbFR--TQu-FmAhDzEC4IQak.roa (raw, json)
Hash identifier: f4mp0BgQPGqueCeVzPm2S/WHWsLJnLdI+9Ytbkfjx0E=
Subject key identifier: C1:8C:F5:35:B1:51:FB:E4:D0:BB:E1:66:02:10:F3:10:2E:08:41:A9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019CC46B3C0D41242F84B1EBBF192366C840
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wYz1NbFR--TQu-FmAhDzEC4IQak.roa
Signing time: Fri 06 Mar 2026 18:31:27 +0000
ROA not before: Fri 06 Mar 2026 18:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210616
IP address blocks: 93.171.184.0/22 maxlen: 24
146.120.52.0/22 maxlen: 24
146.120.116.0/23 maxlen: 24
146.158.88.0/22 maxlen: 24
146.158.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:6b:3c:0d:41:24:2f:84:b1:eb:bf:19:23:66:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 6 18:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c18cf535b151fbe4d0bbe1660210f3102e0841a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:32:3f:1b:0e:21:7e:4b:15:63:f3:66:24:
a4:cc:49:ab:a8:c8:05:e0:d2:bc:5c:5e:1e:51:52:
b8:be:ae:93:2b:46:5c:c0:39:43:21:08:7e:12:6e:
69:d0:d8:b1:dc:f9:2f:73:97:fc:4f:51:7e:d8:d6:
4b:60:1c:a6:7c:16:28:10:d8:ce:3e:04:ee:aa:18:
4a:da:2a:4d:bb:58:e8:62:00:55:f8:b7:07:f3:7c:
fd:08:df:5c:f5:ed:98:0e:21:5a:f7:5e:09:d8:4f:
81:43:b7:30:a7:7e:61:00:55:d6:ca:32:b2:7d:85:
7e:b1:29:81:39:7d:cd:10:8a:57:ba:c5:64:94:46:
41:d5:b1:3f:6a:61:4a:bb:16:a7:8e:c5:07:80:fc:
99:de:83:f6:7e:f0:be:53:92:20:ac:35:a4:f4:6d:
35:48:c7:ee:68:3e:c9:c7:79:7c:26:26:03:f2:4e:
17:f5:d8:6b:42:9f:0e:2f:0d:36:eb:7f:35:d9:95:
4e:6c:c9:a5:7b:9f:08:08:ae:a7:a6:99:72:22:25:
73:03:d3:19:5b:e7:51:bc:fe:81:f5:9c:d7:24:3e:
d7:e0:f0:6b:8c:a8:34:49:73:0b:53:14:72:f2:2f:
85:25:32:6e:d5:5f:3c:94:4f:25:92:36:fe:d8:80:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8C:F5:35:B1:51:FB:E4:D0:BB:E1:66:02:10:F3:10:2E:08:41:A9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wYz1NbFR--TQu-FmAhDzEC4IQak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.184.0/22
146.120.52.0/22
146.120.116.0/23
146.158.88.0/22
146.158.96.0/19
Signature Algorithm: sha256WithRSAEncryption
15:96:8e:8a:e2:44:bb:69:1a:75:54:26:a2:38:d7:e6:17:36:
e9:c9:a3:68:20:a8:c2:73:da:22:07:50:2f:01:02:ec:fd:8a:
c0:12:04:be:97:6a:66:bd:29:2b:e7:82:2d:11:08:fa:28:dd:
2f:eb:5f:29:27:6b:0d:6f:91:1e:f0:9d:f3:c5:f8:11:bc:ca:
51:3c:dc:fd:a4:c2:dc:24:23:1c:0a:d5:53:09:5a:15:a6:dd:
61:26:6e:d4:d2:c0:ab:9c:02:af:50:85:53:73:45:f0:89:30:
45:10:40:65:50:73:d1:fd:19:a9:cd:63:ab:b1:82:f9:b4:79:
55:3e:3a:8d:69:36:da:0f:ac:38:25:89:54:0c:93:52:62:bd:
07:c2:61:5b:10:7a:ee:87:86:80:b1:59:74:02:60:43:25:18:
41:70:7b:58:a9:81:65:84:cb:bf:75:af:01:d6:02:d2:64:17:
dd:68:94:6d:8b:13:2f:dd:7f:a3:3d:a0:b0:41:10:56:36:eb:
5b:e4:45:c1:24:44:8c:d0:02:ca:bf:69:ee:f7:75:95:24:c1:
0e:35:9f:6a:ff:bf:8c:cf:23:9c:cc:e0:2e:a6:42:b3:e3:17:
63:77:02:1a:f1:d9:7f:02:03:30:e7:94:0b:fb:a1:bb:c6:ea:
3e:07:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:46:47 2026 by rpki-client