Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/WVBHWhF2YnsBiDKywLiLep0rjBY.roa
File: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (raw, json)
Hash identifier: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=
Subject key identifier: 59:50:47:5A:11:76:62:7B:01:88:32:B2:C0:B8:8B:7A:9D:2B:8C:16
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019E8EF6F7C45A9CB82135D6E0811069040A
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/WVBHWhF2YnsBiDKywLiLep0rjBY.roa
Signing time: Wed 03 Jun 2026 19:30:10 +0000
ROA not before: Wed 03 Jun 2026 19:30:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216106
IP address blocks: 82.206.20.0/23 maxlen: 24
82.206.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:f6:f7:c4:5a:9c:b8:21:35:d6:e0:81:10:69:04:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jun 3 19:30:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5950475a1176627b018832b2c0b88b7a9d2b8c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:0b:d3:03:53:ab:e1:f9:24:cf:42:51:7b:
ee:2f:35:9a:67:0c:39:1e:b8:b1:20:f8:ae:ff:30:
3e:42:c2:fd:ad:63:c2:9e:b8:b6:ab:68:1c:5b:8d:
cf:41:62:b4:c8:e1:c9:b7:65:56:c4:b4:06:ed:ba:
f6:5f:e4:8f:59:ff:d9:d2:2f:46:94:de:e4:83:57:
e0:99:33:22:f4:64:f8:ed:69:a1:e2:d5:35:2d:f2:
32:6d:5c:e6:f1:8c:b5:03:76:22:7d:c8:a4:c4:03:
bc:80:62:8a:68:1a:87:8e:72:d7:0d:3a:40:7f:4a:
a6:ca:5b:06:5d:cb:30:0f:ef:f3:8b:aa:dd:9d:e1:
6b:0c:14:a5:ea:a6:59:93:04:64:d7:14:7f:81:1e:
85:85:c2:dc:1a:2d:b5:34:74:66:37:2e:58:92:57:
e9:ef:30:10:2e:45:b3:f0:67:20:16:0f:33:a3:7c:
d5:cd:29:52:38:f7:62:d4:9f:ab:f4:72:4f:30:a8:
c8:4d:22:e1:20:ce:88:c7:36:75:07:07:8e:ba:2c:
f8:6e:ab:14:bb:a9:3b:46:3d:3f:45:ca:31:01:69:
8a:5b:f7:60:e9:76:68:dd:ac:5d:bd:26:9a:b6:4e:
76:b6:58:7b:b2:bd:d4:76:37:bd:1b:0e:35:56:3c:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:47:5A:11:76:62:7B:01:88:32:B2:C0:B8:8B:7A:9D:2B:8C:16
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/WVBHWhF2YnsBiDKywLiLep0rjBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.20.0/22
Signature Algorithm: sha256WithRSAEncryption
02:80:f2:91:ed:bd:eb:f7:97:96:9b:1b:10:70:a4:b0:e7:ae:
a9:1a:70:2e:0f:55:70:34:a9:26:7d:c5:b3:18:46:84:1a:a2:
0b:e9:74:c4:66:27:f4:2c:91:2c:79:15:12:cd:23:fe:f9:b1:
ef:a8:c6:ce:8c:9f:d0:88:44:ab:49:7c:cd:3e:fc:24:7b:40:
df:e1:94:cf:07:fd:75:e0:46:fd:82:17:d5:99:b4:36:6a:49:
e8:5e:16:ee:79:85:f5:83:b1:c9:b3:9d:bb:ff:b4:a1:32:ea:
b0:05:02:91:1e:3f:0e:13:43:7d:1f:21:7e:80:37:1f:19:bc:
00:7a:31:ab:2a:a0:88:38:31:33:a5:10:f4:5e:3c:b0:06:4d:
9a:b1:f7:fe:93:7d:ab:40:0d:dc:8c:6a:01:c2:c8:c9:4c:74:
b9:40:fb:a5:6a:7c:50:29:34:2e:f1:46:f8:e8:e6:1a:97:26:
5e:46:d3:cb:d6:cb:de:a3:05:29:38:d1:bc:e0:b1:21:da:8e:
11:61:bf:ca:96:20:3d:e6:a7:8e:19:6c:73:6b:62:ed:42:c4:
a7:43:fd:c0:83:a6:6e:fd:c0:16:0f:e4:d0:51:41:cf:fd:b9:
24:0f:02:10:8a:49:35:10:40:9e:e9:d1:f3:81:2c:ee:46:14:
ab:0d:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:31 2026 by rpki-client