Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/WNWghHX6A_--K_9pGoPdOa9nJP0.roa
File: WNWghHX6A_--K_9pGoPdOa9nJP0.roa (raw, json)
Hash identifier: fxFsmGn7IXBiC3Spc2QXBEY5TjOgzlGq+3Gi493dDJw=
Subject key identifier: 58:D5:A0:84:75:FA:03:FF:BE:2B:FF:69:1A:83:DD:39:AF:67:24:FD
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 019DCE0A2D14976C788CD04BD0AEABE31BCE
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/WNWghHX6A_--K_9pGoPdOa9nJP0.roa
Signing time: Mon 27 Apr 2026 08:24:26 +0000
ROA not before: Mon 27 Apr 2026 08:24:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16302
IP address blocks: 193.105.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:0a:2d:14:97:6c:78:8c:d0:4b:d0:ae:ab:e3:1b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Apr 27 08:24:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58d5a08475fa03ffbe2bff691a83dd39af6724fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:ba:34:da:a0:c2:7f:77:00:c5:e1:b2:27:
9b:e2:18:1f:57:7c:b6:63:2e:8e:7b:6b:fb:51:21:
7f:01:45:59:3d:71:3b:44:b1:d5:61:3b:35:5c:b6:
79:3d:dc:f5:85:f9:07:49:48:c0:e2:fc:a3:5a:0b:
c0:18:00:42:43:63:31:7d:0d:f8:b8:85:05:32:0c:
d4:4d:5c:8d:e8:8a:e8:e5:41:a8:d8:00:04:96:c1:
3f:d7:21:7a:24:b0:42:50:37:58:68:23:be:c9:c4:
68:91:b3:79:cb:b1:35:cc:38:8f:b0:d7:0d:c1:7f:
8c:ad:0d:1c:42:d8:2a:70:e1:a2:2e:5a:62:06:3c:
31:35:57:b5:3b:c4:d3:5d:25:e0:79:90:84:f6:18:
a3:b3:e0:e3:b4:91:28:76:a0:fc:95:18:01:02:dc:
d5:c7:7b:12:b4:b8:0d:15:df:6f:9f:07:9a:74:42:
e7:ed:64:71:26:8b:2a:ab:af:9b:67:94:2e:f8:8a:
71:b5:85:b0:4b:8d:f3:d7:50:91:ee:05:6e:0e:46:
a3:4f:64:67:a4:ac:f8:d3:2e:81:08:1b:2b:dc:e4:
e1:93:9c:c6:d6:0b:76:9f:6e:59:79:c9:47:f2:c9:
6e:ab:d2:67:62:27:b4:f9:77:95:0c:61:4a:63:4f:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D5:A0:84:75:FA:03:FF:BE:2B:FF:69:1A:83:DD:39:AF:67:24:FD
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/WNWghHX6A_--K_9pGoPdOa9nJP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d0:94:c8:4b:81:f3:74:6f:75:e6:3f:45:20:23:61:75:4a:
c2:e1:b0:28:55:81:5d:f1:01:c3:9b:b7:e5:e5:ce:0f:7b:7b:
4a:5c:bf:96:b4:10:5f:b7:4a:d2:de:c1:8e:c1:c5:ee:56:af:
47:49:f4:1d:b7:fa:79:42:bd:b4:a9:65:4f:4a:78:f5:d7:9b:
77:32:c9:31:9e:24:f3:c4:9f:20:c0:03:88:4e:e2:9e:ad:80:
51:e7:7e:ae:87:4f:00:a9:49:89:00:1c:e4:cb:de:a6:84:4c:
8d:fe:d5:4d:35:51:0c:42:d0:96:f5:d3:ad:4d:80:75:1c:7d:
93:50:b8:2e:0c:44:f2:67:a4:d3:c4:4f:a2:7b:54:09:8e:2c:
e4:01:a1:d5:f4:d3:9b:17:b8:3d:89:70:f1:be:ec:7a:f3:01:
72:59:f3:9b:58:55:b1:05:6b:bf:f8:4b:c7:70:be:5b:e3:a9:
9a:88:53:ad:f5:ed:5a:da:2b:17:e0:0e:a6:7e:af:a5:87:c9:
07:29:7f:99:88:77:97:df:e1:8f:5c:79:d5:11:2d:4b:db:3d:
6a:ac:ae:8c:55:00:41:fe:61:9e:8a:4b:8c:17:98:16:18:0d:
fb:4f:59:c1:5f:a1:40:bf:b6:52:7f:8c:1b:d3:34:2d:1d:ce:
ab:14:8a:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3OCi0Ul2x4jNBL0K6r4xvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDUwODU5OTVmM2NiN2M3ZGJkMDVlNDE3NzRkYTYyNGIx
YWYyZTkwHhcNMjYwNDI3MDgyNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGQ1YTA4NDc1ZmEwM2ZmYmUyYmZmNjkxYTgzZGQzOWFmNjcyNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AS6NNqgwn93AMXhsieb4hgfV3y2
Yy6Oe2v7USF/AUVZPXE7RLHVYTs1XLZ5Pdz1hfkHSUjA4vyjWgvAGABCQ2MxfQ34
uIUFMgzUTVyN6Iro5UGo2AAElsE/1yF6JLBCUDdYaCO+ycRokbN5y7E1zDiPsNcN
wX+MrQ0cQtgqcOGiLlpiBjwxNVe1O8TTXSXgeZCE9hijs+DjtJEodqD8lRgBAtzV
x3sStLgNFd9vnweadELn7WRxJosqq6+bZ5Qu+IpxtYWwS43z11CR7gVuDkajT2Rn
pKz40y6BCBsr3OThk5zG1gt2n25ZeclH8sluq9JnYie0+XeVDGFKY09huQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFjVoIR1+gP/viv/aRqD3TmvZyT9MB8GA1UdIwQY
MBaAFLlFCFmV88t8fb0F5Bd02mJLGvLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVVSVdaWHp5M3g5dlFYa0YzVGFZa3NhOHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNTdhNjktZTY4ZS00MDA0LTg2MjUt
OTE3N2IxNGVlNjMzLzEvV05XZ2hIWDZBXy0tS185cEdvUGRPYTluSlAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNTdhNjktZTY4ZS00MDA0LTg2MjUtOTE3N2IxNGVlNjMz
LzEvdVVVSVdaWHp5M3g5dlFYa0YzVGFZa3NhOHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWlgMA0G
CSqGSIb3DQEBCwUAA4IBAQAs0JTIS4HzdG915j9FICNhdUrC4bAoVYFd8QHDm7fl
5c4Pe3tKXL+WtBBft0rS3sGOwcXuVq9HSfQdt/p5Qr20qWVPSnj115t3MskxniTz
xJ8gwAOITuKerYBR536uh08AqUmJABzky96mhEyN/tVNNVEMQtCW9dOtTYB1HH2T
ULguDETyZ6TTxE+ie1QJjizkAaHV9NObF7g9iXDxvux68wFyWfObWFWxBWu/+EvH
cL5b46maiFOt9e1a2isX4A6mfq+lh8kHKX+ZiHeX3+GPXHnVES1L2z1qrK6MVQBB
/mGeikuMF5gWGA37T1nBX6FAv7ZSf4wb0zQtHc6rFIpy
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:16 2026 by rpki-client