Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/WbQaQMsHrswUqvIAVClqp7Bpi6o.roa
File: WbQaQMsHrswUqvIAVClqp7Bpi6o.roa (raw, json)
Hash identifier: mYP9CD1N9SNvJquihm80EZqHZqV1ycchhQflD6elG8I=
Subject key identifier: 59:B4:1A:40:CB:07:AE:CC:14:AA:F2:00:54:29:6A:A7:B0:69:8B:AA
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A00FD673DA14471150FBCAA3030C4B0E85
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/WbQaQMsHrswUqvIAVClqp7Bpi6o.roa
Signing time: Mon 17 Aug 2026 13:08:27 +0000
ROA not before: Mon 17 Aug 2026 13:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208673
IP address blocks: 178.214.99.0/24 maxlen: 24
178.214.100.0/24 maxlen: 24
178.214.101.0/24 maxlen: 24
178.214.102.0/24 maxlen: 24
178.214.103.0/24 maxlen: 24
185.53.88.0/24 maxlen: 24
185.53.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:d6:73:da:14:47:11:50:fb:ca:a3:03:0c:4b:0e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Aug 17 13:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59b41a40cb07aecc14aaf20054296aa7b0698baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:8a:70:9f:4e:0a:0f:70:83:9c:03:41:1f:
f9:68:ac:c9:11:2c:ae:b0:7e:99:85:d5:b2:ab:f5:
77:42:03:c4:11:f9:c3:e7:32:83:93:a8:55:cd:b2:
d0:7a:a1:14:75:27:19:92:44:0c:38:2c:3e:a4:a1:
6b:d8:95:b9:04:ad:75:cb:4a:04:7f:f4:15:90:37:
1c:09:c6:49:f9:38:6d:f6:0a:80:1d:40:8c:ba:2e:
54:43:b1:0d:68:54:66:75:f6:b4:23:ea:0a:1b:24:
e6:19:3d:62:7c:1d:b7:68:01:bd:54:8f:1e:27:2c:
01:69:38:99:17:7b:83:25:54:6c:7c:d7:98:96:27:
3c:f7:9b:83:99:f2:ad:65:6e:7b:56:83:0b:f2:c4:
ed:97:7c:3a:6b:ca:7f:a9:09:5c:37:75:5d:03:40:
b8:80:07:25:ff:99:b7:00:1b:a2:62:f4:e0:8c:80:
94:1d:72:64:ef:89:51:d1:e0:c8:a0:4d:d7:64:50:
a0:f6:cd:1c:c1:59:c9:ed:21:77:83:17:b9:b5:1c:
ff:33:a4:9d:73:f8:a4:e9:aa:38:39:37:d6:5b:c5:
1d:21:57:ab:67:94:99:24:59:f8:15:82:a2:71:59:
bb:ed:d8:8a:68:c2:5d:33:bf:e1:37:00:44:23:c7:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:1A:40:CB:07:AE:CC:14:AA:F2:00:54:29:6A:A7:B0:69:8B:AA
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/WbQaQMsHrswUqvIAVClqp7Bpi6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.99.0-178.214.103.255
185.53.88.0/23
Signature Algorithm: sha256WithRSAEncryption
31:1e:22:96:e3:b3:f0:97:2a:93:3f:ce:a8:9c:b9:7c:69:ef:
8c:ab:f0:b3:0f:cf:94:6e:cb:97:ff:1d:fa:34:bc:68:a0:5a:
f1:4b:d0:1d:29:69:32:09:39:db:05:0d:58:ac:42:26:63:63:
29:ad:6a:bb:2f:29:b4:d9:f2:45:04:e7:1c:25:18:8e:5d:e4:
16:0e:79:92:63:31:f9:b9:36:53:92:18:b7:90:f7:57:43:f7:
f0:89:e4:9d:df:0b:22:06:43:71:40:f5:9d:39:85:a1:77:8c:
09:36:a7:65:14:53:03:fc:4e:82:0b:86:cd:86:43:93:27:98:
ba:c3:01:3e:e4:04:26:bd:97:66:69:ad:ca:16:ec:33:09:8c:
62:a5:54:ef:9b:85:9f:f0:ce:a2:a0:1c:30:02:de:09:40:60:
0d:ed:3d:66:08:29:15:a7:f6:37:ef:ae:20:0b:75:e8:95:99:
88:78:73:7d:29:4a:24:58:fc:cb:88:3c:f6:e0:60:65:35:ff:
1f:85:0c:a3:62:6b:ae:0f:b8:a2:57:5b:2f:25:e1:92:2f:30:
8d:f8:0f:71:a5:ec:6a:de:21:9a:7d:e2:d9:8e:c2:9e:0f:21:
b2:74:79:57:88:2b:e1:2e:bd:34:b5:33:92:48:ba:e1:4f:c1:
7b:6d:9c:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:13:52 2026 by rpki-client