Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/WR-L1F3QM0wsQgyDImuXxlRoCDo.roa
File: WR-L1F3QM0wsQgyDImuXxlRoCDo.roa (raw, json)
Hash identifier: IHbgb1ma7MkT5FXl6QhQC1/9vSdkNkwBhS8js+Uq138=
Subject key identifier: 59:1F:8B:D4:5D:D0:33:4C:2C:42:0C:83:22:6B:97:C6:54:68:08:3A
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 01A023FE5D72E3DAA1C33B154D5ED8A1D8F1
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/WR-L1F3QM0wsQgyDImuXxlRoCDo.roa
Signing time: Fri 21 Aug 2026 11:04:27 +0000
ROA not before: Fri 21 Aug 2026 11:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206119
IP address blocks: 80.71.145.0/24 maxlen: 24
185.78.87.0/24 maxlen: 24
185.174.70.0/24 maxlen: 24
185.174.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:fe:5d:72:e3:da:a1:c3:3b:15:4d:5e:d8:a1:d8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Aug 21 11:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=591f8bd45dd0334c2c420c83226b97c65468083a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:20:74:2f:65:9a:3e:e8:89:9a:30:7d:4f:
47:97:8c:79:e5:4a:82:61:7a:1e:01:09:6d:d2:b6:
49:79:7c:c1:44:64:d9:e2:19:84:86:f7:cc:0f:c9:
c3:ef:16:e6:2b:7a:6f:5d:8a:c7:0e:50:85:8c:f4:
36:dd:cb:75:ca:e3:c3:70:79:57:1c:49:c1:3d:1c:
19:e8:ae:25:5d:f5:4d:71:11:a9:90:25:58:3d:d2:
ed:35:e1:2a:02:5d:f4:6a:99:9c:34:51:9e:81:41:
16:b2:37:db:84:48:0f:43:3e:8d:8b:32:0b:20:3c:
dc:9f:e0:68:6a:76:d0:c1:31:6c:71:a0:33:ec:bd:
d4:10:c2:25:85:4c:1b:11:ff:e8:0f:28:de:ea:cc:
42:e9:37:d9:d3:5c:3b:46:f8:8a:a1:a9:ce:83:66:
8a:92:dd:06:6e:0a:c1:78:07:b9:54:e5:3a:ec:36:
b4:de:7d:16:b5:57:76:a8:18:86:16:08:b7:64:4e:
ed:f7:12:7e:c4:09:be:92:5e:6c:e1:26:7a:48:41:
1a:8f:2a:7e:5c:ca:87:c4:45:f4:11:1d:62:fe:35:
2e:f3:f5:27:fa:bd:77:5a:b5:db:dc:52:c9:e4:3a:
e2:51:9f:34:31:30:c7:0d:1b:5e:86:a6:b3:d8:a4:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1F:8B:D4:5D:D0:33:4C:2C:42:0C:83:22:6B:97:C6:54:68:08:3A
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/WR-L1F3QM0wsQgyDImuXxlRoCDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.145.0/24
185.78.87.0/24
185.174.70.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:cb:72:fc:9d:3a:ee:b6:dc:fc:da:da:0d:e9:40:2f:1b:45:
9e:f8:c9:77:34:87:dc:0a:ed:b9:2a:e1:6b:15:ea:d3:80:83:
ce:e0:eb:f4:28:2e:20:c6:52:93:0f:91:d5:26:ca:e1:12:59:
e6:4c:d3:6c:67:4a:ae:fc:98:b1:65:f2:65:d2:7e:c4:3e:6d:
d9:a6:3f:5d:b1:18:eb:1b:21:ce:5f:a7:62:d2:10:e7:9c:96:
04:2c:43:6c:cb:f9:cb:e6:f1:75:9d:64:19:07:54:f6:5a:2c:
c9:a3:57:bb:f7:58:33:5c:d2:3b:24:9b:1a:17:cd:c7:7c:61:
e2:94:23:8d:6f:b4:39:19:2a:7a:dc:f3:a5:c4:26:33:b2:2e:
5f:21:ab:f4:fa:36:f5:d0:26:31:ce:ad:66:f7:db:5e:54:3d:
31:54:4d:40:c7:76:00:15:67:b1:7c:c4:7b:bc:4c:f8:34:0a:
53:31:e6:25:69:c4:b7:28:c8:c6:e8:85:36:87:6f:3c:f2:20:
ac:89:92:b3:16:03:40:9e:6c:8f:c1:c5:74:bc:67:8f:01:2b:
b3:2c:a3:19:8d:45:03:b9:88:b6:2b:59:1a:d8:85:be:cc:3a:
c3:cd:80:48:7d:8e:12:d1:61:47:fa:df:4a:6c:c4:a1:2e:07:
ff:75:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:09:28 2026 by rpki-client