Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/WZuSUYbp0OtE0I4rt7PbuIHLEec.roa
File: WZuSUYbp0OtE0I4rt7PbuIHLEec.roa (raw, json)
Hash identifier: bFY0qnQBrCI7uwqGl9oE37lcD+QJzgBvu6022qrYRnQ=
Subject key identifier: 59:9B:92:51:86:E9:D0:EB:44:D0:8E:2B:B7:B3:DB:B8:81:CB:11:E7
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 01A060F3B82EFD9D6364A97E0C45AB1A74BF
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/WZuSUYbp0OtE0I4rt7PbuIHLEec.roa
Signing time: Wed 02 Sep 2026 07:09:40 +0000
ROA not before: Wed 02 Sep 2026 07:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199803
IP address blocks: 188.92.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:f3:b8:2e:fd:9d:63:64:a9:7e:0c:45:ab:1a:74:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Sep 2 07:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=599b925186e9d0eb44d08e2bb7b3dbb881cb11e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:4a:7c:71:d9:a9:d5:65:18:6e:3c:cf:72:
17:e6:a8:ac:d6:20:87:5f:65:bd:3b:11:76:f7:db:
66:48:8f:1e:18:da:0b:6b:bf:2f:4a:3f:02:42:b6:
16:79:6a:57:2a:21:0c:46:41:93:93:a8:b0:7a:10:
e8:2b:5f:87:1b:7e:dc:36:a5:bd:c3:6f:f2:47:48:
0b:75:40:8f:3e:e7:b4:1f:57:27:8d:17:5f:64:78:
1b:04:27:82:a0:c5:97:2e:79:fc:5c:24:10:bc:ab:
bb:6b:2c:7d:61:d8:04:42:fe:03:08:c9:c0:55:86:
a4:27:b4:5d:b4:78:49:1b:94:1d:aa:24:b2:2c:0a:
12:91:de:93:1c:dd:e7:0b:56:a4:51:ac:90:f5:7f:
c0:56:92:65:2b:51:15:e7:4c:c3:95:86:8f:86:43:
fe:1d:2d:84:17:20:ef:49:a9:d0:74:2e:3e:6d:34:
c0:8c:9c:fa:36:55:fa:cb:10:c6:2d:5d:58:fd:fd:
68:b7:cf:6f:ad:68:22:5f:50:9f:72:2a:6e:9b:6c:
08:5f:45:15:23:b1:f0:22:a1:c1:1e:0b:be:26:20:
84:e5:26:0c:cd:ac:4b:23:ce:cd:b7:d1:b8:13:ec:
fe:64:76:68:dc:98:9d:03:1f:02:1e:23:21:ad:d9:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:92:51:86:E9:D0:EB:44:D0:8E:2B:B7:B3:DB:B8:81:CB:11:E7
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/WZuSUYbp0OtE0I4rt7PbuIHLEec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.40.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:3a:09:71:1d:57:a9:4a:55:c2:8f:0a:3a:65:d3:a5:81:04:
b0:d4:fe:7c:52:20:76:ef:47:14:48:61:89:24:d2:1c:c6:7f:
82:3c:0c:07:30:f7:7a:05:44:f2:42:38:73:ce:f2:4b:48:11:
1f:8f:97:7f:17:fb:a7:82:f5:b3:f7:7c:7e:fd:5e:bc:58:6e:
00:9d:46:61:9f:90:ee:4e:57:a2:65:3f:70:a2:d9:36:df:e9:
0e:e2:bb:96:cb:39:47:6d:9c:d1:1a:e5:e5:07:3e:dd:b9:94:
4e:9a:ad:ee:ae:88:30:2a:ee:49:ac:1a:ab:26:3f:e6:64:d9:
73:e5:0d:83:79:77:ef:9c:3b:02:03:1e:4d:65:e3:e3:e7:42:
4a:8c:b8:70:14:01:1f:25:cb:85:4b:66:10:22:40:27:53:c6:
07:70:f3:b0:dd:46:40:bf:21:9e:f1:90:ba:ea:d8:31:94:f7:
1e:8b:e2:1e:4e:57:a2:6a:88:3f:9f:b5:70:3f:3c:b9:43:59:
4a:50:e0:18:c7:44:44:21:f7:51:a8:31:5a:20:d2:7f:0a:ec:
05:18:49:4f:10:da:3e:53:99:2c:40:43:5b:e7:91:50:84:de:
d3:45:28:81:51:cf:83:fe:68:b9:00:fe:e9:f5:a7:e6:5e:06:
85:1f:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:56:03 2026 by rpki-client