Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/wyBaD-xrWNM3oZ7omW2NVE0N4wg.roa
File: wyBaD-xrWNM3oZ7omW2NVE0N4wg.roa (raw, json)
Hash identifier: nsnhyDk/6uhCCDvXfECiZ8RZAYd1WeMo4ansEBsj3V8=
Subject key identifier: C3:20:5A:0F:EC:6B:58:D3:37:A1:9E:E8:99:6D:8D:54:4D:0D:E3:08
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0E9A18FC862DEBE15424861E2D04A2323
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/wyBaD-xrWNM3oZ7omW2NVE0N4wg.roa
Signing time: Mon 28 Sep 2026 20:07:54 +0000
ROA not before: Mon 28 Sep 2026 20:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218641
IP address blocks: 2.58.152.0/24 maxlen: 24
165.84.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:a1:8f:c8:62:de:be:15:42:48:61:e2:d0:4a:23:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 28 20:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3205a0fec6b58d337a19ee8996d8d544d0de308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:07:d5:d5:c3:6c:da:a0:82:da:da:87:89:
09:b4:7a:05:7c:7e:be:2a:9c:db:ed:1c:eb:ed:15:
c6:be:08:23:38:6a:14:64:ab:8b:b8:c6:17:d8:95:
dd:49:28:d4:93:e0:f4:c5:5b:ed:04:e4:0f:f6:17:
8d:93:ce:c2:96:6a:66:bf:7e:dc:0d:9d:c1:1c:cf:
1b:7e:e1:e3:00:5a:c8:dc:2b:71:a1:25:73:eb:f7:
b4:72:93:de:fd:66:08:1d:9f:c1:08:f0:a6:fd:76:
a8:5c:05:64:e9:52:31:0a:e0:f2:09:b1:c6:d4:82:
dc:3b:b4:b5:92:7e:7f:62:56:0b:85:e4:8f:37:00:
5f:c3:96:03:17:ea:9c:c9:3c:59:e8:d6:27:95:98:
ab:e3:80:43:49:c4:cd:2d:e5:0e:57:94:84:3d:2d:
7c:c2:04:87:60:b6:2e:91:a8:84:89:f2:a6:7a:b0:
51:21:29:41:80:26:49:35:09:b5:49:0e:92:73:d3:
dc:79:db:aa:31:2e:30:28:01:f4:3b:ed:c1:fd:bc:
e9:69:ed:32:4c:a2:28:75:d8:5e:54:5f:ce:fb:29:
2c:b3:42:3f:db:ac:c8:17:83:4d:1f:d2:f8:80:aa:
2a:25:51:64:68:17:7a:0c:2f:35:9d:cb:ce:bb:b2:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:20:5A:0F:EC:6B:58:D3:37:A1:9E:E8:99:6D:8D:54:4D:0D:E3:08
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/wyBaD-xrWNM3oZ7omW2NVE0N4wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.152.0/24
165.84.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9f:41:fe:11:93:78:04:b7:01:ee:9e:13:91:a3:36:80:b0:
85:f5:58:f5:8c:6f:ce:2d:f8:9f:4e:35:bd:3b:f1:82:c5:22:
18:37:b0:01:5e:56:93:3f:5d:72:8a:65:4d:f9:ab:ac:13:33:
d8:67:f2:92:f8:b8:b0:cb:0c:be:da:75:f2:36:ff:3f:0a:c1:
2c:44:91:c1:2e:e3:78:8f:2a:db:42:4c:f5:22:da:f5:e8:a3:
9a:5e:ed:35:d0:f2:6b:31:c0:a4:a6:86:9e:a9:77:5a:dd:66:
83:1d:74:10:01:3e:5c:f9:87:18:0a:43:bd:68:fa:84:91:62:
d7:b9:05:a6:d0:3a:ed:22:27:a9:14:5c:0d:73:0f:19:8a:f7:
70:3f:95:d5:6d:3c:21:e3:c2:da:b6:a1:88:8d:0f:07:18:d1:
bb:3a:db:11:f1:54:7c:8c:ac:e0:e3:7a:8c:07:c5:55:24:d9:
2d:8b:09:e6:d4:22:88:fc:73:d6:fb:97:be:e2:2a:92:95:e0:
c5:a5:89:b0:30:d3:ca:ee:10:a2:5f:bb:89:f9:40:f8:9a:70:
0d:e1:78:71:db:a0:b6:39:0c:00:d3:29:fb:e6:26:e4:3d:3c:
92:de:f6:fe:70:37:09:8a:48:10:1f:55:10:b1:db:de:89:97:
3a:3a:c4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:54:21 2026 by rpki-client