Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/WpzJEd65jg1k9FCh0sQW8umMMfA.roa
File: WpzJEd65jg1k9FCh0sQW8umMMfA.roa (raw, json)
Hash identifier: PuNyfpISewPH4mNqXsD+xLFU8GYwjzfSIZCXja26VFo=
Subject key identifier: 5A:9C:C9:11:DE:B9:8E:0D:64:F4:50:A1:D2:C4:16:F2:E9:8C:31:F0
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 019CD2C7BBEC92654F14378E6C57106744B5
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/WpzJEd65jg1k9FCh0sQW8umMMfA.roa
Signing time: Mon 09 Mar 2026 13:27:10 +0000
ROA not before: Mon 09 Mar 2026 13:27:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197991
IP address blocks: 185.239.56.0/22 maxlen: 24
185.239.56.0/24 maxlen: 24
185.239.57.0/24 maxlen: 24
185.239.58.0/24 maxlen: 24
2a0c:4b80::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:c7:bb:ec:92:65:4f:14:37:8e:6c:57:10:67:44:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: Mar 9 13:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a9cc911deb98e0d64f450a1d2c416f2e98c31f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7d:c5:49:33:0e:c3:2a:24:21:91:ae:b3:b0:
e3:dc:b1:f1:f9:5a:3a:ef:d6:bf:b8:b2:02:db:49:
bc:b8:80:68:07:86:c8:59:34:d0:3e:ce:3c:0e:d5:
de:92:1e:95:bc:62:9a:24:bc:1c:18:2a:2e:38:8b:
b4:60:34:90:76:0d:61:db:5f:9e:0c:8a:cf:7f:50:
f6:48:b3:39:db:0d:2b:f4:22:d4:6b:24:08:d7:e2:
45:9b:63:7a:e9:b6:86:d0:34:70:90:26:79:e2:f7:
3e:58:47:8b:a1:a8:34:00:56:02:d7:75:2a:78:f7:
6e:41:95:1e:18:2b:a0:a5:d5:4a:84:78:01:31:bc:
71:8a:bc:51:fb:a1:da:d1:bf:d7:19:bd:d2:3b:a0:
60:9c:7c:54:f1:2b:a0:cb:ea:4d:7c:18:61:eb:aa:
4f:f3:e3:6f:24:67:f8:b1:22:d9:f5:bf:be:04:3c:
6d:4c:9a:73:e2:cd:87:b5:a0:67:cd:c4:0a:d2:ca:
ee:26:37:ac:8f:cd:76:6f:4b:92:4f:ed:02:1c:84:
9b:07:56:b7:b1:0e:82:33:48:55:72:89:b3:d4:9a:
79:79:bc:b7:ff:54:14:c1:f0:64:4f:40:74:dc:dd:
68:79:39:a5:31:f6:ea:f0:37:dc:c3:80:52:fe:98:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9C:C9:11:DE:B9:8E:0D:64:F4:50:A1:D2:C4:16:F2:E9:8C:31:F0
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/WpzJEd65jg1k9FCh0sQW8umMMfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.56.0/22
IPv6:
2a0c:4b80::/34
Signature Algorithm: sha256WithRSAEncryption
b9:a1:d6:d0:88:09:64:03:c9:ec:9c:fa:f9:21:37:5f:fb:1c:
90:d8:2a:30:9c:28:82:16:56:4a:cc:1f:22:b1:ab:0c:ca:c4:
ca:4a:19:df:45:1a:29:fd:e3:3f:be:e2:1d:db:52:23:dc:b7:
31:c4:b8:8e:f0:db:8e:64:78:11:d6:b0:f0:fc:e3:3e:c1:c0:
de:e8:82:4a:53:dc:4e:ec:6e:a2:eb:5f:e7:0a:58:90:a3:c2:
a8:e0:58:1b:08:6f:d7:41:76:12:99:fa:6d:78:29:c6:3f:0e:
fb:55:75:e6:e5:3e:81:f8:49:0f:7f:06:40:1c:55:dc:ad:63:
21:06:8c:96:5a:1b:be:d0:d2:2d:a6:ea:47:25:85:68:82:49:
c7:00:3f:ef:70:13:b1:69:df:10:e7:a3:3c:86:f7:33:51:22:
3b:60:2b:84:d7:48:a0:63:e1:6a:cc:ea:31:aa:f8:03:c0:69:
75:e9:37:2d:a7:e1:a5:fe:50:28:40:68:ca:33:ba:38:55:43:
93:d7:88:e5:36:03:ef:d5:c4:a6:84:3c:06:08:d2:8d:f9:ad:
b4:fb:84:67:1e:e5:d0:ba:46:8a:86:f0:99:2b:03:e2:9f:7d:
a6:be:ad:27:35:b7:36:3e:31:52:32:e2:9e:2c:86:8a:1e:65:
f2:f1:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 14:32:26 2026 by rpki-client