Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/WUkw13BXbmwx837WLJf1-ujWIGY.roa
File: WUkw13BXbmwx837WLJf1-ujWIGY.roa (raw, json)
Hash identifier: KaL6lpaRVQoMHhS+trPgSSJTUzqrGJoEZwWu98KvdXg=
Subject key identifier: 59:49:30:D7:70:57:6E:6C:31:F3:7E:D6:2C:97:F5:FA:E8:D6:20:66
Certificate issuer: /CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Certificate serial: 01A120936DC5B6D61890A0B421B13C0E57C6
Authority key identifier: ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/WUkw13BXbmwx837WLJf1-ujWIGY.roa
Signing time: Fri 09 Oct 2026 12:11:35 +0000
ROA not before: Fri 09 Oct 2026 12:11:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134963
IP address blocks: 149.134.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:93:6d:c5:b6:d6:18:90:a0:b4:21:b1:3c:0e:57:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Validity
Not Before: Oct 9 12:11:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=594930d770576e6c31f37ed62c97f5fae8d62066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:e0:b2:8a:c2:e2:1b:89:3f:85:42:3f:ed:
df:d4:4b:16:69:b0:3e:83:9a:46:23:ad:76:89:e0:
85:24:49:9f:e0:24:8d:14:28:40:ba:d1:60:82:7f:
ce:fa:ad:25:47:17:80:91:2d:64:6b:55:4c:dd:4b:
cb:f2:cf:18:07:5c:9d:76:41:61:b2:26:e2:8d:1d:
bb:80:99:48:ed:be:db:72:15:43:76:cb:4d:80:74:
36:c1:4c:46:e4:57:20:62:78:3f:4d:db:3f:b9:14:
b3:07:da:5e:1e:34:a0:87:78:6d:0d:a4:33:d7:06:
be:c5:22:ce:97:91:5f:a3:32:dc:69:e5:5a:0b:7b:
9e:02:1e:92:46:54:a8:58:5f:ac:6e:eb:34:59:1b:
69:5c:70:98:31:b9:61:39:03:62:50:f2:a3:83:29:
05:24:02:81:fe:9a:58:a2:b0:4d:81:2d:9e:8e:18:
67:26:c1:28:20:b4:33:96:7a:f2:57:ea:a5:3b:18:
2f:40:93:57:75:b3:00:32:ac:d9:c0:31:f9:8b:a9:
ad:20:71:2d:be:63:18:05:70:f0:d8:a4:02:60:4f:
17:06:28:c4:ff:04:48:d4:5c:51:a5:e8:a0:cc:6c:
44:e0:91:cd:c9:aa:bc:4b:17:d7:e9:cf:98:0b:e2:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:30:D7:70:57:6E:6C:31:F3:7E:D6:2C:97:F5:FA:E8:D6:20:66
X509v3 Authority Key Identifier:
keyid:ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/WUkw13BXbmwx837WLJf1-ujWIGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.134.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b6:f0:c6:ae:6e:1c:00:f8:f8:61:e6:a8:7d:7c:81:ef:51:
95:36:08:b9:68:1a:92:e9:f1:51:39:64:78:c9:1a:4e:45:19:
87:9b:22:84:19:cb:47:ee:64:c9:a3:51:06:64:12:d9:39:cc:
05:99:45:c6:53:bf:c4:92:37:45:6a:02:4d:c0:87:bc:c4:1d:
e1:f2:5f:c9:78:2b:da:fb:e6:6c:ea:2e:4d:34:d8:93:af:13:
98:dc:ec:40:1b:fd:a3:21:68:e0:40:26:6b:e7:fe:86:f2:88:
2d:5d:c6:6a:b5:29:ae:0d:62:77:c9:8d:cf:8d:6b:4b:23:58:
4f:99:92:eb:7c:f4:b3:95:7e:1a:b4:65:1a:10:ad:a6:3f:81:
aa:f6:c1:c3:f8:fc:42:54:68:32:39:ac:13:ff:fb:9b:96:87:
e0:f9:61:65:cc:28:55:61:08:c5:71:a1:86:80:12:8d:c4:9e:
d8:ab:c0:97:e7:d2:6f:83:47:7e:39:b8:0a:30:03:4e:75:b4:
4a:fd:90:35:91:1d:79:d9:69:a0:ae:6f:1e:7a:8b:71:cd:8e:
ee:41:de:9a:81:fa:fc:5a:e0:1d:a2:2e:a0:5e:ce:e2:ff:ef:
5a:38:02:10:cd:01:15:e9:cf:0e:47:5d:65:78:89:ad:67:a8:
f8:7b:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:24:29 2026 by rpki-client