Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/WKo0w-hQA_6GqLwkYTSFOaF2igk.roa
File: WKo0w-hQA_6GqLwkYTSFOaF2igk.roa (raw, json)
Hash identifier: dXRlU5jeDW7rQk8xbfzgMgBkQT5Cb93wKPdp+cZ/mBg=
Subject key identifier: 58:AA:34:C3:E8:50:03:FE:86:A8:BC:24:61:34:85:39:A1:76:8A:09
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 01A134CBC1AFFD0168B9A165240E0C93E881
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/WKo0w-hQA_6GqLwkYTSFOaF2igk.roa
Signing time: Tue 13 Oct 2026 10:25:31 +0000
ROA not before: Tue 13 Oct 2026 10:25:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6782
IP address blocks: 194.117.160.0/19 maxlen: 24
194.140.244.0/24 maxlen: 24
195.196.0.0/16 maxlen: 24
2a00:ff40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:cb:c1:af:fd:01:68:b9:a1:65:24:0e:0c:93:e8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Oct 13 10:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58aa34c3e85003fe86a8bc2461348539a1768a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:bf:27:6e:67:c7:bb:aa:a3:26:b3:e7:72:
88:87:a8:b6:76:e4:92:6a:14:3e:37:1e:6f:e0:21:
c8:39:d7:b3:73:4d:ad:79:37:3e:5e:b8:09:74:6f:
e5:0e:5f:70:b8:32:1e:57:7f:32:98:81:f2:d7:25:
27:14:e6:c3:03:e4:2b:14:48:d0:e3:65:72:88:6f:
ea:73:b3:f6:44:72:c1:ba:84:04:9e:29:86:42:fb:
c6:12:c8:fe:23:0e:80:38:ca:f6:46:a5:c0:ac:a7:
a8:45:96:69:13:69:59:5d:f2:1e:40:b1:4f:6a:1a:
44:4a:99:09:cf:52:e0:78:ac:b6:ba:70:d4:ef:4d:
56:33:1f:dd:57:71:b5:d5:8c:9c:72:99:2c:40:09:
b2:12:b2:60:d9:d9:d8:05:46:1a:fe:f8:e7:b2:ac:
07:9b:7b:2c:91:a0:1f:61:68:71:a8:0b:14:40:78:
97:03:55:1e:7b:ac:4c:e6:bf:56:ce:dc:8e:2d:2c:
fc:70:77:73:eb:bf:0c:bd:81:bf:9d:6b:90:79:b8:
1d:b9:b1:d2:59:78:e1:e2:36:c2:6a:b6:5c:6b:c8:
31:7e:81:2d:2d:c8:42:aa:e8:e9:61:8d:86:4c:df:
9f:bb:72:e7:ce:9d:19:2c:ce:ec:39:c8:68:77:35:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:34:C3:E8:50:03:FE:86:A8:BC:24:61:34:85:39:A1:76:8A:09
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/WKo0w-hQA_6GqLwkYTSFOaF2igk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.160.0/19
194.140.244.0/24
195.196.0.0/16
IPv6:
2a00:ff40::/32
Signature Algorithm: sha256WithRSAEncryption
40:5e:ab:df:fb:30:af:b6:00:57:c9:e3:af:37:04:ef:05:d8:
52:5c:50:c0:55:8e:8e:f3:d7:a7:9e:db:39:54:7a:85:9e:d5:
d3:cf:7f:fb:38:a5:34:80:4e:5f:2a:ea:37:49:85:92:10:58:
79:35:3d:e4:6a:17:8f:fe:2f:2d:c6:74:95:13:0e:2d:05:26:
12:4b:2b:17:ef:bc:ec:96:38:7d:04:5e:2b:e2:84:b0:f4:a1:
f7:7b:51:e0:7b:17:58:d6:f7:d4:2f:73:12:ac:79:6a:4f:0b:
9c:78:4d:35:46:dd:bc:5a:e6:3d:70:df:23:4e:b3:e8:a4:93:
79:da:88:8e:30:57:22:bc:e7:43:99:b7:df:5d:dd:9c:b8:53:
f9:9a:ae:7d:e4:ef:62:90:93:76:98:ed:0b:c9:fe:53:3e:d1:
9e:3e:89:48:65:f5:2e:34:a6:c6:c6:39:3e:69:ab:32:4c:de:
41:e1:30:f2:9e:23:b5:5e:5a:c7:14:9f:53:16:e6:22:3a:fa:
63:e0:39:0b:99:b8:d7:43:cd:5c:e2:e8:aa:2a:03:bd:60:d2:
a4:d0:c1:6c:9a:a4:0b:63:80:47:6c:e7:37:71:b9:29:5a:39:
ec:d1:a4:85:bf:60:c8:d6:46:ce:50:0c:a1:99:7c:79:80:47:
e2:18:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:28 2026 by rpki-client