Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/wgU11SWNubiT6Ibo0Wmuj_GRiqM.roa
File: wgU11SWNubiT6Ibo0Wmuj_GRiqM.roa (raw, json)
Hash identifier: yAuTvfR4qiqvzMUEnkbNj77NYY6lZPf1mhYPFyY9KxY=
Subject key identifier: C2:05:35:D5:25:8D:B9:B8:93:E8:86:E8:D1:69:AE:8F:F1:91:8A:A3
Certificate issuer: /CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Certificate serial: 01A0ECBFF4EF140B0653B02F92307391BC25
Authority key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/wgU11SWNubiT6Ibo0Wmuj_GRiqM.roa
Signing time: Tue 29 Sep 2026 10:39:58 +0000
ROA not before: Tue 29 Sep 2026 10:39:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402517
IP address blocks: 185.83.69.0/24 maxlen: 24
185.83.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:bf:f4:ef:14:0b:06:53:b0:2f:92:30:73:91:bc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Validity
Not Before: Sep 29 10:39:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c20535d5258db9b893e886e8d169ae8ff1918aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:28:fd:35:84:c9:19:1e:8a:cd:10:6c:e5:
c4:9d:b0:af:f5:c7:8b:59:62:b1:a6:b2:7c:0d:b0:
f6:7e:d7:e6:06:b9:e3:2b:52:d1:cc:19:fe:3e:be:
79:52:60:f4:12:b3:05:0f:06:49:d5:20:cf:bc:56:
cf:a4:69:f7:6c:72:29:0e:09:59:a7:1d:d8:48:65:
b7:75:9a:08:49:e7:b7:b7:6b:e8:93:b6:a7:56:68:
cd:8b:85:a7:8d:77:fe:6d:3a:4a:a4:18:86:f4:9f:
67:c5:93:b7:39:c1:1a:83:d1:30:ad:a8:3d:38:3d:
e9:56:6e:c9:05:a1:a4:9a:e8:45:d5:5b:8c:40:4d:
2b:74:aa:61:e7:8c:77:f7:c3:0c:a6:03:b9:ef:d4:
15:35:49:76:5e:c5:c8:30:d6:84:d0:3f:4f:6b:df:
51:14:9f:60:ea:b4:f0:53:d5:1f:fb:28:46:63:ef:
a0:c8:33:65:ba:10:3d:54:9d:f7:56:1e:21:0e:98:
44:12:89:f3:0e:77:bf:4e:46:b4:87:8e:32:52:ee:
b0:d1:4f:7b:77:57:f4:63:8c:07:ae:86:be:f6:1d:
4e:c4:50:2e:f3:3f:35:6e:63:c5:0a:c2:4a:c3:1b:
7d:dc:51:02:a4:5c:37:70:bb:c9:6f:64:eb:fc:ec:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:35:D5:25:8D:B9:B8:93:E8:86:E8:D1:69:AE:8F:F1:91:8A:A3
X509v3 Authority Key Identifier:
keyid:D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/wgU11SWNubiT6Ibo0Wmuj_GRiqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.69.0-185.83.70.255
Signature Algorithm: sha256WithRSAEncryption
b2:db:58:21:73:8b:de:0b:06:e3:01:c5:c5:34:58:da:eb:64:
d9:47:c9:d9:25:96:e9:6c:7e:9c:ab:01:4a:4e:27:16:5a:bb:
f5:22:c0:2e:ca:8c:06:52:70:fd:da:61:1f:22:dc:9d:b4:b8:
e7:95:17:82:d0:c7:31:da:35:a6:23:f2:26:f0:7c:22:f7:49:
73:ae:83:97:bc:14:6e:07:f3:f3:1d:bf:fb:03:0c:51:ce:ba:
b3:99:0b:1a:a8:8d:d4:70:50:e5:95:29:a5:3a:57:9d:8f:af:
e7:69:d9:35:a6:79:b0:f5:e9:df:31:0c:a8:a7:c1:4e:81:61:
b5:68:9b:4e:45:04:3a:0d:4f:2b:99:90:42:80:dd:03:48:7b:
a4:8f:66:e0:b7:85:94:f2:5a:8a:4c:ff:d6:29:b5:4c:6a:9e:
52:e7:b6:cb:36:7c:9c:ab:ec:12:ea:e1:54:c2:eb:18:1b:62:
32:f6:26:13:b6:c0:e2:f5:1e:5d:ca:ae:bc:ec:7e:56:af:80:
67:52:33:81:fe:cd:19:0a:03:56:7c:e8:18:a9:a4:e0:55:0d:
57:ee:30:60:b8:3f:f5:30:2f:ac:f8:19:b3:c7:c7:40:c4:c7:
43:13:3d:d9:da:62:7c:e7:43:1b:e2:93:0e:81:d5:69:5c:8f:
40:c3:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:40 2026 by rpki-client