Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/WHv4vbtvEtA4gwwUhkFo7n6kx1s.roa
File: WHv4vbtvEtA4gwwUhkFo7n6kx1s.roa (raw, json)
Hash identifier: LaxW4oat6fwzRSIaYRt2F2tFX9SLWOpLOinwS1veo08=
Subject key identifier: 58:7B:F8:BD:BB:6F:12:D0:38:83:0C:14:86:41:68:EE:7E:A4:C7:5B
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 01A10B2E7516B83E00F8416574535122D4A6
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/WHv4vbtvEtA4gwwUhkFo7n6kx1s.roa
Signing time: Mon 05 Oct 2026 08:29:16 +0000
ROA not before: Mon 05 Oct 2026 08:29:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 185.155.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:2e:75:16:b8:3e:00:f8:41:65:74:53:51:22:d4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Oct 5 08:29:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=587bf8bdbb6f12d038830c14864168ee7ea4c75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:22:31:8f:3e:36:96:4d:ea:52:f1:e4:6e:
2f:02:f1:17:aa:19:b7:c4:59:c5:42:8a:03:2a:78:
fe:2a:30:15:1f:7b:a7:bb:f6:a5:5d:0f:25:00:70:
0c:32:d2:62:11:e0:4a:ef:4f:6a:9c:e9:38:89:d4:
7c:24:67:f6:da:28:b2:fe:78:e9:a7:48:94:bc:c0:
10:9c:27:a8:a4:67:83:70:e0:8a:1f:da:92:e4:3f:
ba:76:6e:4d:b9:1f:81:63:b9:ce:e3:2f:e3:ce:6e:
ab:f1:35:ff:a7:0b:68:2b:ee:9d:2d:bd:a1:83:52:
89:a0:8d:9a:d8:25:e0:78:34:e5:fa:d5:49:dd:b5:
3e:5f:84:9b:64:90:9b:0a:26:01:0f:a6:30:5b:52:
6f:e9:3a:de:25:4d:d8:a1:4a:ae:b6:c2:02:1a:d7:
a5:2a:f8:e3:f8:6c:bc:e3:72:12:f9:b4:79:45:61:
e3:33:e8:88:38:ed:23:55:de:aa:c7:df:ae:c6:e2:
57:e3:8a:92:4d:a8:bd:c6:7c:76:0d:33:34:5f:9e:
d7:e5:7b:bd:da:02:97:e9:c8:f0:64:06:fd:f5:d8:
5f:fb:d5:62:2d:11:c0:3e:7f:69:34:09:e8:a4:91:
a0:af:6e:6c:3d:f9:c4:b2:8a:32:00:f6:7b:17:1e:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:F8:BD:BB:6F:12:D0:38:83:0C:14:86:41:68:EE:7E:A4:C7:5B
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/WHv4vbtvEtA4gwwUhkFo7n6kx1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.218.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ee:46:4d:fa:86:b1:f9:a7:68:e2:e5:86:03:dd:5b:6d:66:
63:72:5b:b4:4e:66:00:d9:c8:98:1a:7c:5b:a5:80:1d:59:f8:
02:1f:e1:34:d4:d8:2c:7e:77:46:1d:f1:50:b9:65:10:d0:f8:
82:9b:26:45:cb:75:ca:3c:02:6a:3a:46:34:72:7a:31:b9:f7:
b7:7b:a8:45:85:e3:e6:21:8e:88:f9:5b:56:90:84:3b:38:4a:
3f:f4:c3:88:4f:79:c1:fc:cf:ed:48:3c:6e:7d:2d:0f:e1:d7:
31:db:26:2d:3c:59:b2:2d:d4:62:2f:19:da:7a:91:1b:e9:fb:
44:5d:39:d2:23:42:75:28:49:5b:26:29:48:78:ed:b8:18:3b:
43:84:37:31:c5:41:42:7a:17:fa:95:c5:41:ba:b9:13:fa:92:
4e:d5:d0:32:14:51:bc:81:7f:16:b1:be:3f:43:2a:fd:de:66:
1a:78:cd:bb:6d:53:ce:91:81:ad:9c:93:19:ed:3b:95:47:0e:
51:01:2c:85:24:19:ae:1e:e1:0e:aa:1c:c6:40:a0:07:68:65:
03:5a:6f:9b:32:8f:22:1f:88:71:f0:43:af:06:cf:38:f9:84:
29:71:db:81:56:73:9d:d1:db:b1:61:76:54:8a:ba:e4:c1:df:
77:6b:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:07:06 2026 by rpki-client