Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Wmgw-PzlEBS1HLR9TJ2kCVV5kEg.roa
File: Wmgw-PzlEBS1HLR9TJ2kCVV5kEg.roa (raw, json)
Hash identifier: XFWzmSSoEjhW+dH+WXMLV1Em7SQ/K8xyojwcDrTNfFQ=
Subject key identifier: 5A:68:30:F8:FC:E5:10:14:B5:1C:B4:7D:4C:9D:A4:09:55:79:90:48
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019F9678E8F94A4EF5B478A23D2071B5F359
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Wmgw-PzlEBS1HLR9TJ2kCVV5kEg.roa
Signing time: Fri 24 Jul 2026 23:32:14 +0000
ROA not before: Fri 24 Jul 2026 23:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 195.123.4.0/24 maxlen: 24
195.123.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:78:e8:f9:4a:4e:f5:b4:78:a2:3d:20:71:b5:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 24 23:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a6830f8fce51014b51cb47d4c9da40955799048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:b4:b4:34:b9:f9:4c:f2:19:17:51:18:a5:
e3:99:70:19:96:e3:9d:bf:cd:b8:27:b9:d1:c2:73:
44:4b:37:de:03:1f:e7:e0:5e:0e:1c:b9:24:ae:ec:
83:98:79:5d:22:4b:10:ce:07:41:ed:6e:81:96:6d:
19:72:e9:95:4c:35:84:b6:28:a1:c5:4d:a0:13:a7:
3e:35:44:fe:3e:a3:2e:52:cf:e3:79:51:ef:52:43:
c2:05:62:bc:c0:f2:b4:42:5d:6b:07:1c:d5:2a:df:
86:56:cb:14:97:e1:35:02:01:f8:b8:08:f3:a4:24:
fe:8a:44:32:2c:f2:81:fb:3f:3a:c7:15:8e:9b:96:
9f:f4:40:0b:80:ed:ba:10:55:61:20:fc:b0:4a:d4:
2b:3f:6e:0a:0f:af:f8:a4:4a:50:f7:ee:f8:70:9d:
58:48:98:d3:a0:58:ba:08:c0:bb:81:7e:01:80:bd:
05:1a:a4:a2:01:07:b0:af:8f:1a:1c:4b:73:79:4a:
dc:c1:9a:06:bc:f8:52:77:d6:d0:ac:0d:15:7f:89:
ab:a7:1a:3c:53:18:5b:58:93:78:e2:16:52:81:be:
06:0e:7a:39:21:f2:c5:e9:45:e1:c5:3d:a9:a4:8f:
b5:04:87:fa:03:61:e6:64:55:2a:aa:80:8a:98:9e:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:30:F8:FC:E5:10:14:B5:1C:B4:7D:4C:9D:A4:09:55:79:90:48
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Wmgw-PzlEBS1HLR9TJ2kCVV5kEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.4.0/24
195.123.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d7:41:69:e7:e5:a6:fd:53:7b:7d:ba:bd:14:b2:56:4a:6a:
51:dd:6c:9d:68:98:30:9e:4a:0f:17:98:e3:7b:38:65:2f:fc:
82:46:1f:8c:85:97:e8:cf:45:24:b2:34:b2:42:aa:d3:3c:be:
f5:24:f4:d6:d7:69:9a:08:22:ad:89:8e:f6:78:3e:a5:df:e6:
bc:64:34:1a:0e:26:29:f8:0e:c9:3c:e9:bd:f2:5a:b3:4f:dc:
23:99:bb:fc:0e:8b:9c:42:af:4a:a3:c0:6e:bb:59:53:01:f8:
85:9a:5a:ab:0a:5c:1f:39:8e:90:16:0b:c6:10:f0:fb:5b:12:
f4:8a:c6:82:95:f2:5d:39:9f:47:69:b5:03:ec:9d:7b:aa:e2:
dc:6f:04:6e:97:08:00:dc:74:3c:91:c0:42:b1:93:1c:55:5c:
b5:8a:1b:f6:26:da:dd:41:b3:4f:44:ce:d1:7a:46:76:47:2d:
6d:61:e3:a0:a2:d9:5d:f1:e5:8a:92:03:ff:78:e9:a2:6e:b7:
de:08:ad:45:19:5d:79:f4:5c:45:da:4a:4d:b4:92:67:da:0f:
ac:0d:f8:9b:4f:8c:39:13:ca:41:57:5b:59:54:63:37:58:8a:
b4:a9:bb:2a:20:72:08:26:f8:fa:31:2b:7d:c9:8b:05:ce:52:
71:fd:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:49:30 2026 by rpki-client