Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WUkpu618huHTBZsYXbWBRL4y1xU.roa
File: WUkpu618huHTBZsYXbWBRL4y1xU.roa (raw, json)
Hash identifier: B8mD8DyqGSTdlwGars/GXQlgbMtgcCy5MqnqfowcY/8=
Subject key identifier: 59:49:29:BB:AD:7C:86:E1:D3:05:9B:18:5D:B5:81:44:BE:32:D7:15
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A008CE8797C4F716F07068D132CA26C78C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WUkpu618huHTBZsYXbWBRL4y1xU.roa
Signing time: Sun 16 Aug 2026 04:22:27 +0000
ROA not before: Sun 16 Aug 2026 04:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 77.242.159.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:08:ce:87:97:c4:f7:16:f0:70:68:d1:32:ca:26:c7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 16 04:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=594929bbad7c86e1d3059b185db58144be32d715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:e6:42:0b:55:e1:70:a2:3e:76:a4:58:42:
b2:7f:e3:ed:d9:f1:46:71:42:df:57:8f:af:af:e4:
c9:7f:6f:ea:1a:ae:f7:06:cb:eb:c4:cc:12:03:4a:
6c:e6:fb:0e:3d:46:07:f9:21:04:ef:dc:a7:63:7b:
cf:fd:f3:9b:8d:c4:f8:2e:50:a1:76:64:64:a7:8c:
4d:1f:39:8f:21:4c:46:27:e0:54:6e:47:32:66:a1:
a7:a5:25:09:16:8d:8f:92:23:95:9d:54:bd:e4:47:
2b:70:56:ad:46:67:ce:c7:ba:e4:3b:b2:55:c1:2a:
18:fb:24:c0:ef:01:4c:6e:79:f6:cd:07:c0:7d:3b:
50:55:c9:93:bb:7c:ca:84:0c:f6:5d:38:b5:44:6a:
5d:f3:16:5c:22:fa:07:02:7f:3e:f7:32:a0:df:30:
8d:d2:71:72:a0:36:d1:59:be:77:3b:4b:8e:97:30:
0c:2d:d2:df:fc:e7:ca:54:fd:1a:2a:af:90:ac:db:
d4:ef:ce:31:11:e3:3c:5b:b4:37:a1:6a:6a:d1:d9:
2e:40:1b:90:c7:70:95:f1:92:82:7d:06:ec:7b:20:
81:2a:2a:1a:a8:61:b8:fb:6a:c2:b7:87:cb:2e:40:
99:d9:44:03:89:b8:bd:e2:ff:e0:36:24:06:4d:d6:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:29:BB:AD:7C:86:E1:D3:05:9B:18:5D:B5:81:44:BE:32:D7:15
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WUkpu618huHTBZsYXbWBRL4y1xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.159.0/24
83.137.159.0/24
Signature Algorithm: sha256WithRSAEncryption
86:1c:79:31:59:d9:19:e2:9a:63:2a:a0:4a:cc:c1:e3:e2:c7:
ba:63:b3:f0:d2:72:7b:1b:bd:4d:88:77:50:f5:0d:0f:80:4e:
a1:65:60:24:4e:5f:5c:48:4d:4a:8f:a4:08:06:8b:c1:17:5a:
7b:46:45:2f:84:77:85:7e:ee:24:4e:35:df:55:a9:24:1a:b7:
42:f5:04:c3:4e:6d:87:1f:21:f6:83:59:c0:32:47:77:57:25:
8f:05:6a:2b:7d:04:2f:12:66:38:86:63:3f:d0:98:e6:7f:d9:
cd:b2:f4:ea:da:73:d7:45:0c:60:25:3c:60:34:e4:a6:a6:15:
16:ef:1c:0b:7f:60:02:74:18:95:e6:d4:83:8b:59:ee:07:22:
72:b2:87:44:33:94:4c:8e:e4:23:c4:ca:1b:e1:0e:7b:20:54:
05:28:f7:a6:fa:96:7b:d4:55:ae:4c:ae:25:49:9c:22:08:a8:
f9:a1:34:1e:a1:48:2d:b0:5a:0b:cb:00:49:5e:2f:d3:a4:f3:
d1:36:b6:20:32:9d:45:61:3a:d5:fd:5b:72:61:ec:9c:64:7c:
4f:17:79:23:e1:49:38:a6:29:cc:75:9c:e1:27:b1:56:8c:df:
33:e1:6f:70:5e:52:30:c0:bc:6f:38:37:c3:79:3e:c4:9b:d7:
f6:7d:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:09 2026 by rpki-client