Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/WKFD_FS88mfVSlVZ4ZCiSZnrwrg.roa
File: WKFD_FS88mfVSlVZ4ZCiSZnrwrg.roa (raw, json)
Hash identifier: Mg5QzJQ4S4FKForqI4vgrWuRJ679aCF6k7yhu7QGvsk=
Subject key identifier: 58:A1:43:FC:54:BC:F2:67:D5:4A:55:59:E1:90:A2:49:99:EB:C2:B8
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01A10B664DB986459BC613BDB6EA9158E8DC
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/WKFD_FS88mfVSlVZ4ZCiSZnrwrg.roa
Signing time: Mon 05 Oct 2026 09:30:16 +0000
ROA not before: Mon 05 Oct 2026 09:30:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.37.84.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.180.0/24 maxlen: 24
93.127.181.0/24 maxlen: 24
93.127.182.0/24 maxlen: 24
93.127.183.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:66:4d:b9:86:45:9b:c6:13:bd:b6:ea:91:58:e8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Oct 5 09:30:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58a143fc54bcf267d54a5559e190a24999ebc2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:32:90:3c:75:0b:44:66:ec:ea:6b:79:b7:
53:c2:f3:23:50:4b:32:0b:6a:0f:bd:8d:e4:b5:56:
6f:72:8f:50:eb:40:1d:11:94:c6:fd:48:5f:c2:97:
70:d5:46:f7:54:a7:b8:1b:ee:ac:05:91:9e:8e:a1:
9d:46:fa:54:f7:d2:22:37:a6:47:f2:b9:98:91:a4:
e4:50:10:e9:f1:33:56:b1:29:57:7f:24:4d:d2:b2:
69:d6:14:38:d9:a4:07:63:8b:63:e6:ab:0f:f8:bc:
3e:1d:cc:d4:1c:9b:ea:ca:86:bc:c2:a8:7e:f4:d0:
ca:b9:58:85:7a:91:92:ce:b6:fc:a5:c0:f3:32:4e:
83:8d:15:42:c3:ad:3f:cd:2f:d1:ad:d8:ff:b1:36:
4a:12:a6:1c:15:b8:ee:4d:79:97:16:60:5c:34:01:
8e:d1:4f:64:eb:25:9b:02:4b:49:7c:f8:1e:76:1c:
24:da:36:b3:53:db:3e:bb:67:cf:4c:00:61:46:29:
24:15:46:7e:13:11:5d:b6:99:6f:4b:12:50:89:fc:
ce:55:20:d4:64:21:dd:de:47:c7:29:2d:a4:31:ca:
29:ba:45:89:be:f8:36:95:bb:a5:64:b5:0f:c6:7c:
5c:64:b5:6a:09:cf:99:d7:91:c0:4f:a5:46:4b:08:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A1:43:FC:54:BC:F2:67:D5:4A:55:59:E1:90:A2:49:99:EB:C2:B8
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/WKFD_FS88mfVSlVZ4ZCiSZnrwrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.84.0/24
93.127.161.0/24
93.127.180.0-93.127.184.255
Signature Algorithm: sha256WithRSAEncryption
c2:16:41:ee:c3:f2:db:9b:10:e2:6a:d4:95:89:80:bf:f5:eb:
e8:13:e7:27:e1:a9:6e:6a:55:1d:1c:1a:7e:26:9e:9b:7e:f1:
4c:6c:c8:5d:3d:e8:57:b4:f9:ce:f5:ac:29:cd:dd:a4:6b:fc:
54:80:fe:a1:d1:99:fc:13:33:25:55:ec:12:82:f3:f6:d5:7c:
9b:1f:81:e5:6e:4d:88:32:ee:5d:48:30:b7:4b:dc:91:c4:e6:
70:2b:5f:e4:be:7a:7d:f4:59:cf:8e:20:8e:2f:99:42:ef:56:
40:0a:71:22:37:1d:6b:aa:27:52:b3:e1:51:5a:52:b8:07:e9:
10:77:15:32:9f:8e:f5:34:42:4f:77:fc:70:20:de:b1:b4:76:
cd:3f:66:32:3b:7e:37:6b:ed:c4:2b:d0:7c:00:2f:df:42:c7:
9d:ea:e3:62:3d:8e:8a:da:04:1a:1e:3a:ed:98:7e:f0:1e:ad:
59:42:21:72:d6:be:ea:05:08:fe:f4:fc:e9:76:74:43:5f:26:
63:15:d7:b6:a7:c1:56:b3:d6:8f:fe:67:3b:03:29:71:be:5b:
1f:00:eb:c0:27:f5:57:b9:e6:55:f9:b8:d6:30:e5:0f:3d:57:
e5:6b:c5:4a:96:40:7a:1a:00:e5:bb:5b:71:e6:fb:da:28:85:
85:cb:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:08 2026 by rpki-client