Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/WUESXJvKkNn1kOryPHRJ6pKSn40.roa
File: WUESXJvKkNn1kOryPHRJ6pKSn40.roa (raw, json)
Hash identifier: cX2Cr1KtuYXEpicUCovGv/MkYhV2VofpWQgXL8KxFFM=
Subject key identifier: 59:41:12:5C:9B:CA:90:D9:F5:90:EA:F2:3C:74:49:EA:92:92:9F:8D
Certificate issuer: /CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Certificate serial: 019F04200992330A2CD22EFC48CF1A3A4EC1
Authority key identifier: 16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/WUESXJvKkNn1kOryPHRJ6pKSn40.roa
Signing time: Fri 26 Jun 2026 13:30:36 +0000
ROA not before: Fri 26 Jun 2026 13:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56595
IP address blocks: 45.149.252.0/22 maxlen: 22
46.226.0.0/21 maxlen: 21
89.32.88.0/21 maxlen: 21
91.239.46.0/24 maxlen: 24
91.240.174.0/24 maxlen: 24
95.215.9.0/24 maxlen: 24
185.7.228.0/22 maxlen: 22
185.34.8.0/22 maxlen: 22
185.34.8.0/24 maxlen: 24
185.34.9.0/24 maxlen: 24
185.34.10.0/24 maxlen: 24
185.34.11.0/24 maxlen: 24
185.73.152.0/22 maxlen: 22
185.100.68.0/22 maxlen: 22
185.122.64.0/22 maxlen: 22
185.240.200.0/22 maxlen: 22
188.241.20.0/22 maxlen: 24
188.241.20.0/24 maxlen: 24
188.241.22.0/23 maxlen: 23
192.124.193.0/24 maxlen: 24
192.124.194.0/23 maxlen: 23
192.124.197.0/24 maxlen: 24
192.124.198.0/24 maxlen: 24
192.124.200.0/24 maxlen: 24
192.124.203.0/24 maxlen: 24
192.124.206.0/23 maxlen: 23
193.33.125.0/24 maxlen: 24
195.230.123.0/24 maxlen: 24
2a00:a600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:20:09:92:33:0a:2c:d2:2e:fc:48:cf:1a:3a:4e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Validity
Not Before: Jun 26 13:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5941125c9bca90d9f590eaf23c7449ea92929f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:74:fb:d9:18:1a:43:0f:fd:0c:8c:7a:16:
cb:ca:59:ed:e9:04:45:2f:08:07:fd:ad:15:5c:53:
ef:01:3a:76:a8:ee:9f:40:43:02:42:a6:2d:06:b3:
a5:b1:a5:29:0d:db:40:c4:b3:b0:92:90:25:f3:68:
46:d8:e2:a4:72:f7:f2:0f:83:6f:2d:51:86:25:e2:
19:94:4a:87:4a:ed:02:5a:62:72:cd:52:72:98:bd:
2f:e1:91:5f:bc:01:3a:25:21:cf:23:18:72:54:15:
28:0b:4e:93:04:fc:e7:53:ee:53:23:67:89:c9:6b:
54:94:5c:a5:91:0d:9e:b3:1b:5b:34:14:4d:0b:51:
19:78:74:51:97:56:35:e0:85:57:3c:27:9f:33:ea:
24:fc:71:db:71:75:38:da:58:0b:ee:46:e4:32:9d:
3b:f8:7b:3d:90:fb:72:65:c4:15:1b:59:9c:6e:fb:
a2:5e:d3:22:db:9b:99:f5:d0:40:ee:e8:30:1e:8f:
3a:58:e2:33:37:ed:6d:a1:b2:d7:9f:87:53:0f:f4:
94:be:3c:a5:79:48:5f:2c:d2:1a:4e:9c:48:41:0e:
53:18:98:f4:dc:ec:9a:92:f9:d3:ba:54:56:ee:e9:
5d:ff:85:78:21:9f:7c:36:e5:bc:b4:bf:26:ac:f5:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:41:12:5C:9B:CA:90:D9:F5:90:EA:F2:3C:74:49:EA:92:92:9F:8D
X509v3 Authority Key Identifier:
keyid:16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/WUESXJvKkNn1kOryPHRJ6pKSn40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.252.0/22
46.226.0.0/21
89.32.88.0/21
91.239.46.0/24
91.240.174.0/24
95.215.9.0/24
185.7.228.0/22
185.34.8.0/22
185.73.152.0/22
185.100.68.0/22
185.122.64.0/22
185.240.200.0/22
188.241.20.0/22
192.124.193.0-192.124.195.255
192.124.197.0-192.124.198.255
192.124.200.0/24
192.124.203.0/24
192.124.206.0/23
193.33.125.0/24
195.230.123.0/24
IPv6:
2a00:a600::/32
Signature Algorithm: sha256WithRSAEncryption
b8:fc:91:57:23:0f:5a:dd:b8:73:c9:e5:01:67:e2:dd:64:68:
1e:bf:e4:28:2a:d3:78:0d:45:4c:34:0f:33:39:f6:01:7d:94:
8b:29:92:3f:38:ef:c8:1f:90:06:76:0f:df:04:16:c7:5c:09:
bf:8e:c9:b2:30:81:97:38:8e:3e:16:96:33:d4:ec:89:69:d0:
68:3d:0d:fa:f7:9a:72:83:40:1f:da:0f:25:29:67:96:a0:94:
2b:cd:66:c5:14:36:ee:cb:5f:75:c7:32:80:d9:6d:7f:f5:84:
60:16:57:fe:96:93:92:76:49:f7:5c:a5:60:6c:4b:9e:32:37:
18:42:41:ad:d9:eb:41:5a:45:d6:8c:6c:46:ea:f3:ef:0a:41:
66:5b:ec:72:6f:b5:67:0f:23:b1:d8:cb:1e:79:db:e2:3b:fc:
80:79:3d:a2:05:0c:49:99:57:03:0f:3c:b3:4d:e3:f5:7d:e9:
69:01:35:07:56:cd:c5:1c:01:af:10:7d:03:8b:1e:5d:ac:c0:
ee:6b:1a:8e:df:02:e4:58:93:42:af:d4:33:39:60:39:21:08:
0c:92:9a:4d:44:60:bd:f1:23:17:ac:71:1a:fa:17:77:4a:ec:
ad:39:d3:17:52:ad:7c:cf:34:72:87:52:83:5a:9f:4e:59:f5:
90:d0:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:34 2026 by rpki-client