Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/wfo30u71TyTZDTHUI9BQZ6k7_hI.roa
File: wfo30u71TyTZDTHUI9BQZ6k7_hI.roa (raw, json)
Hash identifier: M81zsgKxxKkMZYPshyFfmqhES0GtskCAr5JW50CDRMA=
Subject key identifier: C1:FA:37:D2:EE:F5:4F:24:D9:0D:31:D4:23:D0:50:67:A9:3B:FE:12
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F8A5687C0FB5DFE04C5C7CB8136804269
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/wfo30u71TyTZDTHUI9BQZ6k7_hI.roa
Signing time: Wed 22 Jul 2026 14:59:14 +0000
ROA not before: Wed 22 Jul 2026 14:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.98.197.0/24 maxlen: 24
85.92.141.0/24 maxlen: 24
213.189.19.0/24 maxlen: 24
213.247.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:56:87:c0:fb:5d:fe:04:c5:c7:cb:81:36:80:42:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 22 14:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1fa37d2eef54f24d90d31d423d05067a93bfe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:f4:6c:f1:c5:43:92:22:4c:33:76:d5:6b:
18:f5:12:da:54:26:71:a5:c2:24:95:e7:92:1a:7c:
09:94:07:37:6e:94:bb:64:b1:70:b6:e9:28:7c:99:
45:d5:8c:eb:20:3f:e9:52:25:63:f9:96:a0:3e:07:
fa:7a:fe:3a:0e:22:dc:f5:09:df:62:fb:46:6f:8d:
ce:13:76:fb:eb:89:17:ab:d2:d7:5b:52:8b:32:46:
8f:6f:32:ec:c7:da:04:eb:de:20:3d:cc:eb:a4:0f:
f9:61:5d:fc:72:7c:59:a8:20:76:01:be:f7:5d:ec:
43:f1:aa:16:44:7c:eb:15:15:c7:e2:0e:5f:43:51:
45:31:4a:21:31:c9:ae:d3:96:84:89:8d:58:2e:3c:
ce:d3:ac:bd:5e:7d:c7:2f:c0:c8:09:c4:44:c9:21:
d4:c5:5b:b7:f3:da:89:21:7c:df:bd:59:c1:43:fc:
95:c6:82:60:6c:9f:6f:c1:80:fb:e4:ea:a6:e8:44:
1f:8b:8f:a5:33:a4:02:b7:79:19:5c:b4:1c:89:9a:
88:c0:ba:42:09:d8:b1:65:24:2a:43:e2:41:05:5e:
9d:77:74:ab:c7:49:a6:99:02:e9:2b:1f:08:51:1f:
e5:a9:74:78:84:04:f8:42:42:2d:34:40:b8:bb:75:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FA:37:D2:EE:F5:4F:24:D9:0D:31:D4:23:D0:50:67:A9:3B:FE:12
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/wfo30u71TyTZDTHUI9BQZ6k7_hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.197.0/24
85.92.141.0/24
213.189.19.0/24
213.247.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:20:29:e5:98:b0:fd:1a:ab:66:f0:08:10:f8:f2:b5:ed:25:
c2:26:52:07:56:f8:1b:57:93:2b:7e:c2:c2:20:19:ee:25:fd:
d0:0a:00:6e:1a:df:ab:ee:e1:ea:85:9c:79:5c:40:73:45:ae:
b6:39:8b:73:b0:fd:bd:32:a0:6d:83:53:fe:f1:a4:f8:d2:1d:
dc:5a:d3:8d:40:85:bf:80:b8:23:dc:4e:d7:b0:8f:c1:b6:d3:
5b:33:c6:67:b1:34:d9:c7:5f:1b:a5:27:58:35:25:1b:42:5b:
31:ac:0d:56:78:3d:36:d6:48:93:4b:23:37:d3:ec:6a:70:55:
47:70:78:ff:a2:2c:f5:de:e4:92:be:b8:91:2d:63:2a:0b:8f:
90:e7:75:db:94:4b:18:63:b3:23:c8:28:20:eb:5a:72:7c:30:
94:85:1c:aa:99:a9:95:27:0a:85:17:c3:75:08:ee:bc:25:cd:
b7:92:5e:17:4a:53:93:31:27:28:be:08:fa:1c:01:2b:33:7d:
fd:67:10:99:33:ea:a1:69:19:f3:07:2a:c0:f1:41:37:f4:a5:
18:a9:be:70:17:f6:4a:f3:19:49:01:e8:50:43:48:74:a1:cc:
a9:87:b7:81:7e:ec:53:e4:03:20:bb:68:f2:64:33:89:50:ec:
42:84:ba:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:05 2026 by rpki-client