Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/WWiGaN5f62gOkQ1ogAgkTfq5oOI.roa
File: WWiGaN5f62gOkQ1ogAgkTfq5oOI.roa (raw, json)
Hash identifier: xveksSBraHqFwffng7WOrCfHGMF0y0VOcbjId7rHfWg=
Subject key identifier: 59:68:86:68:DE:5F:EB:68:0E:91:0D:68:80:08:24:4D:FA:B9:A0:E2
Certificate issuer: /CN=cab40a0ab95c00998e184b03d9c33a54177e88ae
Certificate serial: 019CE2279577FA75E6F68F100F57C2EDAD26
Authority key identifier: CA:B4:0A:0A:B9:5C:00:99:8E:18:4B:03:D9:C3:3A:54:17:7E:88:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrQKCrlcAJmOGEsD2cM6VBd-iK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/WWiGaN5f62gOkQ1ogAgkTfq5oOI.roa
Signing time: Thu 12 Mar 2026 13:06:10 +0000
ROA not before: Thu 12 Mar 2026 13:06:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198659
IP address blocks: 185.116.154.0/24 maxlen: 24
185.116.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/yrQKCrlcAJmOGEsD2cM6VBd-iK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/yrQKCrlcAJmOGEsD2cM6VBd-iK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrQKCrlcAJmOGEsD2cM6VBd-iK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:27:95:77:fa:75:e6:f6:8f:10:0f:57:c2:ed:ad:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab40a0ab95c00998e184b03d9c33a54177e88ae
Validity
Not Before: Mar 12 13:06:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59688668de5feb680e910d688008244dfab9a0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:ff:d1:42:15:c4:06:c3:eb:bd:d7:3f:f5:
8f:03:94:7e:2f:4a:13:0e:83:7b:fa:8b:03:56:5f:
c3:c8:3d:16:28:c8:1a:e0:1d:15:e0:2e:de:36:0e:
3c:c1:3d:c3:6b:13:f9:a8:93:1b:1f:7e:64:84:54:
d7:22:1d:66:7b:55:4b:cd:30:28:b2:5a:27:aa:0c:
75:13:cc:f8:28:cc:a4:2f:46:6b:cf:77:bf:a6:87:
95:09:a5:25:56:1e:98:36:f3:cc:33:8f:60:8a:a7:
46:91:74:3c:f1:9d:81:e1:43:78:51:20:c4:b8:3d:
3f:5e:66:f7:b2:d3:ee:13:79:a6:e8:56:ed:31:a1:
d5:6c:4b:16:77:57:d6:b2:42:22:fa:45:e5:96:1e:
36:33:b9:5d:03:7b:08:4b:5f:1e:51:72:09:f3:c0:
3b:65:3c:55:29:ad:fd:20:08:56:1b:31:33:ba:39:
12:bf:90:96:ce:4b:f8:ea:3f:66:9a:c3:d2:ba:be:
1d:47:a5:d0:19:01:31:f5:af:7a:d7:ff:bd:76:f0:
61:fa:5c:cc:5c:1f:56:e0:7c:a5:6a:74:a3:b0:b5:
d8:62:d0:66:77:20:f3:23:9f:52:f0:80:8f:aa:8b:
3e:80:35:1f:f9:bd:53:1b:0d:50:04:bc:2e:49:8d:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:86:68:DE:5F:EB:68:0E:91:0D:68:80:08:24:4D:FA:B9:A0:E2
X509v3 Authority Key Identifier:
keyid:CA:B4:0A:0A:B9:5C:00:99:8E:18:4B:03:D9:C3:3A:54:17:7E:88:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrQKCrlcAJmOGEsD2cM6VBd-iK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/WWiGaN5f62gOkQ1ogAgkTfq5oOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/yrQKCrlcAJmOGEsD2cM6VBd-iK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.154.0/23
Signature Algorithm: sha256WithRSAEncryption
52:ba:37:b9:8b:d4:ab:24:0f:52:46:80:51:70:27:91:5d:24:
1e:51:63:f6:66:62:ba:6e:af:b5:a4:05:87:11:42:55:2f:dd:
7e:b1:ae:6f:de:fa:90:85:0e:12:da:0c:57:b1:18:40:08:8b:
9b:1b:0a:11:86:be:e2:77:64:25:48:67:09:f4:15:26:f5:a5:
4a:5f:16:2a:50:32:bd:58:d3:55:17:07:24:44:f3:1f:1c:46:
96:50:b7:c0:3e:45:f6:21:8f:13:f2:f2:01:1d:68:27:37:38:
03:25:69:05:7a:fb:1d:20:e6:7f:cf:16:45:2e:d4:90:0d:ac:
52:2d:42:eb:ad:02:1b:ad:bd:f5:9f:ce:74:5e:3e:ae:e3:d4:
08:f8:61:12:4a:d7:83:be:27:55:b2:4b:2a:e2:9e:90:51:38:
c2:7d:8f:d2:39:47:94:5a:0a:46:3e:d0:d4:39:1f:11:2e:b6:
3f:6b:a5:90:05:aa:00:b5:56:cb:0b:aa:dc:bd:a4:cc:7b:f5:
41:a9:0f:4c:17:60:d2:9b:2d:97:c4:87:22:75:1d:6f:60:5c:
10:0e:99:9a:c6:66:c8:2b:be:9e:92:ce:1e:e9:31:8c:e6:00:
54:4b:cb:85:cb:f0:3e:42:a9:bc:1b:ef:3b:a5:2c:82:fb:c1:
6c:e5:cf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:51 2026 by rpki-client