Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/WGmo_mU3SAa7xrV4ZnvE-M0GlaY.roa
File: WGmo_mU3SAa7xrV4ZnvE-M0GlaY.roa (raw, json)
Hash identifier: pAqCFCdg2/as0581Q0MGLjKUIL2u1WKZ22qGZB9i2AA=
Subject key identifier: 58:69:A8:FE:65:37:48:06:BB:C6:B5:78:66:7B:C4:F8:CD:06:95:A6
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019D016C5380389050F927564CA4DECAB80A
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/WGmo_mU3SAa7xrV4ZnvE-M0GlaY.roa
Signing time: Wed 18 Mar 2026 14:49:29 +0000
ROA not before: Wed 18 Mar 2026 14:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57008
IP address blocks: 85.198.88.0/22 maxlen: 22
85.198.88.0/24 maxlen: 24
85.198.89.0/24 maxlen: 24
85.198.90.0/24 maxlen: 24
85.198.91.0/24 maxlen: 24
176.123.180.0/22 maxlen: 22
176.123.180.0/24 maxlen: 24
176.123.181.0/24 maxlen: 24
176.123.182.0/24 maxlen: 24
176.123.183.0/24 maxlen: 24
185.36.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:6c:53:80:38:90:50:f9:27:56:4c:a4:de:ca:b8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Mar 18 14:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5869a8fe65374806bbc6b578667bc4f8cd0695a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:97:3a:e8:ba:81:a3:53:81:ef:2e:b6:bb:
2f:f8:67:a4:ee:ad:e6:45:87:98:fd:49:01:37:1a:
1b:16:96:65:3c:88:d4:cc:21:12:a4:b7:da:b0:a8:
95:19:f3:2f:0b:7c:f0:5e:26:d4:30:7d:b9:e6:cd:
1b:be:ef:66:a9:8d:6e:6c:3a:40:cd:4a:aa:ac:e3:
86:e4:0e:1c:e2:ce:cc:86:2f:62:97:84:b1:b5:2f:
43:74:e7:d7:52:16:d8:ed:82:f0:f6:c7:1a:c5:98:
93:1e:b6:07:26:a8:99:f0:7c:09:2c:be:4c:a4:52:
1d:a6:10:1f:66:19:04:37:f4:c0:8a:c3:77:0d:eb:
5e:48:28:3a:9f:9a:ed:83:fd:e1:2d:da:ce:03:69:
ef:4c:1c:9c:a7:61:86:08:2b:11:c0:d3:96:62:c0:
04:2e:bd:54:db:f3:c3:65:2d:12:64:57:1f:18:91:
ba:d4:1d:76:47:09:31:0f:16:8d:97:01:50:f0:77:
25:01:6e:ba:8a:11:a6:a1:75:a3:0a:83:66:75:45:
06:08:38:bc:8a:87:9f:28:57:3d:09:3f:11:fd:20:
9f:61:73:48:ec:d1:fb:8b:7d:a0:47:14:ee:d6:cf:
cf:9a:64:e0:13:8b:80:ea:9a:64:04:ae:b8:3f:49:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:A8:FE:65:37:48:06:BB:C6:B5:78:66:7B:C4:F8:CD:06:95:A6
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/WGmo_mU3SAa7xrV4ZnvE-M0GlaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.88.0/22
176.123.180.0/22
185.36.144.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:93:75:61:a0:fb:e1:c2:fb:ca:47:3c:b4:92:86:6b:b4:2d:
fc:ca:86:56:d3:26:f1:28:97:4c:7b:86:69:cd:e2:9e:35:21:
de:bd:58:e1:d9:b7:53:be:ac:e7:b3:c8:34:8c:eb:5c:f1:07:
a2:28:11:b2:41:c5:66:71:ba:d4:31:85:59:37:b2:0e:11:d7:
96:58:a3:cf:22:4b:2e:34:28:ad:9c:32:97:a6:fd:b9:9b:12:
e3:3d:12:f1:26:05:be:f0:6c:52:b3:dd:90:2d:42:ef:de:d2:
79:02:96:02:5c:0c:fe:0b:3f:19:e5:0e:9a:12:88:d7:6d:f2:
f2:fd:23:69:67:aa:46:7b:fb:21:4b:ac:1b:58:9a:80:77:0e:
3b:4a:7a:c4:4f:22:a8:bc:8b:d1:1c:e8:70:dd:9e:e8:24:06:
bd:d7:14:14:86:cf:d9:c2:81:42:01:d6:c6:f7:d5:f3:0b:d8:
da:d1:ec:d4:71:2f:cf:ba:d0:bb:3c:7d:0a:17:c0:3b:11:92:
f8:6a:b0:5f:9f:23:f2:7e:28:2a:95:6f:8f:05:5c:db:37:49:
f5:4c:08:94:95:ce:ab:a2:32:78:5c:28:f3:f6:4a:c4:c5:40:
e6:d5:06:8f:22:20:fa:6e:d6:64:3e:5f:a1:d7:cf:46:38:cd:
de:d8:ee:bc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ0BbFOAOJBQ+SdWTKTeyrgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlODIyM2VkZjBhZTQyNTYwZThmMGMyY2IwNTllM2M4ZjVh
ZTRkMWEwHhcNMjYwMzE4MTQ0OTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODY5YThmZTY1Mzc0ODA2YmJjNmI1Nzg2NjdiYzRmOGNkMDY5NWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyqXOui6gaNTge8utrsv+Gek7q3m
RYeY/UkBNxobFpZlPIjUzCESpLfasKiVGfMvC3zwXibUMH255s0bvu9mqY1ubDpA
zUqqrOOG5A4c4s7Mhi9il4SxtS9DdOfXUhbY7YLw9scaxZiTHrYHJqiZ8HwJLL5M
pFIdphAfZhkEN/TAisN3DeteSCg6n5rtg/3hLdrOA2nvTBycp2GGCCsRwNOWYsAE
Lr1U2/PDZS0SZFcfGJG61B12RwkxDxaNlwFQ8HclAW66ihGmoXWjCoNmdUUGCDi8
ioefKFc9CT8R/SCfYXNI7NH7i32gRxTu1s/PmmTgE4uA6ppkBK64P0mOYQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFhpqP5lN0gGu8a1eGZ7xPjNBpWmMB8GA1UdIwQY
MBaAFI6CI+3wrkJWDo8MLLBZ48j1rk0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEt
ZDE2ODk1ZTBlMThlLzEvV0dtb19tVTNTQWE3eHJWNFpudkUtTTBHbGFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEtZDE2ODk1ZTBlMThl
LzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVcZYAwQC
sHu0AwQAuSSQMA0GCSqGSIb3DQEBCwUAA4IBAQDRk3VhoPvhwvvKRzy0koZrtC38
yoZW0ybxKJdMe4ZpzeKeNSHevVjh2bdTvqzns8g0jOtc8QeiKBGyQcVmcbrUMYVZ
N7IOEdeWWKPPIksuNCitnDKXpv25mxLjPRLxJgW+8GxSs92QLULv3tJ5ApYCXAz+
Cz8Z5Q6aEojXbfLy/SNpZ6pGe/shS6wbWJqAdw47SnrETyKovIvRHOhw3Z7oJAa9
1xQUhs/ZwoFCAdbG99XzC9ja0ezUcS/PutC7PH0KF8A7EZL4arBfnyPyfigqlW+P
BVzbN0n1TAiUlc6rojJ4XCjz9krExUDm1QaPIiD6btZkPl+h189GOM3e2O68
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:11 2026 by rpki-client