Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/WeUtp_Wo1t_B3_kDLfw7hscjYRk.roa
File: WeUtp_Wo1t_B3_kDLfw7hscjYRk.roa (raw, json)
Hash identifier: GpBHGUwjt/PtYZx7u3aJW4dofQfCg23mdeFjGaXOPrA=
Subject key identifier: 59:E5:2D:A7:F5:A8:D6:DF:C1:DF:F9:03:2D:FC:3B:86:C7:23:61:19
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 019F677238493716FE0C156016C2CB1A1CD8
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/WeUtp_Wo1t_B3_kDLfw7hscjYRk.roa
Signing time: Wed 15 Jul 2026 20:22:46 +0000
ROA not before: Wed 15 Jul 2026 20:22:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39401
IP address blocks: 91.192.236.0/22 maxlen: 24
185.229.138.0/24 maxlen: 24
193.93.24.0/22 maxlen: 24
2a0d:9a00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:72:38:49:37:16:fe:0c:15:60:16:c2:cb:1a:1c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Jul 15 20:22:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59e52da7f5a8d6dfc1dff9032dfc3b86c7236119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:eb:85:d0:6a:f0:46:f4:1b:e3:6c:b4:e9:
3c:91:60:9f:c8:91:f6:10:94:67:b3:e4:7e:f2:c9:
be:b2:d5:9a:a4:d9:cf:e4:eb:73:87:5f:d1:e1:56:
cf:f1:c7:43:22:b4:c6:36:7b:8e:4c:c2:1c:48:5d:
6d:d4:04:57:3d:93:90:e7:1c:4a:aa:be:cb:5c:04:
fc:cd:c3:42:ff:d3:b7:ab:74:57:2f:15:e7:e9:30:
02:49:d7:31:1c:f1:a4:e6:43:5f:78:cd:8e:55:18:
09:f1:81:47:7c:99:53:70:28:08:1a:d3:fb:c0:24:
c3:c2:e3:6e:bc:57:aa:bb:4d:21:9a:e5:62:f6:80:
48:2e:92:bb:97:7c:02:38:6d:a2:dc:00:81:11:fb:
dc:4c:b4:29:2b:f2:68:e3:ec:02:e1:33:1d:1a:1f:
24:bd:d3:46:63:07:a6:5e:50:06:6a:d3:57:a2:64:
e1:ee:3d:bd:51:26:8d:9b:eb:5f:39:31:62:2d:9f:
e7:85:3a:86:f1:1e:12:e1:9b:1d:29:86:3e:82:cb:
6d:4a:e9:78:bf:c8:d8:0c:88:7c:e0:50:4d:9c:cc:
42:9a:82:08:87:41:a1:7d:61:e3:8d:d4:ad:a8:33:
4b:71:86:24:12:18:03:0c:6a:09:d7:b8:af:93:42:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E5:2D:A7:F5:A8:D6:DF:C1:DF:F9:03:2D:FC:3B:86:C7:23:61:19
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/WeUtp_Wo1t_B3_kDLfw7hscjYRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.236.0/22
185.229.138.0/24
193.93.24.0/22
IPv6:
2a0d:9a00::/32
Signature Algorithm: sha256WithRSAEncryption
11:81:c6:a6:b9:a4:6a:75:ea:14:75:e3:86:45:fc:32:0f:60:
23:ba:76:68:2f:dc:41:73:84:7c:dd:82:6f:6e:5f:57:80:96:
a1:cd:00:16:27:b7:95:c2:39:2b:90:a2:6e:96:a1:eb:e9:7b:
80:c0:14:d4:84:3e:dd:5d:7e:cb:f7:81:e7:73:d4:dd:05:77:
19:68:be:25:19:0f:ec:4a:94:75:75:f2:cf:52:f4:ca:eb:3a:
7b:d0:3c:f3:b3:42:d7:cc:28:8f:03:3c:2d:e9:46:b8:4e:99:
c3:1c:f1:8e:1f:80:16:94:bb:c2:77:6d:f9:8e:60:92:39:68:
c6:a5:4c:82:1e:ad:81:e7:c9:a6:c6:fe:51:30:8d:27:a2:f7:
fe:f3:e6:e6:60:8f:17:86:be:9a:bc:4b:d8:c2:6e:e1:f5:ba:
b6:68:6e:e7:31:93:da:62:22:4b:2d:c1:d9:b3:b0:2d:b1:4d:
a3:2d:5c:27:ca:dc:e0:a7:b9:65:48:cc:e5:18:a8:8a:4e:1e:
93:36:f7:82:86:25:e2:63:8a:d1:6d:8f:f4:7a:68:6c:6f:8c:
64:2a:63:ee:34:d0:eb:c4:c0:bf:68:ac:0f:ff:ee:e7:74:07:
26:01:a5:69:68:04:ee:aa:8f:f4:5f:07:3d:cb:eb:6f:74:e2:
12:55:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:05 2026 by rpki-client