Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/wtj2zhrszj8EZPv9_c-kD8-d_kw.roa
File: wtj2zhrszj8EZPv9_c-kD8-d_kw.roa (raw, json)
Hash identifier: r5hHxvar05WsnD97m7vdBSbjiHPcNLIO8hNC+KUpW8I=
Subject key identifier: C2:D8:F6:CE:1A:EC:CE:3F:04:64:FB:FD:FD:CF:A4:0F:CF:9D:FE:4C
Certificate issuer: /CN=e3db3111ea5992cfda642fb8f29c86354a63ac6d
Certificate serial: 019C9B100EDD61E5CBB52E96AEF0B76CAA42
Authority key identifier: E3:DB:31:11:EA:59:92:CF:DA:64:2F:B8:F2:9C:86:35:4A:63:AC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/wtj2zhrszj8EZPv9_c-kD8-d_kw.roa
Signing time: Thu 26 Feb 2026 17:47:26 +0000
ROA not before: Thu 26 Feb 2026 17:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204351
IP address blocks: 185.241.240.0/24 maxlen: 24
185.241.241.0/24 maxlen: 24
185.241.242.0/24 maxlen: 24
185.241.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:10:0e:dd:61:e5:cb:b5:2e:96:ae:f0:b7:6c:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3db3111ea5992cfda642fb8f29c86354a63ac6d
Validity
Not Before: Feb 26 17:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2d8f6ce1aecce3f0464fbfdfdcfa40fcf9dfe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:1d:93:4b:49:18:2c:e8:aa:10:9e:44:20:
68:bc:df:9e:d0:5d:4a:38:f1:e4:60:05:c9:df:88:
40:05:61:59:1c:0a:5a:2e:53:19:49:27:4d:36:bd:
71:5c:c9:d3:b8:e8:f4:d2:6b:82:53:95:5f:06:89:
80:27:cf:86:f8:90:b6:04:25:4b:80:2d:69:58:f3:
6c:b2:9e:ca:10:a9:05:55:4f:c1:34:50:ef:96:93:
ab:9f:67:d9:2a:2e:b6:ab:fd:d3:cd:be:ff:e6:a8:
89:ce:d1:fd:9b:c5:0b:a8:15:98:a7:56:1b:de:73:
da:77:79:14:ca:eb:9b:95:cc:f6:ee:2f:5e:d0:86:
b1:0f:74:b0:d7:8e:fa:36:11:57:b9:48:da:05:ea:
d9:c9:65:12:83:e6:74:99:5f:ca:61:fe:e2:31:c7:
7b:1e:e0:16:5c:60:4c:ef:2c:86:7b:d4:55:5b:b1:
5f:50:89:ae:a8:02:4d:3a:0e:c0:70:61:41:f4:04:
16:9e:f2:21:a3:6a:d3:ee:96:27:f9:d1:15:68:64:
27:ae:a1:84:47:b8:4e:d7:96:8f:ba:c7:d1:c3:29:
28:30:7d:6e:18:f7:bc:f7:a1:d9:a6:95:64:e4:ab:
05:0d:55:b4:f1:a9:57:b5:8f:76:3f:24:3e:74:05:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:F6:CE:1A:EC:CE:3F:04:64:FB:FD:FD:CF:A4:0F:CF:9D:FE:4C
X509v3 Authority Key Identifier:
keyid:E3:DB:31:11:EA:59:92:CF:DA:64:2F:B8:F2:9C:86:35:4A:63:AC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/wtj2zhrszj8EZPv9_c-kD8-d_kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:53:76:44:6e:90:f7:ee:75:58:50:de:c3:cb:dd:ff:8a:55:
36:26:45:39:fe:6f:22:bd:16:66:0c:fd:b3:18:fe:0c:5c:8c:
3d:f3:a5:e9:53:82:ff:b7:63:21:7f:9f:73:36:4a:78:dd:59:
c3:1e:7d:9b:b5:7d:44:bb:a6:3a:6d:85:d5:5d:21:f6:4b:06:
6d:03:ec:28:d9:bd:5e:33:e9:68:c8:3c:18:54:9c:e0:bf:c7:
57:7c:73:0c:83:dc:bc:bf:a8:34:79:50:85:22:4d:2f:02:6b:
b9:9e:e8:7a:10:ee:30:23:4b:a1:cf:71:72:23:1b:ce:4e:ca:
b2:97:88:df:e8:8f:ee:b3:ff:13:f7:be:67:95:b8:a9:d2:0e:
18:2a:ea:90:0f:18:89:69:6a:25:10:2f:b4:c8:d8:ae:d5:4c:
80:59:2a:bd:4f:06:28:32:15:77:e7:28:1e:e3:2e:c3:5c:a6:
b1:a5:bd:dd:3e:bc:74:fd:e6:d9:31:70:10:59:48:b2:e3:42:
3a:8e:f1:4e:9c:26:2d:07:e9:75:99:4d:0b:d3:d6:27:26:b8:
b3:ed:77:b1:29:64:0f:52:69:33:a4:03:ce:71:e7:67:79:6c:
1f:d1:4e:a7:d6:9e:99:e1:be:fb:33:eb:a7:2f:6f:fe:2a:14:
5e:50:96:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:16:10 2026 by rpki-client