Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/wsBY1hQB4VwOF7aL1jCKyn3x_1Q.roa
File: wsBY1hQB4VwOF7aL1jCKyn3x_1Q.roa (raw, json)
Hash identifier: DtUB3FEcBbo8RHf3v0MZKsrQqRBn+Ep3UIkhR2wSWSQ=
Subject key identifier: C2:C0:58:D6:14:01:E1:5C:0E:17:B6:8B:D6:30:8A:CA:7D:F1:FF:54
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 01A0E7D3381883B1F676E51A750C3D786631
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/wsBY1hQB4VwOF7aL1jCKyn3x_1Q.roa
Signing time: Mon 28 Sep 2026 11:42:54 +0000
ROA not before: Mon 28 Sep 2026 11:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216303
IP address blocks: 178.175.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:d3:38:18:83:b1:f6:76:e5:1a:75:0c:3d:78:66:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Sep 28 11:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2c058d61401e15c0e17b68bd6308aca7df1ff54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:ab:73:fe:2c:d8:47:ca:25:70:8b:35:2d:
5b:b5:0f:de:84:e4:9b:8d:82:91:f4:2a:c4:5d:96:
59:00:cb:ec:d1:cd:fb:b4:ff:3a:69:b7:ee:94:65:
8e:1d:bd:7d:d3:eb:39:0f:d2:41:36:30:cf:25:64:
f3:d4:61:73:6e:f3:e9:51:8a:f9:4a:9a:3f:85:bb:
03:c2:4a:63:4b:2d:c3:da:ae:ae:6b:7f:30:7c:cd:
94:6c:70:d5:14:8b:44:00:ce:96:a0:93:41:c5:e7:
3e:f1:a7:d2:de:59:d9:8b:4f:d2:c6:3a:9e:24:88:
52:02:97:5d:6a:ed:5a:b3:2c:68:95:4b:9f:4d:24:
33:26:9d:06:0d:53:2a:da:9a:36:1f:8e:a6:71:50:
c4:3b:7f:f2:c3:a1:96:97:f6:25:e1:81:74:c3:da:
ce:74:b4:84:88:f2:ee:8c:0b:e2:5f:58:23:e8:25:
38:7c:17:4d:57:92:16:2d:3a:40:98:ee:3c:f6:70:
c5:54:cd:c6:56:e7:32:73:25:fc:f7:c9:fd:95:bd:
63:67:b6:68:89:d5:88:01:aa:0b:49:04:0b:45:b6:
ca:b0:76:06:d9:11:04:6d:85:48:83:1e:be:79:f1:
f0:ac:63:ef:a1:54:c8:b5:af:8c:f8:c7:b7:d1:9f:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:58:D6:14:01:E1:5C:0E:17:B6:8B:D6:30:8A:CA:7D:F1:FF:54
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/wsBY1hQB4VwOF7aL1jCKyn3x_1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.173.0/24
Signature Algorithm: sha256WithRSAEncryption
61:09:29:11:f8:c8:22:50:d9:aa:72:a9:99:e6:52:b7:b4:77:
4b:a7:15:04:e0:6f:a0:05:00:96:6b:d5:d5:9c:cb:6b:06:ba:
78:48:22:18:06:d2:53:04:14:c8:13:ae:57:ae:b1:1f:5f:d1:
dd:c7:8a:ed:3d:78:f8:fd:7b:31:27:d8:d6:c6:1e:d5:46:f2:
33:45:39:2b:ec:5f:84:8b:53:7b:11:3a:ee:2f:ae:eb:ab:2d:
be:1a:30:e6:9f:9e:00:93:6f:28:74:46:06:45:03:1e:66:f3:
6b:b1:0f:23:76:ed:c0:14:0a:35:4b:ae:81:5a:cb:4a:22:f3:
66:3b:a1:5d:75:7e:74:a3:65:c7:3e:3c:59:2a:8c:9d:ed:ad:
4f:07:c4:e0:52:e5:aa:05:71:fd:c4:04:66:ca:a7:45:78:6a:
79:45:b9:be:e6:53:7a:a4:67:0c:0e:ec:3e:72:5a:54:34:8b:
35:b8:eb:87:f2:e9:1d:d8:4a:4b:38:50:a6:5f:f7:9c:dc:fc:
3c:7d:f3:61:36:65:40:8d:02:b1:c8:0f:5a:f8:25:7b:4d:64:
22:cf:38:50:fa:ad:1e:c4:5c:25:e7:96:c1:5e:16:c0:19:0c:
32:6d:05:be:3e:69:16:30:c7:49:a3:75:37:a8:96:44:87:fb:
6b:02:58:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDn0zgYg7H2duUadQw9eGYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTkxMjA4MDljMjNiZjMwMzNlM2Y1NzM5OTUyNzZmMGM3
YTI1MzMwHhcNMjYwOTI4MTE0MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmMwNThkNjE0MDFlMTVjMGUxN2I2OGJkNjMwOGFjYTdkZjFmZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwOrc/4s2EfKJXCLNS1btQ/ehOSb
jYKR9CrEXZZZAMvs0c37tP86abfulGWOHb190+s5D9JBNjDPJWTz1GFzbvPpUYr5
Spo/hbsDwkpjSy3D2q6ua38wfM2UbHDVFItEAM6WoJNBxec+8afS3lnZi0/Sxjqe
JIhSApddau1asyxolUufTSQzJp0GDVMq2po2H46mcVDEO3/yw6GWl/Yl4YF0w9rO
dLSEiPLujAviX1gj6CU4fBdNV5IWLTpAmO489nDFVM3GVucycyX898n9lb1jZ7Zo
idWIAaoLSQQLRbbKsHYG2REEbYVIgx6+efHwrGPvoVTIta+M+Me30Z+2WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMLAWNYUAeFcDhe2i9Ywisp98f9UMB8GA1UdIwQY
MBaAFERZEggJwjvzAz4/VzmVJ28MeiUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt
Y2NhNzlhNjk4MjBhLzEvd3NCWTFoUUI0VndPRjdhTDFqQ0t5bjN4XzFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh
LzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+tMA0G
CSqGSIb3DQEBCwUAA4IBAQBhCSkR+MgiUNmqcqmZ5lK3tHdLpxUE4G+gBQCWa9XV
nMtrBrp4SCIYBtJTBBTIE65XrrEfX9Hdx4rtPXj4/XsxJ9jWxh7VRvIzRTkr7F+E
i1N7ETruL67rqy2+GjDmn54Ak28odEYGRQMeZvNrsQ8jdu3AFAo1S66BWstKIvNm
O6FddX50o2XHPjxZKoyd7a1PB8TgUuWqBXH9xARmyqdFeGp5Rbm+5lN6pGcMDuw+
clpUNIs1uOuH8ukd2EpLOFCmX/ec3Pw8ffNhNmVAjQKxyA9a+CV7TWQizzhQ+q0e
xFwl55bBXhbAGQwybQW+PmkWMMdJo3U3qJZEh/trAlhl
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:11 2026 by rpki-client