Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/wlGZBZDMaCX_aQwpp2T4nJuVa5U.roa
File: wlGZBZDMaCX_aQwpp2T4nJuVa5U.roa (raw, json)
Hash identifier: 256ACZVBiaeBcmN4S9TaoBdPfNmXXnRInCY8v0nfR2Q=
Subject key identifier: C2:51:99:05:90:CC:68:25:FF:69:0C:29:A7:64:F8:9C:9B:95:6B:95
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 019F5F8D9B582DBF1CBD69C0F3347D39AFB3
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/wlGZBZDMaCX_aQwpp2T4nJuVa5U.roa
Signing time: Tue 14 Jul 2026 07:35:43 +0000
ROA not before: Tue 14 Jul 2026 07:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59723
IP address blocks: 185.233.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:8d:9b:58:2d:bf:1c:bd:69:c0:f3:34:7d:39:af:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Jul 14 07:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c251990590cc6825ff690c29a764f89c9b956b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:0b:36:13:8c:0c:a7:9e:0e:c5:09:84:04:
f5:b3:27:98:41:c3:f0:b8:c6:cf:4f:5c:97:fd:5e:
3e:b1:6b:f6:3f:72:78:8b:c9:cf:76:81:b2:c6:4a:
3d:7d:3a:6c:6d:67:ef:20:89:9a:4b:5d:18:99:8f:
f6:af:8b:50:e4:99:ea:27:cd:62:55:af:ea:39:1d:
6a:31:b3:61:de:6a:b8:fa:0c:a9:83:ff:55:3a:63:
6d:13:6e:4c:0f:cd:20:eb:d6:25:f0:05:73:3b:bc:
1b:79:cc:dc:96:dc:84:6f:61:cc:b3:ed:e9:8e:75:
cf:c9:ec:7c:ee:e6:86:01:50:e6:97:22:50:d4:7b:
83:3d:60:75:fe:40:44:15:5f:27:f6:76:28:fa:d6:
c9:35:97:6f:25:a2:8a:82:cb:d6:50:60:5f:60:dd:
dc:43:80:1a:78:73:79:6d:38:5f:50:82:85:ef:77:
7f:96:ef:90:f2:68:a9:02:89:f0:79:04:96:b7:a1:
ed:26:66:81:35:b0:1e:52:71:e7:c1:4f:42:51:4c:
4a:bb:05:e4:82:bb:1e:c8:54:53:1f:46:58:65:f7:
18:49:eb:fc:db:ea:2e:26:3e:e1:ff:81:ac:cf:ed:
f1:0d:dc:50:d4:0b:7f:92:1a:d2:8b:4f:9d:20:37:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:51:99:05:90:CC:68:25:FF:69:0C:29:A7:64:F8:9C:9B:95:6B:95
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/wlGZBZDMaCX_aQwpp2T4nJuVa5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:30:3e:b8:fe:ea:52:7c:93:77:cf:00:ea:3d:5b:8a:6c:b8:
1e:b9:d4:9b:b1:ea:53:3d:9e:5e:0e:d9:f5:2b:74:c3:e5:98:
22:4d:b4:0d:df:10:e4:1f:4c:d3:62:d7:ae:07:68:82:36:b4:
1f:21:f2:61:9e:6a:4d:47:a9:b6:2d:68:d7:0b:35:9b:05:f9:
d3:d8:14:7d:cb:c2:84:54:42:25:5e:5a:a3:04:0f:9f:0e:a1:
b6:08:88:04:75:60:dc:8b:9d:2d:45:78:a4:d1:3c:8d:1a:75:
88:ed:8b:36:6d:bd:a8:db:ae:84:78:3a:de:f5:f9:44:cb:ba:
a2:54:40:eb:72:8b:e7:b4:6a:79:bb:99:40:96:58:6b:e7:aa:
8f:3f:70:3b:c5:46:00:7e:06:73:5c:3c:c8:59:c9:3e:f9:24:
55:32:86:41:b2:47:bd:da:04:39:53:e3:a3:e7:3b:e6:1c:6b:
c4:40:f8:11:93:a2:da:f7:a9:66:b8:f1:ea:1c:7f:ee:b3:71:
07:de:a7:60:b2:59:1b:0d:3a:1d:28:b1:e3:59:bb:0b:be:14:
ff:e6:21:6a:60:5d:a6:88:19:0f:d0:4f:36:a7:3a:a9:6d:a0:
b4:ff:94:06:a4:b3:58:2f:41:e8:c9:4e:ac:67:bb:dd:1a:8c:
1f:a1:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:15 2026 by rpki-client