Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/WtZuEdOrbSF0F53gF5On4TZu09E.roa
File: WtZuEdOrbSF0F53gF5On4TZu09E.roa (raw, json)
Hash identifier: ZdGNkHA8YwpY5ME31O+kIDd2U5+orPq3E9gIuNT35NU=
Subject key identifier: 5A:D6:6E:11:D3:AB:6D:21:74:17:9D:E0:17:93:A7:E1:36:6E:D3:D1
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 019F74C3260C714BD8E0C0BD17D112F96439
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/WtZuEdOrbSF0F53gF5On4TZu09E.roa
Signing time: Sat 18 Jul 2026 10:26:14 +0000
ROA not before: Sat 18 Jul 2026 10:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 188.92.27.0/24 maxlen: 24
194.32.162.0/24 maxlen: 24
195.211.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:c3:26:0c:71:4b:d8:e0:c0:bd:17:d1:12:f9:64:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Jul 18 10:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ad66e11d3ab6d2174179de01793a7e1366ed3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:70:d4:40:ba:8b:8f:1f:ca:36:3b:1c:28:
ed:ff:2a:d0:c0:84:96:4b:59:e4:fe:ad:43:2f:bd:
13:f9:0b:8e:f0:7c:53:9d:6e:81:51:9c:f8:70:2d:
c8:83:32:b2:a0:8c:3e:b9:f9:ed:f3:01:41:23:fa:
1c:69:04:31:79:8f:ae:fd:b5:03:4e:67:ee:3d:11:
eb:ae:76:f1:36:fe:77:de:f0:66:06:d0:01:8c:e5:
de:c6:2b:72:df:c7:87:46:ae:e5:6b:b3:b8:ad:50:
93:5d:77:32:77:b8:75:4f:7a:6a:23:fb:b0:0f:c3:
3f:26:0f:20:f7:5f:64:54:3b:ac:4b:8b:1f:b3:42:
37:f0:cc:85:3f:b6:b7:17:08:ec:26:c6:95:a5:a4:
27:96:db:63:2e:94:f4:06:57:e6:de:22:cf:39:f8:
cf:d1:88:32:ae:e2:ed:d6:f5:9b:d8:f4:c1:cd:07:
fd:55:6f:11:0e:00:8c:69:cb:b2:49:4e:99:47:b0:
bf:4d:08:61:59:77:78:0c:9c:10:e1:cb:58:15:23:
42:9b:c1:dc:6d:c4:9c:c3:71:ac:e2:ae:9f:5e:a8:
95:4d:cb:7b:d7:c8:eb:28:33:52:55:63:f7:48:67:
94:7c:7e:b2:e7:36:c6:3f:85:1e:6b:aa:9e:da:4f:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:6E:11:D3:AB:6D:21:74:17:9D:E0:17:93:A7:E1:36:6E:D3:D1
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/WtZuEdOrbSF0F53gF5On4TZu09E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.27.0/24
194.32.162.0/24
195.211.127.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fc:e2:4d:93:03:fd:97:79:a7:e2:1e:19:0a:05:b6:d6:38:
fb:ce:64:66:ce:e1:80:9b:6f:b9:49:cc:bd:65:6e:ad:50:29:
23:d2:ad:4f:e6:f0:72:0d:5d:fd:19:02:fb:d9:91:6a:79:48:
2e:d2:95:5d:01:33:4d:86:ab:de:69:68:93:31:17:1c:12:61:
27:d5:c4:8a:58:d8:df:a1:36:45:df:80:5d:42:33:ed:25:c1:
69:c8:e0:dc:de:13:34:cc:29:91:d7:9a:6a:e2:bd:93:c3:09:
c3:28:46:a4:41:e1:82:08:d6:3a:1a:12:17:18:41:b7:06:09:
c2:97:52:c6:48:31:04:be:c3:eb:4b:cc:af:1b:4a:5b:b5:2e:
22:17:2a:0e:57:5c:98:6b:c1:1b:57:b4:c7:6f:cf:4d:95:a5:
9a:48:34:79:ec:81:05:5f:91:89:fd:6a:47:84:a0:96:d9:fd:
ea:68:94:46:41:a5:c0:2a:16:da:e3:5d:61:02:03:de:da:57:
66:9f:60:04:2a:65:9a:39:75:5d:f0:4f:a3:02:b1:0b:ec:1d:
2c:74:5e:34:47:6a:f5:44:c9:14:2c:8d:4e:ee:4b:5a:68:15:
a7:7a:46:ad:c3:cd:96:74:ae:eb:01:8a:b1:02:14:23:bd:2b:
71:28:0d:f7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ90wyYMcUvY4MC9F9ES+WQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4
MTUxNTcwHhcNMjYwNzE4MTAyNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWQ2NmUxMWQzYWI2ZDIxNzQxNzlkZTAxNzkzYTdlMTM2NmVkM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVRw1EC6i48fyjY7HCjt/yrQwISW
S1nk/q1DL70T+QuO8HxTnW6BUZz4cC3IgzKyoIw+ufnt8wFBI/ocaQQxeY+u/bUD
TmfuPRHrrnbxNv533vBmBtABjOXexity38eHRq7la7O4rVCTXXcyd7h1T3pqI/uw
D8M/Jg8g919kVDusS4sfs0I38MyFP7a3FwjsJsaVpaQnlttjLpT0Blfm3iLPOfjP
0YgyruLt1vWb2PTBzQf9VW8RDgCMacuySU6ZR7C/TQhhWXd4DJwQ4ctYFSNCm8Hc
bcScw3Gs4q6fXqiVTct718jrKDNSVWP3SGeUfH6y5zbGP4Uea6qe2k/X0QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFrWbhHTq20hdBed4BeTp+E2btPRMB8GA1UdIwQY
MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt
MzM4ODE0NjdhYzVlLzEvV3RadUVkT3JiU0YwRjUzZ0Y1T240VFp1MDlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl
LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvFwbAwQA
wiCiAwQAw9N/MA0GCSqGSIb3DQEBCwUAA4IBAQB0/OJNkwP9l3mn4h4ZCgW21jj7
zmRmzuGAm2+5Scy9ZW6tUCkj0q1P5vByDV39GQL72ZFqeUgu0pVdATNNhqveaWiT
MRccEmEn1cSKWNjfoTZF34BdQjPtJcFpyODc3hM0zCmR15pq4r2TwwnDKEakQeGC
CNY6GhIXGEG3BgnCl1LGSDEEvsPrS8yvG0pbtS4iFyoOV1yYa8EbV7THb89NlaWa
SDR57IEFX5GJ/WpHhKCW2f3qaJRGQaXAKhba411hAgPe2ldmn2AEKmWaOXVd8E+j
ArEL7B0sdF40R2r1RMkULI1O7ktaaBWnekatw82WdK7rAYqxAhQjvStxKA33
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:05 2026 by rpki-client