Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/wWZeumQT3MBgVyI61YutHcN7xBc.roa
File: wWZeumQT3MBgVyI61YutHcN7xBc.roa (raw, json)
Hash identifier: ZGw/nN7EzuhLxCNfPxU2KnJ6Yzzw3B7hzu5qe4dcGKU=
Subject key identifier: C1:66:5E:BA:64:13:DC:C0:60:57:22:3A:D5:8B:AD:1D:C3:7B:C4:17
Certificate issuer: /CN=f23e21affc33677485a15a5e13121143b577ba9d
Certificate serial: 019CAFBCB95D2271BBAFA3B6BDE8C35858F5
Authority key identifier: F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/wWZeumQT3MBgVyI61YutHcN7xBc.roa
Signing time: Mon 02 Mar 2026 18:08:26 +0000
ROA not before: Mon 02 Mar 2026 18:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47317
IP address blocks: 93.190.48.0/21 maxlen: 24
185.7.24.0/22 maxlen: 24
2a02:c600::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:bc:b9:5d:22:71:bb:af:a3:b6:bd:e8:c3:58:58:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23e21affc33677485a15a5e13121143b577ba9d
Validity
Not Before: Mar 2 18:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1665eba6413dcc06057223ad58bad1dc37bc417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:25:25:a9:12:21:31:87:f2:7a:20:88:fb:
70:2c:32:17:55:1f:ba:77:d1:eb:3f:13:9b:db:ee:
8a:c8:39:4f:76:79:bb:11:ae:69:65:e5:9e:62:dd:
7e:ae:13:e6:43:bb:60:47:66:20:21:eb:ba:1a:e5:
d4:94:8c:15:47:c2:5c:c7:0a:fd:d2:e2:7f:af:00:
a3:65:ec:3a:44:31:55:af:36:d5:f7:68:09:55:8f:
3a:06:c9:4b:1b:4f:83:29:c5:53:51:9d:ab:60:de:
a1:e7:fa:2d:28:34:01:77:c4:75:52:2a:fd:e5:bc:
4a:ae:9e:04:86:83:bc:85:9d:87:01:5a:e3:8b:b6:
e6:cc:cf:8b:81:3b:02:2f:63:4e:e4:2d:c7:44:6c:
e9:e0:3f:8d:e4:0f:8c:f9:35:66:35:50:89:67:10:
fc:48:71:ed:5d:2d:17:73:6e:35:55:ea:8e:c4:2d:
b7:b1:2a:ea:59:c8:c2:af:ee:ad:9b:24:9e:18:ca:
1c:7b:e1:d8:60:e4:66:29:c0:05:99:05:a4:f7:0e:
e4:a0:f8:6a:2a:fe:5e:9a:95:35:25:2b:ae:4c:8d:
ce:64:ed:c2:8d:eb:70:59:fe:80:8e:b7:4d:f2:80:
a5:10:c3:cc:6d:7d:e7:dd:a0:f4:d7:13:e7:14:7d:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:5E:BA:64:13:DC:C0:60:57:22:3A:D5:8B:AD:1D:C3:7B:C4:17
X509v3 Authority Key Identifier:
keyid:F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/wWZeumQT3MBgVyI61YutHcN7xBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.48.0/21
185.7.24.0/22
IPv6:
2a02:c600::/29
Signature Algorithm: sha256WithRSAEncryption
0c:7c:70:e4:d5:4f:47:a0:44:6f:0e:cb:b8:7c:ac:07:2f:c8:
86:7f:a4:f8:5c:a3:38:94:e4:1b:aa:9b:6b:26:01:46:12:20:
f5:a6:98:80:39:0d:98:25:be:16:8a:2b:78:3f:a8:18:a0:f1:
12:f9:63:52:ed:8c:22:36:6a:05:a5:52:6a:cb:4b:05:33:cf:
cf:91:b7:37:df:75:01:b5:42:65:4c:85:73:90:1a:fd:fa:10:
41:1d:15:eb:71:50:b6:5e:4c:f0:66:06:ac:d8:30:d7:b7:9a:
3f:de:43:19:c7:99:34:d1:cd:74:65:95:81:8f:25:66:8f:98:
76:8a:81:65:be:52:d5:c1:bd:38:e4:30:12:22:b3:9a:bb:c9:
c9:46:7f:da:18:5b:33:6b:5d:d8:78:b4:78:7a:3d:95:42:82:
33:93:7d:0f:9d:97:01:50:c0:26:25:e9:19:ee:2c:b9:5b:f6:
ee:db:f9:c6:1b:8c:54:eb:9f:4d:5d:d2:76:f2:16:ac:3e:f3:
c2:12:fc:b3:70:24:01:7e:1d:b3:12:86:25:ed:ab:68:78:fd:
06:51:b3:8d:77:72:02:5a:1e:e8:8c:c9:93:96:7d:21:e2:36:
66:bb:3c:6f:54:a3:fc:1d:74:1c:49:f9:a0:24:8e:ed:a1:fc:
e3:00:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:33:54 2026 by rpki-client