Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/BWIZr-nud-sEKOoW3DCRA8EhEvc.roa
File: BWIZr-nud-sEKOoW3DCRA8EhEvc.roa (raw, json)
Hash identifier: 6TCqPkoGCc+2S8ZxG8MXnHCO6YpDnBpJUoZP1mlGMlc=
Subject key identifier: 05:62:19:AF:E9:EE:77:EB:04:28:EA:16:DC:30:91:03:C1:21:12:F7
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 019EFDCDC83ACBD1E9F5F17C7A9FEA63E00D
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/BWIZr-nud-sEKOoW3DCRA8EhEvc.roa
Signing time: Thu 25 Jun 2026 08:03:02 +0000
ROA not before: Thu 25 Jun 2026 08:03:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57087
IP address blocks: 5.182.128.0/22 maxlen: 24
193.163.40.0/22 maxlen: 24
193.163.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:cd:c8:3a:cb:d1:e9:f5:f1:7c:7a:9f:ea:63:e0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Jun 25 08:03:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=056219afe9ee77eb0428ea16dc309103c12112f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:5d:01:40:32:f5:02:8b:6e:ba:13:67:e7:
6f:76:61:3f:dd:68:31:cc:92:24:70:aa:39:f6:45:
16:41:3c:d9:db:e6:7f:a8:9d:25:b7:1a:29:ef:0a:
c8:bb:10:71:14:03:8c:77:0f:da:13:c0:e8:8c:7a:
7a:f6:d9:85:3d:1e:47:83:08:4f:4c:eb:2f:1a:7c:
60:6a:0c:58:9e:50:0b:6b:3e:52:a6:3e:52:dc:e1:
af:45:e4:c8:04:18:88:70:38:0a:3b:8a:25:ce:5d:
2d:0d:2f:b0:e9:ea:0c:26:f1:e0:71:5e:ad:3c:3e:
66:5e:f1:45:b7:7b:b2:a3:3b:aa:cc:28:b8:4a:2c:
8a:70:a0:0b:1e:20:77:d1:2a:cf:89:8f:fa:4b:0d:
ff:04:8b:73:2b:d7:5a:c6:09:f2:a1:ae:6d:2c:31:
ca:04:0c:6f:3b:41:ab:fd:16:f7:68:36:39:d8:fd:
50:3f:c8:e3:4e:f4:f9:a6:98:f6:df:1e:f8:4e:7b:
72:a1:db:f1:9b:57:58:6e:8d:0d:1b:e0:bc:0c:9f:
09:a9:59:00:21:1b:f6:17:7d:2f:57:c6:e0:4c:8f:
f8:c4:bf:1b:6e:84:29:ae:e8:b4:47:07:5b:08:88:
47:49:0b:78:07:09:66:9c:c4:66:ef:af:22:4c:c5:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:19:AF:E9:EE:77:EB:04:28:EA:16:DC:30:91:03:C1:21:12:F7
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/BWIZr-nud-sEKOoW3DCRA8EhEvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.128.0/22
193.163.40.0-193.163.44.255
Signature Algorithm: sha256WithRSAEncryption
d0:49:1a:c2:35:6a:cf:fd:58:cf:50:b0:d2:79:5d:98:3c:91:
c5:7c:14:51:0a:d9:81:84:27:eb:df:6e:c5:e7:82:80:48:1c:
42:3e:b0:c9:e5:b5:4b:35:af:26:74:49:67:2f:74:45:8c:71:
39:86:ce:4d:70:76:35:f8:ef:ab:88:7d:42:06:bc:cf:bd:8d:
6e:e4:29:0d:63:1b:4a:2b:07:6a:ae:33:25:9a:d2:a8:4f:24:
d7:dc:24:b6:b0:6b:89:28:f1:0a:5f:f0:8e:78:b8:01:9f:d9:
2d:f9:4e:23:df:86:6f:a3:db:74:40:6b:a4:e0:2f:94:2b:da:
a6:6f:2c:14:e8:05:7e:f1:e5:8d:23:bf:c8:7c:90:f2:e6:cb:
d8:3f:f3:fa:a5:60:fd:be:77:d8:52:85:72:ca:30:2e:9a:e2:
c8:cb:fe:72:a8:66:dc:dc:aa:66:a9:07:ef:92:87:3f:51:36:
0b:72:a6:b8:88:82:62:7a:82:22:61:9c:3d:45:eb:a6:f8:e8:
69:ea:2a:a3:52:3d:7a:f8:bf:a0:72:78:2b:7e:a0:3f:be:90:
01:a9:ac:76:ed:8c:1e:04:c4:e9:ec:fc:05:e5:16:46:2a:af:
f6:fa:41:28:5c:a7:44:03:c6:05:25:bb:e0:99:e6:9c:32:e1:
c1:d8:78:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:54 2026 by rpki-client