Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa
File: Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa (raw, json)
Hash identifier: QbARyoCiF4BxJCcobyg9rCwtMBorp1r1V7vAEHyauzY=
Subject key identifier: 59:BD:09:15:27:38:62:FF:08:64:C0:93:A3:E8:38:B9:49:22:9F:1E
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 019CE7FC2E2998FE846B2F186E9A534B0920
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa
Signing time: Fri 13 Mar 2026 16:16:29 +0000
ROA not before: Fri 13 Mar 2026 16:16:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49559
IP address blocks: 185.212.249.0/24 maxlen: 24
185.212.250.0/24 maxlen: 24
185.239.26.0/24 maxlen: 24
185.239.27.0/24 maxlen: 24
193.57.44.0/24 maxlen: 24
193.57.45.0/24 maxlen: 24
193.57.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:fc:2e:29:98:fe:84:6b:2f:18:6e:9a:53:4b:09:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Mar 13 16:16:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59bd0915273862ff0864c093a3e838b949229f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:5d:80:4a:ad:95:5f:7f:67:21:ab:90:16:
67:32:4d:95:f3:4f:8b:f4:72:7d:7f:e6:a4:1f:73:
42:19:12:eb:45:43:13:29:ee:b0:4a:70:d7:3c:24:
b2:9f:b3:9d:30:72:06:e0:8e:8b:1f:04:8f:ef:96:
02:fc:2d:da:40:b5:b5:46:22:e5:bd:a8:b2:08:85:
9f:a1:ca:2b:e3:f3:2a:3e:6a:94:12:66:ba:92:74:
08:1c:b9:e8:a6:45:1e:0e:43:56:5b:61:1a:30:44:
d2:5e:72:06:f5:e4:e7:8c:39:10:ca:d1:7d:bc:ff:
f4:8a:93:b7:40:d0:24:8f:b1:97:5e:3b:86:a0:ed:
27:93:aa:1f:18:91:87:94:07:31:f9:60:69:5c:e8:
d3:37:a0:d2:5a:3a:e1:51:8e:32:6e:a3:31:82:da:
3e:db:68:f7:f7:2b:ec:52:da:71:f0:82:4a:bb:80:
28:c9:8a:b8:fe:31:59:77:f2:eb:a0:af:3f:10:cb:
14:c8:32:67:7a:28:16:83:83:de:5a:af:ea:41:cb:
0f:60:47:e6:05:54:ab:17:98:98:45:fa:14:96:73:
56:38:82:f1:31:ee:21:d7:f1:68:52:fb:3d:59:33:
ba:38:eb:bb:a6:f8:c3:4d:d6:9c:ef:d6:8c:b2:fe:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:09:15:27:38:62:FF:08:64:C0:93:A3:E8:38:B9:49:22:9F:1E
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.249.0-185.212.250.255
185.239.26.0/23
193.57.44.0-193.57.46.255
Signature Algorithm: sha256WithRSAEncryption
0c:ae:f9:73:83:c8:31:98:a0:21:b1:f1:9c:57:24:74:1d:30:
c8:72:22:a8:59:ca:f7:4c:0e:b3:07:57:63:62:c8:63:9d:0a:
d7:7e:71:9b:76:1c:0b:4f:af:19:5d:06:73:5a:a9:5d:c1:e7:
65:aa:ac:fe:70:1b:cf:59:9b:62:79:b8:fa:04:1b:73:73:42:
09:a2:e4:16:db:2a:81:f7:46:53:e6:7b:53:b2:83:5d:7b:d8:
b7:41:41:9e:c3:dd:ba:e8:18:5a:7d:fc:a5:6b:df:65:08:98:
75:ad:13:b0:fd:58:56:0f:47:9b:08:67:8a:10:c9:cf:19:7d:
c1:05:c5:4f:57:00:f8:fc:89:ea:8a:d1:a5:cf:85:a4:5f:90:
14:7e:d2:52:13:ba:68:2d:eb:53:70:6f:08:ee:7e:b2:3e:af:
e5:42:9a:e7:47:9c:41:a2:25:7b:14:d6:6b:4c:da:7e:d8:c7:
0b:34:01:54:40:9b:f3:54:aa:52:d4:6e:83:94:18:73:c1:92:
d1:e7:9b:71:ff:ed:12:14:b5:ae:57:66:81:eb:2a:d8:dc:78:
e8:9c:de:7a:cd:90:12:3a:c9:de:2b:3f:ca:2d:7c:ea:d9:21:
86:3d:38:3b:17:07:fd:f5:9a:75:1a:9b:5c:e6:ed:28:7c:31:
af:31:c8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:16:15 2026 by rpki-client