Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wYBacgHuh59a_SWlFW4wlKiL9V4.roa
File: wYBacgHuh59a_SWlFW4wlKiL9V4.roa (raw, json)
Hash identifier: 8oWvdJPWbxJqpzTYKoz+LG08v2xSyJAu6RuLCoJJk0w=
Subject key identifier: C1:80:5A:72:01:EE:87:9F:5A:FD:25:A5:15:6E:30:94:A8:8B:F5:5E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F3ABA6DD67C78C6FD6F3049E2C02CF32D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wYBacgHuh59a_SWlFW4wlKiL9V4.roa
Signing time: Tue 07 Jul 2026 03:58:44 +0000
ROA not before: Tue 07 Jul 2026 03:58:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 189.12.55.0/24 maxlen: 24
189.31.210.0/24 maxlen: 24
189.31.211.0/24 maxlen: 24
189.73.26.0/24 maxlen: 24
189.75.177.0/24 maxlen: 24
191.44.20.0/24 maxlen: 24
191.44.22.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
191.222.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:ba:6d:d6:7c:78:c6:fd:6f:30:49:e2:c0:2c:f3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 7 03:58:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1805a7201ee879f5afd25a5156e3094a88bf55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:62:7f:5d:7a:dc:fe:23:1a:06:df:e0:4c:
21:1b:20:33:b1:e6:c4:b5:8a:0f:77:b9:f9:e1:fe:
77:cf:e6:52:b1:36:c4:b0:48:a8:08:6d:2b:49:9c:
78:81:09:5a:6c:c8:48:26:68:99:9e:28:12:e3:fe:
bf:bc:ba:ba:f1:93:ac:43:f2:1e:cd:03:4d:ef:31:
64:a9:2f:98:1a:d8:2a:56:66:88:0f:a1:00:35:20:
14:37:64:91:d6:df:42:57:76:e6:f7:df:1c:61:6b:
c0:bb:f5:bc:79:44:00:71:ec:f1:14:03:0b:ff:79:
72:5b:00:39:ef:b2:b3:94:fb:3e:49:c5:3a:32:e9:
a1:20:e4:e9:53:36:41:86:f8:fa:86:7c:40:f6:36:
3a:4b:a6:c6:20:94:bf:d1:b6:56:8c:4b:77:9f:d4:
3f:0a:99:55:51:84:38:d7:84:52:ef:35:75:aa:95:
68:96:06:72:04:88:dc:cc:00:05:4b:fa:d2:c2:29:
bd:63:5d:d2:99:c5:dd:76:fa:b9:37:bc:e5:55:94:
5f:61:c2:4c:19:10:51:0b:46:e3:ad:32:65:2f:8a:
25:b1:ae:45:8e:c9:86:d8:d9:03:80:a6:60:1d:c4:
2c:30:5c:e1:43:4d:78:c7:e4:f8:be:fc:3d:04:44:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:5A:72:01:EE:87:9F:5A:FD:25:A5:15:6E:30:94:A8:8B:F5:5E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wYBacgHuh59a_SWlFW4wlKiL9V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.55.0/24
189.31.210.0/23
189.73.26.0/24
189.75.177.0/24
191.44.20.0/24
191.44.22.0/24
191.217.165.0/24
191.222.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:24:bc:f9:fb:1e:c3:0d:4b:bc:b1:25:1a:ae:60:ed:9f:75:
d8:4e:06:c8:91:c7:f4:a0:36:9e:71:d8:52:14:82:b3:51:a4:
5f:2c:52:83:64:01:82:e4:6d:87:c9:3e:b2:e8:4c:43:74:28:
f4:af:d3:e3:ab:41:36:b7:85:04:59:f2:cf:6e:c6:20:0d:f9:
20:92:b3:1c:ee:f6:d7:f8:bc:f1:8f:f7:4b:89:08:da:76:ed:
6f:f7:25:83:d3:36:9a:46:71:27:78:fc:fd:9e:6c:fe:8c:fd:
ab:fd:29:70:b7:d9:56:e7:69:19:d7:84:ff:09:32:9a:a5:91:
9a:68:76:6a:1c:de:12:34:87:ce:80:f0:32:71:11:f1:d9:28:
5c:44:1b:45:1a:56:90:6a:26:f8:73:0b:24:9d:cf:d6:97:1a:
e1:13:3c:89:ff:6b:57:b3:fc:31:51:e9:7b:9a:09:c5:60:e0:
61:11:75:b4:af:27:a0:5c:e6:2c:6e:1a:27:a1:6d:e9:cb:e5:
f4:d5:0c:1c:f3:df:1f:d7:1a:b2:2c:4c:b0:53:ef:8c:ee:f6:
a5:b2:74:99:e2:df:cb:6c:36:06:9c:8d:14:5a:f1:f5:02:c9:
4b:5b:2c:20:f5:a1:53:ea:84:05:1e:ae:02:4f:0b:6e:74:61:
d9:b9:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:38 2026 by rpki-client