Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/wv8gd6x6veIwvQ7a_hwbd5Fp7yY.roa
File: wv8gd6x6veIwvQ7a_hwbd5Fp7yY.roa (raw, json)
Hash identifier: jr55QmYCXhM/DvkRhe83vWFpOSQh5IwJlAstqBQk0S4=
Subject key identifier: C2:FF:20:77:AC:7A:BD:E2:30:BD:0E:DA:FE:1C:1B:77:91:69:EF:26
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 019C7B6252DDFDDD96519B5EDF138CCB277F
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/wv8gd6x6veIwvQ7a_hwbd5Fp7yY.roa
Signing time: Fri 20 Feb 2026 14:09:27 +0000
ROA not before: Fri 20 Feb 2026 14:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 185.133.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:62:52:dd:fd:dd:96:51:9b:5e:df:13:8c:cb:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Feb 20 14:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2ff2077ac7abde230bd0edafe1c1b779169ef26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:bc:82:19:b9:ea:4f:52:93:b7:a8:cb:15:
8b:77:db:13:3f:1a:cd:22:e5:bc:f2:90:cc:88:d5:
e5:5a:c1:9b:23:9f:5f:e7:f2:f3:56:ab:a5:b6:94:
4a:af:a2:63:96:0c:58:15:f3:22:8c:34:59:ed:dd:
59:e2:8d:fe:7e:81:6b:88:43:e4:3f:af:09:58:b0:
1e:06:f0:2a:6a:73:55:f0:2e:f9:ce:7d:32:50:7c:
b0:07:7a:6b:b2:7f:e9:8f:82:72:94:76:13:94:50:
02:8e:2a:7c:a8:c5:ed:e9:eb:53:ef:6f:b4:60:fb:
eb:c3:91:df:dd:6a:d5:cb:37:50:73:6e:03:2d:f2:
02:b0:4c:a8:6a:3d:78:b1:18:9d:f2:c3:17:59:cd:
0e:ca:35:4e:53:58:c9:fa:5b:a4:ac:f2:85:74:e0:
ef:45:cb:81:c0:95:40:72:d2:cc:1e:3e:8d:84:da:
5c:b8:8d:5a:53:31:ec:e9:23:72:64:11:15:6b:d2:
ac:f1:db:6d:cf:93:25:b4:0a:3c:3c:33:a2:d3:e0:
da:31:fc:b5:f3:48:62:37:01:92:aa:01:d8:be:04:
01:30:88:5a:05:f5:ce:18:c0:ae:01:3d:37:e0:7b:
dc:64:19:50:47:88:18:2e:ad:eb:c4:47:c8:c3:6c:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FF:20:77:AC:7A:BD:E2:30:BD:0E:DA:FE:1C:1B:77:91:69:EF:26
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/wv8gd6x6veIwvQ7a_hwbd5Fp7yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.241.0/24
Signature Algorithm: sha256WithRSAEncryption
43:37:18:10:77:c3:73:b4:22:ff:de:09:7e:5d:e8:22:81:11:
a7:1f:f7:8d:d4:03:21:c4:67:83:47:44:0a:b2:cf:8e:4e:6f:
63:90:d1:5c:00:42:ff:8c:60:79:49:5d:20:29:4a:22:4b:87:
4d:24:6c:8e:1e:cd:bc:b7:80:89:c5:f9:aa:ca:7e:10:a7:42:
5e:27:fa:9e:23:d5:4c:68:45:1f:2c:51:9d:bf:67:ac:24:95:
35:3f:0f:26:0b:ec:d6:83:09:f6:59:47:f2:f1:a4:70:6e:79:
44:91:6d:d3:63:df:b1:73:85:f5:ec:8b:93:c9:7f:4f:6b:68:
83:84:f0:fd:36:2a:41:7e:22:7b:69:15:9a:8b:70:cd:24:73:
b5:3e:3e:b2:98:bb:65:66:64:55:e6:2e:0c:11:4d:82:c1:0d:
47:e5:1a:a9:94:db:fe:36:4e:6a:63:93:4f:53:5d:27:8a:43:
ec:e8:40:13:fb:a2:c5:e2:c0:d0:69:40:ec:5d:b5:1b:f0:62:
88:ce:2c:b3:52:90:5f:e7:c6:d1:89:dc:ca:ba:06:07:e7:7b:
4d:2a:f4:a1:6d:ae:3f:48:27:10:5d:7e:5c:ec:65:f6:50:05:
20:5f:fd:99:cf:59:5c:12:31:6e:e6:91:2f:e2:a2:f5:98:61:
9c:83:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:06:34 2026 by rpki-client