Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/wwOJSugGxJbFaR9tmeABi6aZHVw.roa
File: wwOJSugGxJbFaR9tmeABi6aZHVw.roa (raw, json)
Hash identifier: YMSRobOkH2ypKm5B0Xz/KtGmT6t/KYxrvu80PgLLUfo=
Subject key identifier: C3:03:89:4A:E8:06:C4:96:C5:69:1F:6D:99:E0:01:8B:A6:99:1D:5C
Certificate issuer: /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Certificate serial: 01A03E780335DE10484A872216D120CAAB5F
Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/wwOJSugGxJbFaR9tmeABi6aZHVw.roa
Signing time: Wed 26 Aug 2026 14:27:27 +0000
ROA not before: Wed 26 Aug 2026 14:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275816
IP address blocks: 185.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:78:03:35:de:10:48:4a:87:22:16:d1:20:ca:ab:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Validity
Not Before: Aug 26 14:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c303894ae806c496c5691f6d99e0018ba6991d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:80:3f:bc:94:e4:3d:0a:41:bc:c9:42:7d:
3f:ed:8b:33:36:ec:d9:5c:59:47:61:7e:0f:82:af:
88:73:bf:8b:40:e8:48:fd:94:05:c1:63:6b:20:28:
42:9b:c9:4f:c7:ae:e7:d4:16:62:7a:59:ba:1b:c4:
3a:f5:96:ad:ba:aa:47:20:fb:2e:15:8a:84:28:9f:
db:bf:85:3d:bf:8f:a8:20:2d:08:8a:e4:69:56:87:
8c:d2:7a:8b:a3:a8:d0:49:7d:03:1f:d3:40:41:1d:
9b:2b:1f:3e:bd:5b:1d:f7:64:79:c2:b4:67:f8:a5:
dc:6d:d6:7b:41:69:17:d9:e9:7d:f9:31:0a:ed:1f:
e2:7f:68:2a:94:b1:bf:f1:0b:3a:4d:24:12:5c:c2:
34:b5:99:34:c2:d2:c6:01:b5:7a:03:87:8a:81:6d:
fa:35:5d:f8:26:25:c3:9f:c1:9f:22:50:04:4b:ab:
67:70:a9:10:34:b8:cf:39:11:fd:73:d5:5d:99:ba:
9c:7a:4e:20:8b:cd:7b:0f:7e:96:e0:a7:ad:87:69:
b3:6b:b2:48:01:44:fe:f7:4a:4f:bb:63:19:f1:d3:
a5:76:c2:18:5e:98:8c:54:58:6f:bf:fb:0b:19:2e:
40:cf:48:ad:d9:0e:74:3d:af:e6:25:49:30:c2:07:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:03:89:4A:E8:06:C4:96:C5:69:1F:6D:99:E0:01:8B:A6:99:1D:5C
X509v3 Authority Key Identifier:
keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/wwOJSugGxJbFaR9tmeABi6aZHVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
90:80:b5:b1:aa:93:f7:dc:5b:66:c3:04:b4:20:a0:f3:2f:60:
0f:05:0a:98:b6:b9:18:4b:85:85:cb:4a:a1:ec:68:a7:3b:22:
64:84:01:26:0d:90:5d:4a:50:bf:f3:a9:59:ff:bd:36:04:40:
7a:4c:6b:27:0f:db:a0:9f:34:6e:fc:77:67:d9:00:fe:bc:a0:
c6:53:a3:73:fb:b0:d8:2c:8a:8a:82:a3:54:04:7b:ad:66:94:
40:7e:1c:34:a7:29:e0:af:d8:77:dc:4e:8d:72:a6:9c:b1:f0:
bd:8e:05:f4:ad:f3:89:1b:2c:bf:22:18:36:1d:6d:95:cc:ea:
da:96:e5:9d:0c:37:fa:ef:a1:e5:af:4a:90:3d:7a:d4:1e:50:
d1:43:2a:8d:d1:f6:7f:29:57:c1:89:74:4b:d1:8f:6d:99:80:
39:51:8b:f4:d9:8a:fa:e8:e8:8a:97:53:95:61:c5:02:a4:f5:
1f:cc:c8:cf:26:52:27:32:ab:37:66:37:a4:e7:31:39:9e:81:
9e:d1:88:00:d5:d9:ec:54:7c:e7:96:5d:a2:19:a6:a8:18:cd:
9e:79:7d:98:03:c1:80:74:67:de:35:87:aa:ce:fd:11:7e:74:
01:9d:0a:6a:7e:7c:d2:99:8c:3d:9b:7d:86:00:1f:99:4f:3a:
75:2d:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:17:17 2026 by rpki-client