Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/WYo1teZpvwvbF93D39MrwjDyB6c.roa
File: WYo1teZpvwvbF93D39MrwjDyB6c.roa (raw, json)
Hash identifier: W+jH5tYwcS0NpZ2S8iZldWokNLVCr4jwBp+ACPz7lxA=
Subject key identifier: 59:8A:35:B5:E6:69:BF:0B:DB:17:DD:C3:DF:D3:2B:C2:30:F2:07:A7
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 019C89638670E2C84F3E3133F3FF4F7625B7
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/WYo1teZpvwvbF93D39MrwjDyB6c.roa
Signing time: Mon 23 Feb 2026 07:25:26 +0000
ROA not before: Mon 23 Feb 2026 07:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 62.100.192.0/22 maxlen: 22
62.100.200.0/22 maxlen: 24
62.100.212.0/22 maxlen: 22
62.100.220.0/22 maxlen: 22
93.188.68.0/22 maxlen: 22
157.97.145.0/24 maxlen: 24
185.89.250.0/24 maxlen: 24
185.92.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:63:86:70:e2:c8:4f:3e:31:33:f3:ff:4f:76:25:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Feb 23 07:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=598a35b5e669bf0bdb17ddc3dfd32bc230f207a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:04:84:7b:27:33:81:9d:47:2b:cc:f9:85:
ba:1d:07:5f:ae:d6:7f:30:4b:0d:68:8a:50:42:1d:
fa:d3:bc:83:eb:8b:79:16:18:6e:4f:86:66:14:2a:
76:52:d4:77:3b:83:cb:11:3b:d0:89:2a:16:25:15:
b8:fa:3f:18:5e:83:27:48:c0:de:02:53:29:59:5b:
8b:b3:58:11:6a:89:b0:db:21:6a:ab:1f:1d:aa:a6:
36:a6:6e:c9:1b:4b:f9:3f:4c:09:7d:2c:41:bd:c5:
8f:a5:2c:ea:c6:18:9e:bd:d5:7a:9a:ad:9e:19:79:
bc:26:b6:6c:df:32:88:13:e2:db:ec:75:a9:8e:50:
1e:9d:2f:86:28:c9:53:5c:2f:5f:8f:5a:58:88:71:
51:d0:49:25:0d:34:ac:82:40:8c:70:56:20:2d:3b:
91:f0:fa:c7:93:ac:ee:fd:ae:fa:00:cd:2c:ef:cb:
c4:80:4a:3f:a2:3b:6c:08:74:eb:25:e6:54:8e:94:
66:3f:11:b9:9f:f3:6a:7a:53:39:dc:61:3d:c8:4e:
60:dd:b5:81:63:95:66:50:8b:b8:24:68:34:ae:18:
27:72:bc:96:c4:57:47:89:17:85:c3:28:ab:f9:9f:
8f:70:62:f2:6a:dd:78:c6:19:3d:b4:50:6d:38:19:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:35:B5:E6:69:BF:0B:DB:17:DD:C3:DF:D3:2B:C2:30:F2:07:A7
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/WYo1teZpvwvbF93D39MrwjDyB6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.192.0/22
62.100.200.0/22
62.100.212.0/22
62.100.220.0/22
93.188.68.0/22
157.97.145.0/24
185.89.250.0/24
185.92.27.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0b:03:85:5b:79:4a:c8:ac:b7:b2:52:ac:18:c4:65:68:2e:
7c:b6:c1:0d:6f:bb:ad:a7:e4:74:eb:7b:b4:eb:20:17:7c:59:
3e:3c:90:6d:e3:f8:98:42:7f:2f:70:30:6b:d3:f5:be:52:33:
c8:ef:b5:08:b7:3c:e5:b1:7a:75:48:3a:57:bc:38:3a:17:fa:
f2:f4:53:7f:b1:2a:9a:81:95:4d:94:9c:39:90:04:91:6e:46:
88:db:b7:c7:46:f0:b5:e0:1d:46:bd:53:84:13:4c:fb:10:ec:
f9:d5:b9:06:50:3e:89:d8:56:3f:c8:ce:fc:92:32:f0:16:40:
05:c3:15:74:67:c2:bb:6c:ea:57:3e:55:f8:2d:37:ed:60:04:
b7:65:fa:5e:6b:73:99:65:57:9e:eb:b9:cf:6b:e4:2c:d5:5d:
e1:18:b0:10:b8:e1:e6:85:c6:ae:5f:51:87:d6:ad:6b:0e:7b:
e0:5a:85:ba:fe:38:a8:cc:a4:68:95:df:32:d6:3f:55:0d:4f:
91:57:c4:4e:55:07:20:41:f9:fc:4c:4d:e0:3a:8e:7b:7a:fb:
b6:2f:b3:97:40:4c:21:ae:69:e4:bd:06:96:49:a0:5d:0f:d5:
2f:c4:2b:1a:84:b5:c3:44:fd:43:11:fe:15:3a:cc:a8:57:92:
63:da:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:57 2026 by rpki-client