Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WHDbGPYUO0RXGmqCHsHVdEuegvE.roa
File: WHDbGPYUO0RXGmqCHsHVdEuegvE.roa (raw, json)
Hash identifier: q3Iwp8nQQxmGysXxI7N32LZUjutoXzOPzhlbytSXsFQ=
Subject key identifier: 58:70:DB:18:F6:14:3B:44:57:1A:6A:82:1E:C1:D5:74:4B:9E:82:F1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C8E6F567905F3CD75007F96FD4580E2BB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WHDbGPYUO0RXGmqCHsHVdEuegvE.roa
Signing time: Tue 24 Feb 2026 06:56:27 +0000
ROA not before: Tue 24 Feb 2026 06:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198825
IP address blocks: 79.175.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:6f:56:79:05:f3:cd:75:00:7f:96:fd:45:80:e2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 24 06:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5870db18f6143b44571a6a821ec1d5744b9e82f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:be:dd:8c:19:3f:b8:be:e9:71:d5:eb:9a:
0f:74:e8:36:1d:92:f2:84:e3:c3:48:07:72:a7:d1:
64:2b:66:e1:ba:86:ed:cf:a2:ba:84:73:ae:f8:e2:
75:92:6a:89:f7:bb:fe:74:b8:37:80:c3:f7:78:1a:
2a:74:a4:b4:f8:e7:26:fc:06:b6:01:a7:a0:ec:22:
14:71:15:6b:cd:ac:11:06:b7:b5:05:53:c7:43:49:
82:ac:26:b7:27:f0:ba:82:89:05:9e:48:ee:9b:3e:
6a:36:f0:3e:57:72:3f:57:57:9a:48:3b:eb:2a:80:
16:ca:12:e2:3e:14:03:53:9e:86:79:52:bc:66:02:
a0:a3:85:2c:06:12:6d:ae:0a:79:4b:81:02:6d:14:
59:c1:dc:cd:09:72:73:bb:88:e5:42:c4:99:3c:1c:
7b:55:19:42:bd:fe:a2:c0:ad:d0:0f:48:7a:e8:4b:
61:38:04:36:8c:a1:a2:93:3e:99:6b:01:cc:a1:f8:
27:f9:a3:9b:48:14:58:18:e2:4d:d9:85:bc:8d:fb:
c7:2d:1a:93:cd:8d:22:b0:34:91:cf:8e:dc:70:ee:
82:6f:a0:10:25:a4:9a:5b:0a:03:b1:2a:ba:56:68:
a1:e1:8a:16:a0:b2:60:c7:60:92:c3:5e:5b:19:97:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:70:DB:18:F6:14:3B:44:57:1A:6A:82:1E:C1:D5:74:4B:9E:82:F1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WHDbGPYUO0RXGmqCHsHVdEuegvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.118.0/24
Signature Algorithm: sha256WithRSAEncryption
08:10:75:d4:b1:78:2f:a0:6b:0f:ef:5e:b4:0d:a1:db:fd:07:
53:47:e0:6d:68:c5:8a:dd:a5:3c:29:bb:b7:6f:de:d9:7e:94:
45:97:c0:52:ab:f9:82:22:fa:3c:83:7a:f8:97:ef:16:b9:96:
3a:1b:33:35:a2:ce:d8:99:cf:ff:cb:ab:76:39:44:ac:b3:84:
bb:73:cf:cf:ae:06:ac:78:33:ec:8a:ba:0b:a9:ee:f5:be:41:
86:4b:95:70:3d:3f:0a:fb:68:14:80:d9:06:3b:58:31:49:c5:
66:2a:d4:45:41:56:58:c2:da:90:09:45:d1:e1:c7:d7:09:29:
7c:0d:f8:37:38:53:9d:03:61:23:3b:1e:bf:23:42:88:31:f4:
32:e2:f6:00:67:50:80:ca:79:4d:a9:fa:53:6c:1a:57:7d:5b:
e3:4d:7c:a5:f3:f6:53:3f:6d:c6:58:cd:cf:f5:6d:8f:0c:ad:
ab:87:6c:e9:b3:5d:b4:de:ef:ef:a1:28:38:ae:5b:f5:f3:89:
8a:ef:a0:b1:db:36:e3:6d:28:1a:d1:1b:bd:ab:5a:06:ce:c4:
94:34:02:ca:10:62:76:73:38:c7:4c:2c:55:22:54:bd:6a:f3:
11:82:73:17:8f:ac:a8:50:cc:44:b4:78:bc:df:9a:0c:b0:6c:
82:6a:8c:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyOb1Z5BfPNdQB/lv1FgOK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwMjI0MDY1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODcwZGIxOGY2MTQzYjQ0NTcxYTZhODIxZWMxZDU3NDRiOWU4MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslu+3YwZP7i+6XHV65oPdOg2HZLy
hOPDSAdyp9FkK2bhuobtz6K6hHOu+OJ1kmqJ97v+dLg3gMP3eBoqdKS0+Ocm/Aa2
Aaeg7CIUcRVrzawRBre1BVPHQ0mCrCa3J/C6gokFnkjumz5qNvA+V3I/V1eaSDvr
KoAWyhLiPhQDU56GeVK8ZgKgo4UsBhJtrgp5S4ECbRRZwdzNCXJzu4jlQsSZPBx7
VRlCvf6iwK3QD0h66EthOAQ2jKGikz6ZawHMofgn+aObSBRYGOJN2YW8jfvHLRqT
zY0isDSRz47ccO6Cb6AQJaSaWwoDsSq6Vmih4YoWoLJgx2CSw15bGZf0gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhw2xj2FDtEVxpqgh7B1XRLnoLxMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvV0hEYkdQWVVPMFJYR21xQ0hzSFZkRXVlZ3ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT692MA0G
CSqGSIb3DQEBCwUAA4IBAQAIEHXUsXgvoGsP7160DaHb/QdTR+BtaMWK3aU8Kbu3
b97ZfpRFl8BSq/mCIvo8g3r4l+8WuZY6GzM1os7Ymc//y6t2OUSss4S7c8/Prgas
eDPsiroLqe71vkGGS5VwPT8K+2gUgNkGO1gxScVmKtRFQVZYwtqQCUXR4cfXCSl8
Dfg3OFOdA2EjOx6/I0KIMfQy4vYAZ1CAynlNqfpTbBpXfVvjTXyl8/ZTP23GWM3P
9W2PDK2rh2zps1203u/voSg4rlv184mK76Cx2zbjbSga0Ru9q1oGzsSUNALKEGJ2
czjHTCxVIlS9avMRgnMXj6yoUMxEtHi835oMsGyCaox8
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:42 2026 by rpki-client