Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WecI-YUOokwpuS7sS_2GRUcLq2Y.roa
File: WecI-YUOokwpuS7sS_2GRUcLq2Y.roa (raw, json)
Hash identifier: VRMrOuGyEpfADO/bJz+wvHG2GsTgLnM2L9Lw5B/6XRs=
Subject key identifier: 59:E7:08:F9:85:0E:A2:4C:29:B9:2E:EC:4B:FD:86:45:47:0B:AB:66
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019C94332BB07AA08E696F6CECA5F016F6BF
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WecI-YUOokwpuS7sS_2GRUcLq2Y.roa
Signing time: Wed 25 Feb 2026 09:48:27 +0000
ROA not before: Wed 25 Feb 2026 09:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
185.143.57.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:33:2b:b0:7a:a0:8e:69:6f:6c:ec:a5:f0:16:f6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 25 09:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59e708f9850ea24c29b92eec4bfd8645470bab66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:cf:de:59:dc:60:36:90:61:16:fa:b0:9b:
c0:38:b6:5a:7e:39:16:bc:ca:9d:05:f0:93:3f:eb:
12:ab:eb:d4:a8:b6:2e:93:2c:45:74:0d:e4:01:ec:
72:c2:44:b4:60:27:fe:da:31:8b:31:7c:98:18:ca:
65:47:a4:80:aa:13:6e:76:bb:ce:c5:75:d9:6c:c2:
bf:12:91:fc:45:d5:1a:8f:b3:36:50:b9:fc:fe:a7:
3d:2c:d1:f5:08:8d:a1:11:b4:c3:90:f2:e4:0b:5c:
8a:43:21:e1:a4:74:87:46:c0:cd:ed:06:d4:01:d9:
3b:3b:60:d5:ee:d0:97:c9:5c:cd:f8:c1:bb:cf:99:
8d:c2:b7:04:3b:cd:79:f9:47:f7:a5:c9:02:e8:79:
ed:94:9b:cf:03:d5:93:18:00:d2:d2:eb:0a:01:93:
41:20:7e:26:36:70:73:6e:90:1a:04:ec:ac:9d:d1:
7a:48:95:51:31:bb:e3:8f:2d:c4:06:60:c6:27:4f:
75:90:1b:9f:8f:af:35:c5:16:a9:21:a5:64:35:a0:
fc:29:e6:8f:2b:ef:7f:d1:2f:ec:c0:09:cf:53:5f:
33:23:fa:38:d8:8f:79:d7:d7:3d:70:04:e9:06:e8:
9a:30:bb:3b:aa:2e:0d:45:a0:af:89:fb:b3:4e:ac:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:08:F9:85:0E:A2:4C:29:B9:2E:EC:4B:FD:86:45:47:0B:AB:66
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WecI-YUOokwpuS7sS_2GRUcLq2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.210.0/23
185.143.57.0/24
195.178.128.0-195.178.136.255
195.178.144.0/23
195.178.147.0/24
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
84:84:0d:6a:fe:b3:9f:7d:87:37:92:9a:9b:6d:1d:7b:79:a9:
fe:93:85:aa:0d:d1:aa:a8:48:2c:7e:20:e8:63:29:43:a2:ea:
92:d8:3f:cb:b0:c3:c4:6c:ca:58:ce:3e:f6:5e:6d:78:50:85:
94:fc:7d:66:ca:05:1f:32:dc:a3:1f:2c:94:61:54:64:82:38:
65:6b:3d:d8:0b:0d:64:3e:4a:08:8e:8d:5e:1e:26:0d:ea:11:
93:6d:4c:89:15:8c:5e:c1:11:cd:cd:2c:6e:a0:30:39:32:be:
14:9d:54:36:a1:2d:10:82:2e:3e:40:96:fc:5c:e5:4b:d3:31:
3c:bc:a4:30:1f:0b:72:ee:00:1d:ff:43:e1:54:d1:4a:92:e1:
49:46:c7:8e:3b:ee:6d:fe:c7:bb:23:c1:90:dc:30:db:47:68:
8d:6f:30:02:66:84:d0:f0:e4:25:74:e5:f8:27:f9:24:8d:ae:
49:17:b6:1d:97:e4:08:ff:c1:0d:1a:10:d2:9d:c0:39:62:68:
d0:92:57:20:15:9e:3e:29:1c:8c:b8:da:b9:29:51:fe:f0:f2:
ee:52:34:0c:a5:df:6c:60:36:d2:b9:94:05:07:0b:62:65:a7:
a4:6e:4b:11:33:ae:17:4b:1e:f6:9e:13:cd:51:b1:96:e8:b2:
da:5c:7a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:47 2026 by rpki-client