Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/whz1b1ik747CMiJFQQrkzi5a7vs.roa
File: whz1b1ik747CMiJFQQrkzi5a7vs.roa (raw, json)
Hash identifier: q5NZbknzGV4wjrsW4T1rPpniNdjNXJbM67VTZR8o7Oo=
Subject key identifier: C2:1C:F5:6F:58:A4:EF:8E:C2:32:22:45:41:0A:E4:CE:2E:5A:EE:FB
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01A06675A38F2077F83C88CDC5B89793BB6A
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/whz1b1ik747CMiJFQQrkzi5a7vs.roa
Signing time: Thu 03 Sep 2026 08:49:40 +0000
ROA not before: Thu 03 Sep 2026 08:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.251.80.0/23 maxlen: 24
185.251.82.0/23 maxlen: 24
194.4.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:75:a3:8f:20:77:f8:3c:88:cd:c5:b8:97:93:bb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Sep 3 08:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c21cf56f58a4ef8ec2322245410ae4ce2e5aeefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:b1:fa:1f:f5:b1:96:0d:50:dc:40:b0:e6:
12:66:17:23:2c:2d:9e:b7:3c:20:7e:13:52:69:68:
d6:19:60:5e:49:b6:30:b0:0d:35:c6:cc:60:fe:b6:
b1:88:0e:33:22:4d:0f:2c:62:66:f3:64:be:3c:cb:
d3:ff:d4:d8:98:e1:5b:f6:99:7e:41:9d:11:c1:da:
d8:26:40:c4:be:06:76:fe:0d:ad:6b:19:ca:72:7a:
d4:3f:4d:cc:0f:43:cc:a8:8e:b6:95:ee:1a:36:3e:
c4:86:4c:0a:b0:0e:47:1a:9e:5b:ac:0e:62:df:ee:
20:33:d4:d2:d1:43:72:e6:8a:75:b2:92:90:79:03:
fe:60:61:1d:da:b5:aa:39:92:67:4f:33:6f:f0:56:
1c:b1:01:11:1c:a8:39:8e:58:66:dc:bc:9d:20:00:
c4:d2:3f:b5:6b:3b:d3:13:e8:2f:a3:40:43:3d:ce:
20:15:d6:54:69:97:a7:f8:b8:12:fd:2b:34:98:28:
bb:ac:d5:7e:f4:16:7a:f7:8d:96:0a:e1:7f:d4:ca:
f4:b4:58:74:8d:71:d3:e7:cc:88:f7:a4:7e:b5:f4:
fe:a1:49:7f:6c:02:14:4e:5c:32:5c:6b:73:49:dd:
6b:65:a0:d9:96:8e:71:72:5d:bd:7e:e9:89:34:46:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:F5:6F:58:A4:EF:8E:C2:32:22:45:41:0A:E4:CE:2E:5A:EE:FB
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/whz1b1ik747CMiJFQQrkzi5a7vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/22
194.4.55.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fe:24:49:8a:ee:4b:77:16:92:00:b5:69:03:34:47:c1:dc:
5c:e3:df:55:3c:04:fa:30:b8:fb:23:b6:e2:f2:4b:66:03:43:
ad:68:10:5f:6b:4d:f7:14:97:7e:70:88:05:9a:2f:0b:91:f3:
ee:31:81:fb:cc:dd:f3:52:2f:99:3f:14:f5:a7:33:14:96:7b:
e2:12:ab:b8:e1:66:27:a7:78:65:78:b7:80:3a:f7:59:6e:1c:
2a:8b:89:2b:56:41:35:96:8a:a1:f4:d8:f6:92:30:f5:a5:21:
9c:5e:e8:d9:f1:02:a0:68:87:9c:81:c1:85:41:49:47:d5:05:
60:68:a7:42:98:d0:84:46:e0:c6:76:65:fa:76:1c:1b:bd:fe:
9e:f2:33:1c:dd:b9:1a:5f:4c:74:a7:9d:a6:a3:49:8e:6d:34:
9f:df:ce:0b:28:c1:25:aa:8a:01:f7:c8:6e:f3:1a:3c:f4:95:
fc:fa:23:78:15:91:6a:df:6b:03:1f:cf:d0:3e:7b:41:54:45:
ce:fe:49:f2:54:7e:1e:79:6e:56:41:34:30:c6:46:00:76:f8:
65:86:9a:08:7a:59:51:cc:0a:28:cf:b0:08:aa:3b:4d:2c:8b:
19:76:3e:f0:e1:d8:c9:47:cf:dd:00:9b:a8:b6:9b:d9:4d:8e:
e3:36:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:42 2026 by rpki-client