Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/WbZZ0bsB0Dkjf22adEANEIVciOI.roa
File: WbZZ0bsB0Dkjf22adEANEIVciOI.roa (raw, json)
Hash identifier: +91x+OdHLOJGO9VKUPZYkd68HxtgAtv1r1GZzY3/TUc=
Subject key identifier: 59:B6:59:D1:BB:01:D0:39:23:7F:6D:9A:74:40:0D:10:85:5C:88:E2
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 019B791099491019A8D7CD4BA581ED498610
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/WbZZ0bsB0Dkjf22adEANEIVciOI.roa
Signing time: Thu 01 Jan 2026 10:18:09 +0000
ROA not before: Thu 01 Jan 2026 10:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200387
IP address blocks: 194.49.8.0/24 maxlen: 24
194.49.9.0/24 maxlen: 24
194.49.10.0/24 maxlen: 24
194.49.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:99:49:10:19:a8:d7:cd:4b:a5:81:ed:49:86:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jan 1 10:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59b659d1bb01d039237f6d9a74400d10855c88e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:9d:78:d8:3e:2e:a6:a4:65:ca:93:1a:d2:
48:b8:62:3e:99:4a:87:6e:d4:17:97:d0:bf:b1:47:
63:af:48:b8:54:10:19:b9:ee:2b:7e:a7:7b:b5:a2:
dd:6d:44:6a:69:67:93:aa:ef:47:0f:46:b4:06:2e:
51:e6:ed:66:75:ac:ca:10:ed:ad:b9:a9:ac:e1:03:
9e:b4:4e:da:27:5f:c4:ec:4f:6a:10:b6:5b:08:76:
e7:3d:6f:70:d3:3f:f6:a1:04:1d:34:b7:c1:2f:c1:
09:df:64:a3:44:f1:87:a3:16:81:0e:82:15:6d:89:
07:48:8f:c2:cd:72:14:c5:fc:a8:79:5c:67:3e:2a:
d4:be:8d:c0:42:ae:ed:4c:50:71:83:77:f7:ae:f3:
f5:48:0d:68:77:63:af:15:47:d1:6c:5d:3d:e5:1c:
5b:ee:7c:2a:47:4c:28:b3:96:7e:2a:18:1a:40:3c:
03:9a:e3:cb:2a:22:08:36:18:e2:99:86:12:f2:61:
16:59:c2:a5:99:66:42:9f:67:7a:95:2d:cd:b5:30:
0f:d5:46:9f:52:02:47:86:35:d1:e2:2f:ca:95:eb:
3c:74:4e:14:50:32:d8:60:ed:a5:f8:4b:eb:a8:5e:
97:3b:7c:65:f4:a3:5e:a4:07:82:ce:c5:46:60:4e:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B6:59:D1:BB:01:D0:39:23:7F:6D:9A:74:40:0D:10:85:5C:88:E2
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/WbZZ0bsB0Dkjf22adEANEIVciOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.8.0/22
Signature Algorithm: sha256WithRSAEncryption
55:68:12:05:4d:2e:e8:a7:45:93:2e:c8:30:2b:b6:ee:0c:e4:
e2:de:29:27:ae:72:a7:10:c6:41:f5:ce:6b:ed:51:9a:71:62:
6a:50:13:50:3a:c9:51:5e:91:e7:68:d8:bc:76:d7:22:d1:a0:
d6:d3:50:d8:bb:b2:88:ba:59:06:bf:da:bb:d1:8a:dd:9c:47:
26:b2:dd:1d:cb:68:2e:1f:df:31:d3:23:63:59:b1:8d:59:fe:
c9:aa:41:1c:c0:66:23:65:b6:c2:13:6d:89:bd:c7:a4:72:3c:
9a:79:6d:eb:61:e0:5e:bc:ad:80:a5:1a:5c:98:de:eb:45:c9:
1e:08:61:7d:43:37:1d:7d:6c:b7:e2:4a:71:46:01:fd:2e:d1:
5a:79:a4:c7:8c:62:e3:a1:82:6d:01:0f:41:4f:fa:b0:ea:3f:
00:03:83:60:de:9b:7f:8d:21:cd:34:59:95:fe:19:e3:04:0c:
1d:9c:70:b8:c5:23:52:c7:61:29:02:c6:d3:14:57:b7:75:38:
17:25:dd:d5:64:4b:29:bc:c8:3b:43:71:19:4f:61:6a:44:cb:
4d:c6:d9:1d:d2:24:c3:79:f0:d6:df:18:6c:9f:ed:bd:22:06:
d3:18:38:1e:69:cf:e3:03:10:e7:7b:f4:b7:3a:c8:0b:76:66:
47:a5:80:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:19:13 2026 by rpki-client