Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WDBWoMeFZBrdYd8cKKCDkwaP2cs.roa
File: WDBWoMeFZBrdYd8cKKCDkwaP2cs.roa (raw, json)
Hash identifier: lFtM4avue7e+4wg48KaLUSnC4+/7eR/aBeh//4X5y1k=
Subject key identifier: 58:30:56:A0:C7:85:64:1A:DD:61:DF:1C:28:A0:83:93:06:8F:D9:CB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F94414C9F99BF5DA3AA96A505372C6529
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WDBWoMeFZBrdYd8cKKCDkwaP2cs.roa
Signing time: Fri 24 Jul 2026 13:12:15 +0000
ROA not before: Fri 24 Jul 2026 13:12:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219324
IP address blocks: 82.108.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:41:4c:9f:99:bf:5d:a3:aa:96:a5:05:37:2c:65:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 24 13:12:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=583056a0c785641add61df1c28a08393068fd9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:e7:3e:63:7d:db:99:02:51:37:6d:d7:2d:
00:5d:11:4d:4d:f6:1f:56:6e:86:71:9e:28:47:05:
44:10:61:64:44:07:68:6a:0c:bc:e1:a4:68:74:57:
12:48:7d:a9:24:6c:48:95:fd:91:08:91:06:9b:e2:
cc:c9:23:2c:03:6d:14:2c:db:c9:86:76:4e:0d:6e:
85:30:e4:b6:fa:79:b6:dd:24:02:74:27:78:1f:da:
ec:c8:60:fc:87:4e:cb:5f:ab:99:4b:be:12:9e:7d:
4a:33:0e:37:b7:7d:d7:34:bd:1f:a7:b3:6a:0f:ae:
ae:3a:40:4d:e6:d8:ec:c1:4f:b7:b6:be:4d:4b:09:
f6:44:79:6f:49:2f:42:0c:83:5d:c8:82:53:c9:fe:
b5:92:8f:bf:05:16:c9:71:71:37:ac:dd:85:b9:63:
07:46:5b:c3:69:6b:33:a3:db:44:3f:99:9f:14:1b:
bc:dc:27:bd:34:b0:48:8e:cc:0c:dc:4f:ee:91:dd:
1f:9c:bd:42:37:de:74:f5:d6:29:df:a7:9e:56:c3:
96:fe:56:0f:95:ab:88:79:8a:60:fd:cc:4e:67:bf:
69:f9:63:fa:32:a5:60:80:56:40:8c:64:f5:99:ab:
7b:ef:12:62:84:d8:08:16:f0:86:84:3e:6f:c1:89:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:56:A0:C7:85:64:1A:DD:61:DF:1C:28:A0:83:93:06:8F:D9:CB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WDBWoMeFZBrdYd8cKKCDkwaP2cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.77.0/24
Signature Algorithm: sha256WithRSAEncryption
69:80:da:fa:16:99:73:ec:6b:cf:ba:78:25:72:55:cc:da:1b:
54:0f:66:c9:c8:ce:5a:37:1c:b0:99:b7:69:d2:f4:c2:c3:34:
d9:af:85:24:53:8f:1d:49:25:29:0b:2d:8b:19:81:bc:91:88:
90:35:08:7d:93:28:04:09:6a:ba:7b:90:8e:03:da:c9:e2:dd:
db:bf:bf:ea:b4:15:85:5a:1f:c1:e9:f7:47:76:0e:f7:38:8a:
9c:98:25:80:54:2d:10:77:76:77:4b:6b:f2:b3:7d:e3:7e:f6:
2e:6e:5e:66:5b:03:a5:40:71:f1:23:5c:a5:7f:ab:62:70:9d:
37:ee:8f:a5:b2:01:e8:3c:d9:e6:c7:18:6b:b8:f5:86:e1:db:
ba:93:80:c6:62:48:8e:16:e4:1d:5b:ee:48:59:a6:7b:42:68:
e6:96:fa:17:d2:c6:09:80:e2:f2:91:10:6f:78:a4:7e:02:03:
da:b7:0e:82:a6:c9:e2:9a:24:33:b2:f2:e4:39:72:fc:f5:2d:
48:02:5b:49:18:4d:6f:3a:0b:eb:e6:d2:ff:ec:f8:c8:f3:46:
c4:aa:d1:87:0a:2c:1e:69:06:9f:29:1f:f7:ca:e6:2e:c3:5b:
3f:bc:46:95:25:a0:92:14:10:87:25:8f:a7:c4:81:af:1e:91:
56:b3:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:19:58 2026 by rpki-client