Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WZMySzsy830ZwopUml0h4k8wN40.roa
File: WZMySzsy830ZwopUml0h4k8wN40.roa (raw, json)
Hash identifier: syoL+c104WdBrdKGYMZecGwH7KbQVIe8m5ZL7r3wBQY=
Subject key identifier: 59:93:32:4B:3B:32:F3:7D:19:C2:8A:54:9A:5D:21:E2:4F:30:37:8D
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019EC04F6EB27B9E3085E220A9A59D59A427
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WZMySzsy830ZwopUml0h4k8wN40.roa
Signing time: Sat 13 Jun 2026 09:28:11 +0000
ROA not before: Sat 13 Jun 2026 09:28:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12660
IP address blocks: 94.184.132.0/22 maxlen: 22
194.225.32.0/20 maxlen: 24
194.225.40.0/21 maxlen: 21
194.225.40.0/24 maxlen: 24
194.225.44.0/22 maxlen: 22
194.225.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:4f:6e:b2:7b:9e:30:85:e2:20:a9:a5:9d:59:a4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jun 13 09:28:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5993324b3b32f37d19c28a549a5d21e24f30378d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:7d:26:d1:14:d5:95:ae:70:29:b7:e8:98:
26:19:59:b1:70:6b:12:9c:3f:58:63:7c:05:84:25:
9a:ab:9e:b5:5a:d9:4f:a0:79:54:ca:a3:17:d5:c6:
a8:d3:84:ce:dd:6e:5a:5f:72:10:13:15:78:2d:d1:
16:6f:62:89:95:71:2c:73:89:2a:39:ed:45:b8:03:
19:c5:cb:29:52:04:c6:d4:ee:67:99:c1:46:5a:88:
19:24:78:5b:21:21:3f:b4:11:bc:0c:00:cf:51:ac:
20:43:e2:f1:4d:55:3d:ae:90:b1:43:19:01:1b:e9:
56:d6:fe:6a:0d:00:f0:2f:aa:8e:6c:f1:26:d0:de:
bb:9c:32:31:63:8d:07:a9:43:f8:db:bf:10:e9:ee:
d3:86:5c:42:90:df:30:89:22:a9:8b:0e:72:27:bb:
b1:18:e0:9d:95:7c:9d:01:ba:f2:40:c5:b7:de:f3:
67:64:42:1e:f9:7a:d2:e7:ba:38:55:b8:dd:da:6a:
81:7d:77:68:7b:ab:3f:e9:26:80:42:33:de:0f:b1:
05:78:2d:01:1a:b3:dc:05:26:99:f1:99:d8:ab:99:
c8:ee:b1:50:f5:4a:fb:37:a2:89:ef:ac:f6:ba:dd:
12:2e:29:fd:4a:2a:d3:c4:18:7a:dd:33:8f:88:5b:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:93:32:4B:3B:32:F3:7D:19:C2:8A:54:9A:5D:21:E2:4F:30:37:8D
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WZMySzsy830ZwopUml0h4k8wN40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.132.0/22
194.225.32.0/20
194.225.84.0/22
Signature Algorithm: sha256WithRSAEncryption
19:cc:e2:b0:f8:99:7d:84:03:7a:32:3d:87:a1:0c:db:03:63:
bf:fc:80:47:06:22:ac:7f:f3:d3:bb:43:61:c1:c6:8b:e8:19:
5a:da:3e:35:7d:6a:8a:79:e5:a5:97:b7:57:cb:a8:3f:48:e1:
47:d0:b2:37:59:b4:b5:a7:b9:e6:9d:92:e5:fb:3a:c9:20:44:
b3:c9:2b:82:d0:01:96:a7:be:e2:ff:9b:8e:67:88:2a:79:a1:
dd:98:73:dd:a8:b2:22:a3:01:84:a7:9b:f7:62:c7:9a:9d:25:
57:ce:42:e2:5b:1d:66:24:7c:62:e4:dd:6c:32:7b:be:77:60:
f1:4b:e1:2f:b0:13:73:60:d1:7b:80:cc:8c:b0:eb:70:77:75:
03:ef:b3:de:7d:96:7a:9b:b2:b2:6e:5c:a5:0a:00:6b:aa:cf:
47:d1:91:56:7b:5c:84:c6:be:53:69:ba:70:b5:dc:82:a5:ed:
b5:e3:b4:df:15:e4:89:48:6b:0c:08:dd:7d:13:e4:38:7e:66:
1a:83:bb:bb:08:5c:16:51:8c:e2:87:f6:06:e8:5c:9e:4a:78:
6d:b1:e6:34:a7:6e:b9:0c:99:22:c8:5c:d0:5a:8a:d1:fc:0c:
65:9c:cf:91:bb:05:44:e3:da:f2:c2:fd:dc:c0:39:7f:7b:3c:
cc:9d:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:07:26 2026 by rpki-client