Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/Wz032Yr9kwGtmGuvyC0zl5b3Wmg.roa
File: Wz032Yr9kwGtmGuvyC0zl5b3Wmg.roa (raw, json)
Hash identifier: jV+3sVp3mLbJQdrmFOu9CWbBqs0T7JVmuS6G2Tcf2s8=
Subject key identifier: 5B:3D:37:D9:8A:FD:93:01:AD:98:6B:AF:C8:2D:33:97:96:F7:5A:68
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 019B7C11CC48E98F7C894D190CB68E5378E5
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/Wz032Yr9kwGtmGuvyC0zl5b3Wmg.roa
Signing time: Fri 02 Jan 2026 00:18:19 +0000
ROA not before: Fri 02 Jan 2026 00:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25319
IP address blocks: 89.32.224.0/20 maxlen: 24
89.32.226.0/24 maxlen: 24
185.108.180.0/22 maxlen: 24
185.108.180.0/24 maxlen: 24
185.108.181.0/24 maxlen: 24
185.108.182.0/24 maxlen: 24
185.108.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:cc:48:e9:8f:7c:89:4d:19:0c:b6:8e:53:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 2 00:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b3d37d98afd9301ad986bafc82d339796f75a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:00:2e:13:48:bf:d5:84:96:ad:d4:6b:84:
38:d5:8e:39:df:5b:4a:a1:51:82:82:28:40:35:8e:
f9:8e:f9:c8:b6:2a:2d:6f:49:bc:af:46:78:bc:67:
d3:68:5a:f7:1e:64:59:eb:8b:cc:92:b0:ca:9f:52:
b8:14:80:9f:e1:49:7f:31:fd:9f:34:ef:1e:39:8c:
19:3d:ca:b7:ad:03:e5:6b:d4:85:88:92:c3:d7:f6:
1b:70:4a:c3:e9:67:b7:0b:9a:fb:df:37:ab:75:2d:
ed:a1:77:d4:ce:49:d3:c8:5f:f5:cf:dd:67:ef:7e:
d4:fe:01:2c:9f:3f:9f:2e:4c:b7:ff:44:78:9b:74:
ad:5d:b3:da:ac:f5:0d:03:db:7d:41:a6:a8:f3:a9:
90:79:42:dd:7d:77:ca:8f:98:d4:24:94:e8:64:92:
cc:61:85:52:51:ad:f4:33:8e:ed:fc:d8:84:3e:db:
cb:dc:ba:c2:81:ec:ee:d7:ac:be:4a:89:38:09:9c:
39:09:db:df:99:38:09:a6:91:d9:12:23:c5:cd:13:
f1:e0:9d:4a:44:30:b8:ee:f3:c6:8a:08:bb:32:89:
3a:a7:26:df:49:6d:21:34:f9:5b:41:52:21:54:6e:
03:07:59:62:f4:3d:30:e8:13:ae:ed:12:20:77:f7:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:37:D9:8A:FD:93:01:AD:98:6B:AF:C8:2D:33:97:96:F7:5A:68
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/Wz032Yr9kwGtmGuvyC0zl5b3Wmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.224.0/20
185.108.180.0/22
Signature Algorithm: sha256WithRSAEncryption
32:b1:35:7a:cf:90:71:38:97:b4:b7:3a:ad:94:a0:bf:7c:87:
62:ea:e5:e4:b4:c8:41:49:10:2c:10:9b:0f:fb:af:46:42:8d:
a7:ce:c5:19:8f:3b:0e:f6:a8:d7:e3:77:f3:d2:4b:61:63:65:
71:d9:5d:15:56:f9:40:52:fd:85:5f:c7:f2:f7:9b:12:40:61:
0e:7c:9a:38:df:ff:59:1b:3c:7a:63:a3:6a:19:93:9e:d3:ba:
8f:ab:f2:3b:f6:f6:29:d2:d3:68:cd:30:57:97:8e:6e:70:f4:
19:bf:bc:f0:18:51:39:00:0d:66:8f:e8:a2:db:7c:ae:91:e8:
52:87:25:18:04:a3:48:bf:f9:32:ee:7d:99:83:d6:d6:be:49:
10:31:01:60:e0:c9:40:37:0b:85:ec:b0:eb:f2:81:e7:3d:0a:
55:34:ab:20:cd:45:88:60:b0:64:3d:a0:90:8e:bc:72:63:e1:
c8:9a:d2:4d:20:15:b0:25:c1:38:72:98:09:58:eb:a3:b6:aa:
b6:74:94:c9:f1:49:13:88:44:55:e1:71:2d:4f:6c:b4:87:ca:
84:d7:af:1b:21:61:c5:02:2d:b2:c5:15:25:ea:76:fd:f7:02:
bd:0b:7a:7b:05:80:2a:35:de:f3:be:70:1d:52:48:86:e3:af:
68:a2:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:39:58 2026 by rpki-client