Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/mWBLEPz3C0Lf-l08xyY58aa8zT8.roa
File: mWBLEPz3C0Lf-l08xyY58aa8zT8.roa (raw, json)
Hash identifier: q8JaOwfKTrGzhPjlC43ijuG2sH1GANOpbIeobrHD4rg=
Subject key identifier: 99:60:4B:10:FC:F7:0B:42:DF:FA:5D:3C:C7:26:39:F1:A6:BC:CD:3F
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019F9801ACAB8444954E7A583AD09C228CC0
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/mWBLEPz3C0Lf-l08xyY58aa8zT8.roa
Signing time: Sat 25 Jul 2026 06:41:14 +0000
ROA not before: Sat 25 Jul 2026 06:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 213.182.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:01:ac:ab:84:44:95:4e:7a:58:3a:d0:9c:22:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jul 25 06:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99604b10fcf70b42dffa5d3cc72639f1a6bccd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:0b:4e:1e:e7:db:1f:0d:ee:b0:2b:41:1e:
58:bc:29:84:ca:f8:22:47:2b:b7:ec:d0:78:ea:c0:
76:aa:71:c8:af:cc:9e:0c:72:0a:06:d4:f6:b6:38:
80:6e:35:05:95:5d:61:f3:d6:51:f5:02:18:46:52:
a4:b0:09:ff:bf:02:3b:ed:07:13:40:d7:c3:13:08:
58:6f:34:89:98:8a:55:f8:50:a5:b7:63:d7:ae:0b:
ab:9d:b9:eb:11:b7:03:25:11:cb:16:6c:df:30:1a:
fd:45:0f:50:29:f5:66:3d:b4:63:1a:a3:51:83:ea:
77:fb:82:8d:4b:ab:af:2d:a4:d8:19:8e:c7:81:e7:
a0:d0:75:e5:6c:b2:f3:ab:87:d5:6a:af:49:b2:40:
45:b6:a5:b4:73:e4:08:af:d3:05:6f:d4:80:41:cf:
14:6e:2c:91:64:fe:63:fe:d2:91:de:a6:6a:1b:0d:
d8:50:96:31:55:9d:29:90:6e:f2:df:fd:aa:bd:06:
5a:33:73:d1:dc:90:70:1f:a0:64:b3:d5:4c:b6:bf:
0f:bf:73:e6:55:b0:f5:f6:d2:a1:1f:33:3f:25:cc:
18:22:fb:c2:ad:02:cb:ec:91:99:0b:bb:38:d7:6c:
cd:76:05:06:8c:de:0c:2e:e5:7a:88:df:d7:a3:98:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:4B:10:FC:F7:0B:42:DF:FA:5D:3C:C7:26:39:F1:A6:BC:CD:3F
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/mWBLEPz3C0Lf-l08xyY58aa8zT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.209.0/24
Signature Algorithm: sha256WithRSAEncryption
27:25:98:96:6d:2b:af:c2:18:32:16:a6:cf:7b:7c:6d:ce:4b:
b9:76:c8:b2:66:38:a0:ec:19:fc:0f:61:d3:bc:a9:77:84:a6:
6f:11:f1:47:5c:63:57:b5:ff:ea:33:1a:7a:1f:2e:b8:91:67:
ae:64:06:d9:44:e1:b9:3e:e1:18:6b:e3:8c:59:0c:a6:80:75:
b0:e3:26:27:18:f2:90:c1:4c:de:72:0b:76:ab:cd:22:c3:fb:
62:8e:fe:b4:25:2f:8f:f0:da:ae:8f:06:33:6e:a2:0b:bc:b1:
06:21:27:09:dd:28:b3:2a:8a:0d:eb:c5:01:da:3a:b6:22:18:
da:73:51:5c:ea:27:be:4e:06:43:7c:e1:3f:3a:fe:e7:c8:bf:
48:5e:83:d3:16:99:36:53:86:57:86:78:c7:d5:37:dc:0b:0b:
10:d6:cb:c0:7d:dc:3a:99:18:bb:af:aa:aa:5d:16:bb:ae:ce:
08:e8:63:36:32:49:76:ae:cb:e5:0c:25:93:d2:52:ae:6d:df:
76:65:dd:e6:54:af:7e:b2:75:b1:62:21:c4:86:98:a8:e2:35:
7f:24:37:b1:2d:e1:af:d9:c8:73:7e:bd:ff:b1:a8:a9:94:f0:
c9:50:ae:0d:14:78:70:ab:92:4a:de:89:c5:59:cc:42:e5:58:
ed:78:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:45 2026 by rpki-client