Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/WKEZ5BQSR1ehG9mZ_bxEUph3mMQ.roa
File: WKEZ5BQSR1ehG9mZ_bxEUph3mMQ.roa (raw, json)
Hash identifier: uO4Surv+TiXY3EdSL2CRo2M9bmF0VI8nDJjKmqF1qxA=
Subject key identifier: 58:A1:19:E4:14:12:47:57:A1:1B:D9:99:FD:BC:44:52:98:77:98:C4
Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Certificate serial: 019B78A34F3673D8D6622C778AF86D30D553
Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/WKEZ5BQSR1ehG9mZ_bxEUph3mMQ.roa
Signing time: Thu 01 Jan 2026 08:18:47 +0000
ROA not before: Thu 01 Jan 2026 08:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49079
IP address blocks: 185.131.20.0/22 maxlen: 24
2a03:a020::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:4f:36:73:d8:d6:62:2c:77:8a:f8:6d:30:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550
Validity
Not Before: Jan 1 08:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58a119e414124757a11bd999fdbc4452987798c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:e6:0f:9a:62:a9:c2:a5:9f:b8:30:60:c2:
fe:08:75:4f:65:8d:31:eb:3d:df:75:77:d0:31:35:
c5:d8:5e:00:d8:32:8e:9a:cb:47:9a:74:d3:df:b4:
89:51:25:8e:27:06:6b:4f:b8:63:90:59:62:b0:e9:
3d:e5:ef:bb:4f:96:96:f1:3c:f4:e7:44:78:d4:0c:
13:17:4f:c1:df:36:73:d8:c8:86:ae:76:44:f4:84:
35:40:06:5c:e6:c5:8b:6e:f4:6d:b7:ae:5c:58:b4:
7f:8a:f3:92:2a:12:2f:d5:9c:27:d4:41:63:d2:0a:
2b:af:2d:81:21:1a:bf:04:2a:9d:48:5c:bb:e6:77:
8e:74:9c:99:45:0b:86:67:9c:fa:e5:86:e5:78:d6:
a1:bd:6f:d2:c6:33:e5:0d:8f:ce:73:97:a3:ab:2d:
32:d0:b2:b1:62:96:57:ab:f9:92:14:1c:91:1f:ab:
2c:85:ec:ec:c7:b3:fb:ec:1b:9b:d8:e1:5a:a4:e7:
f2:2b:1d:9c:1b:7b:fd:fe:7f:4a:32:47:1a:27:32:
a7:79:73:e6:da:2a:85:a0:91:50:fc:fa:ee:3f:9e:
c4:54:00:b9:9d:99:5f:6c:44:b0:ad:4e:dc:f2:65:
ab:1b:a6:57:3d:e3:9f:3e:62:5a:8c:31:af:25:0f:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A1:19:E4:14:12:47:57:A1:1B:D9:99:FD:BC:44:52:98:77:98:C4
X509v3 Authority Key Identifier:
keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/WKEZ5BQSR1ehG9mZ_bxEUph3mMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.20.0/22
IPv6:
2a03:a020::/32
Signature Algorithm: sha256WithRSAEncryption
1d:90:f6:b8:07:fa:62:45:2e:8d:75:1b:01:a0:2c:de:5e:f8:
95:91:6c:d8:8a:44:6f:ed:da:0b:43:d7:b0:4f:23:0c:38:73:
b5:35:c2:06:7c:2f:81:7f:08:f0:4c:e1:1e:cc:61:dd:8b:f5:
1f:57:fa:09:65:29:5d:c3:d7:e2:1d:4e:72:08:f6:4f:7a:39:
41:52:4c:6f:ae:9a:dc:1a:86:70:ea:7e:4e:62:b6:f4:7c:5c:
90:86:b2:d5:15:7e:02:96:0b:68:d6:f4:f2:de:fc:9b:84:0b:
cc:e9:0b:dd:91:19:8e:f3:91:3b:e9:5d:4a:b8:92:87:3a:1e:
1d:52:53:05:13:9f:9a:dd:f3:fa:80:7a:8c:8d:cf:ff:c1:14:
75:0b:fd:88:ed:d4:84:ef:5c:40:03:28:53:95:78:5f:b4:e7:
dc:f8:dc:b0:83:70:82:c6:fc:e2:86:7f:4a:0a:49:86:87:17:
bb:8b:cd:9c:e1:e7:73:ae:80:0a:30:c8:f9:8b:0f:5e:01:2d:
fc:86:b5:43:32:6b:05:7f:25:a4:56:07:07:a0:82:02:25:b5:
44:87:85:a2:57:a1:36:06:1a:32:ea:62:88:61:6e:3b:8f:49:
77:43:68:a7:fb:fa:82:3b:9d:3b:24:b6:94:10:18:ad:a7:47:
3e:3e:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:01 2026 by rpki-client