Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/1-WcsQwPSxiGC7Lf3CEMo6I_R-T8.roa
File: 1-WcsQwPSxiGC7Lf3CEMo6I_R-T8.roa (raw, json)
Hash identifier: r4s/pYFFvl0PuU1Pc1ZEalLcMszU2nIBrtcNDifNzEc=
Subject key identifier: F9:67:2C:43:03:D2:C6:21:82:EC:B7:F7:08:43:28:E8:8F:D1:F9:3F
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 01A07C7F1E269C3D10A791BAEBAC62333694
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/1-WcsQwPSxiGC7Lf3CEMo6I_R-T8.roa
Signing time: Mon 07 Sep 2026 15:31:40 +0000
ROA not before: Mon 07 Sep 2026 15:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213929
IP address blocks: 185.69.120.0/22 maxlen: 22
185.127.176.0/22 maxlen: 22
185.199.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:7f:1e:26:9c:3d:10:a7:91:ba:eb:ac:62:33:36:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Sep 7 15:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9672c4303d2c62182ecb7f7084328e88fd1f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:1e:bb:5f:11:11:35:33:01:60:a6:ff:30:
97:e3:69:27:c9:1f:1a:7d:c5:6f:eb:dc:0d:70:7a:
1a:fe:03:e2:11:83:c5:f7:83:60:5a:85:16:d1:54:
e3:61:c7:d5:d5:11:d4:8d:2e:59:94:f0:30:59:08:
0d:dd:1a:6c:34:43:bb:1b:a0:f4:bd:b7:7c:de:02:
5f:9a:8b:a1:a2:25:9c:a1:01:36:05:28:7d:fb:5a:
06:97:08:cd:7d:06:a5:f7:63:dc:42:b1:4c:82:ff:
64:1a:dd:89:9c:1c:e9:88:2e:6f:05:c1:08:55:3d:
81:fc:c9:37:17:76:6d:07:d9:0f:fa:53:7f:2f:a9:
00:3f:63:a1:d4:52:50:bf:43:19:3f:53:9f:a0:7d:
8c:60:2f:3f:29:28:15:c9:a1:da:3d:cb:45:27:fe:
5d:fb:b3:68:58:49:5c:ef:85:6a:61:7f:cf:ef:aa:
f2:2f:50:0e:c0:d5:ec:63:4e:32:62:92:20:35:fa:
45:b4:72:04:92:ce:c7:b3:31:65:a2:ca:c7:29:44:
6c:c3:97:fa:a6:39:e9:2f:3b:8d:b8:08:cd:93:73:
4d:bc:7e:d3:0e:81:8e:96:e7:09:de:12:e6:df:31:
f8:5d:c3:9b:d0:9f:3c:ee:a8:d9:e0:7c:d9:ea:ad:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:67:2C:43:03:D2:C6:21:82:EC:B7:F7:08:43:28:E8:8F:D1:F9:3F
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/1-WcsQwPSxiGC7Lf3CEMo6I_R-T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.120.0/22
185.127.176.0/22
185.199.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:1f:1c:68:20:cf:b7:9c:a5:2c:b2:ad:3c:cf:99:a1:73:7e:
ce:d7:3a:20:1f:61:12:02:fa:ff:65:58:db:1d:20:bb:1a:dd:
54:0d:07:74:0f:76:8c:a2:fd:d2:c8:68:dd:0c:2c:25:42:2c:
7a:64:f1:21:f2:26:cb:bc:fe:bc:fc:7e:e8:63:38:01:c5:bd:
35:93:7d:0a:9c:36:ce:e3:dd:c2:74:22:eb:f7:ca:16:16:b5:
39:72:a0:31:6c:7d:e9:39:27:31:83:72:2e:b1:04:68:0c:0f:
f7:0f:81:f4:14:ac:a0:c7:a6:ce:14:4e:a2:77:f4:b7:8a:e5:
a2:b4:23:ca:d3:94:a9:fa:f2:94:d2:43:ee:4c:02:70:61:29:
1c:34:43:c5:51:bf:fc:d9:f7:aa:cd:09:9a:21:21:ad:7d:74:
c8:db:ae:bc:cd:96:c4:68:a2:9f:30:6a:96:5f:a6:17:77:97:
0c:1e:83:4c:59:d6:46:4c:a2:cc:35:7a:63:0e:78:53:55:df:
ef:a1:32:cb:bf:e4:4e:2d:15:50:21:98:42:f4:79:ca:ff:2e:
f3:e9:3b:b7:30:cc:93:2b:18:b8:4d:9c:2a:6a:cd:53:1c:cb:
75:d1:70:35:68:3c:ec:45:10:75:5a:ff:9e:88:9e:ae:c2:2a:
07:1e:1f:dd
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAaB8fx4mnD0Qp5G666xiMzaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw
YTFhNjYwHhcNMjYwOTA3MTUzMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTY3MmM0MzAzZDJjNjIxODJlY2I3ZjcwODQzMjhlODhmZDFmOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhEeu18RETUzAWCm/zCX42knyR8a
fcVv69wNcHoa/gPiEYPF94NgWoUW0VTjYcfV1RHUjS5ZlPAwWQgN3RpsNEO7G6D0
vbd83gJfmouhoiWcoQE2BSh9+1oGlwjNfQal92PcQrFMgv9kGt2JnBzpiC5vBcEI
VT2B/Mk3F3ZtB9kP+lN/L6kAP2Oh1FJQv0MZP1OfoH2MYC8/KSgVyaHaPctFJ/5d
+7NoWElc74VqYX/P76ryL1AOwNXsY04yYpIgNfpFtHIEks7HszFlosrHKURsw5f6
pjnpLzuNuAjNk3NNvH7TDoGOlucJ3hLm3zH4XcOb0J887qjZ4HzZ6q1yBQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPlnLEMD0sYhguy39whDKOiP0fk/MB8GA1UdIwQY
MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct
ZGU5YjJmOGY3ZTI5LzEvMS1XY3NRd1BTeGlHQzdMZjNDRU1vNklfUi1UOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDAvNGFjYzE1LWJiYTAtNDQ1OS05NjY3LWRlOWIyZjhmN2Uy
OS8xLzVodlgzUi1LeUxRWks2ZUtXU05JdGQwS0dtWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEArlFeAME
Arl/sAMEArnHxDANBgkqhkiG9w0BAQsFAAOCAQEAjB8caCDPt5ylLLKtPM+ZoXN+
ztc6IB9hEgL6/2VY2x0guxrdVA0HdA92jKL90sho3QwsJUIsemTxIfImy7z+vPx+
6GM4AcW9NZN9Cpw2zuPdwnQi6/fKFha1OXKgMWx96TknMYNyLrEEaAwP9w+B9BSs
oMemzhROonf0t4rlorQjytOUqfrylNJD7kwCcGEpHDRDxVG//Nn3qs0JmiEhrX10
yNuuvM2WxGiinzBqll+mF3eXDB6DTFnWRkyizDV6Yw54U1Xf76Eyy7/kTi0VUCGY
QvR5yv8u8+k7tzDMkysYuE2cKmrNUxzLddFwNWg87EUQdVr/noiersIqBx4f3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:55 2026 by rpki-client