Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/WVQ_4kTEhoVhQM-9ac-DEN9RsBc.roa
File: WVQ_4kTEhoVhQM-9ac-DEN9RsBc.roa (raw, json)
Hash identifier: GU24cPmlfo5bj/c2QlCeONcTbeP+5WZt0JB0Gy+vcmc=
Subject key identifier: 59:54:3F:E2:44:C4:86:85:61:40:CF:BD:69:CF:83:10:DF:51:B0:17
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 01A115E1903F052B2B93311445DD9B69DA7D
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/WVQ_4kTEhoVhQM-9ac-DEN9RsBc.roa
Signing time: Wed 07 Oct 2026 10:21:06 +0000
ROA not before: Wed 07 Oct 2026 10:21:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.204.92.0/24 maxlen: 24
185.204.93.0/24 maxlen: 24
185.204.94.0/24 maxlen: 24
185.204.95.0/24 maxlen: 24
185.230.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:e1:90:3f:05:2b:2b:93:31:14:45:dd:9b:69:da:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Oct 7 10:21:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59543fe244c486856140cfbd69cf8310df51b017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:20:e9:eb:0e:a8:43:c5:9f:2c:36:59:db:
be:60:aa:b5:87:b6:d8:92:8e:b2:4c:69:ba:2c:f8:
1d:34:0d:52:d0:1b:95:19:65:d4:86:bc:3e:8a:c0:
ef:77:0f:9e:13:0e:32:1f:ca:e7:ac:ec:2f:2c:3a:
9c:d9:d5:77:71:01:d8:4c:1b:c9:15:86:c1:99:67:
7f:4a:17:75:7a:63:f0:31:99:ad:ae:05:21:16:26:
b4:41:9b:76:37:52:6f:07:92:50:f9:fc:48:57:58:
48:2b:51:38:a9:bb:e8:cc:ad:fc:ce:7a:66:7a:eb:
41:4f:7f:3e:04:bb:fc:b6:aa:0f:b6:d2:39:38:01:
a9:a1:38:ed:bd:7f:e5:5f:69:bf:d0:5e:0d:85:fb:
05:f4:b0:55:35:f7:b0:bb:ee:a3:42:b8:bc:a2:ce:
5b:f6:e4:d6:e7:ef:db:99:95:da:53:23:f5:f9:86:
30:7f:2a:72:fe:14:6d:8e:39:f0:e9:66:5d:72:77:
61:02:c1:da:73:c5:8f:81:af:67:60:15:39:f2:fd:
e1:48:d2:f0:04:df:fd:73:73:65:f2:f1:61:c8:a8:
f2:14:2e:de:aa:c2:27:3b:a0:f6:d8:83:c2:9a:e5:
20:00:82:6f:7f:d2:43:9a:4c:26:2f:d1:7a:c1:dc:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:3F:E2:44:C4:86:85:61:40:CF:BD:69:CF:83:10:DF:51:B0:17
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/WVQ_4kTEhoVhQM-9ac-DEN9RsBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.92.0/22
185.230.228.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9a:db:7f:be:87:54:b0:00:44:7e:82:af:b4:fd:4c:77:d9:
b4:ff:3f:1e:19:a8:68:0d:92:e4:db:25:21:5c:1a:32:b0:63:
3e:46:17:5c:23:78:7a:29:43:26:56:80:a0:e3:d9:df:9c:98:
95:d4:03:54:2e:63:c7:d8:5e:e4:99:c9:81:46:9a:f8:46:39:
f3:96:e2:ac:23:7d:37:84:c5:c1:f6:1b:2e:8a:fd:22:d7:d7:
c5:24:a6:0f:b9:52:5e:57:10:06:3b:ff:7a:fe:c3:5c:8c:70:
04:d8:9e:4f:f0:1c:83:1e:ce:b3:e7:a8:13:d9:3e:90:41:54:
60:1b:1c:40:0c:2c:f2:88:2f:74:83:99:c8:d4:b5:27:ec:1b:
70:21:c8:a4:80:0b:ed:6c:e1:e2:60:ab:37:eb:b5:b9:1a:b4:
e4:f0:a4:37:4e:8f:2c:9d:08:77:13:65:e8:c6:60:8d:b7:65:
09:f2:51:b2:08:e1:d3:55:44:76:c1:01:56:80:7b:9b:8c:52:
b1:90:80:2e:88:56:16:9f:43:9c:eb:7a:5b:a0:ee:d8:05:c6:
6a:e5:97:26:94:bc:ff:36:d3:3f:51:9d:b2:7c:86:41:8a:fa:
2a:45:f0:20:fc:ae:30:70:c3:ae:72:dc:b8:cc:04:13:02:82:
8c:cf:78:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:49:03 2026 by rpki-client