Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/WbAwRdYrJR5wFAa2q_hyf2XEajA.roa
File: WbAwRdYrJR5wFAa2q_hyf2XEajA.roa (raw, json)
Hash identifier: fVhxKKPzH41Q65WrATxm9iiVCPSBedSsGy5vx1QfADc=
Subject key identifier: 59:B0:30:45:D6:2B:25:1E:70:14:06:B6:AB:F8:72:7F:65:C4:6A:30
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 019B77C6C1D3E0567C18E23FE26CEE4CDD1A
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/WbAwRdYrJR5wFAa2q_hyf2XEajA.roa
Signing time: Thu 01 Jan 2026 04:17:53 +0000
ROA not before: Thu 01 Jan 2026 04:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198248
IP address blocks: 176.102.72.0/21 maxlen: 21
176.102.77.0/24 maxlen: 24
2001:67c:25c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:c1:d3:e0:56:7c:18:e2:3f:e2:6c:ee:4c:dd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Jan 1 04:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59b03045d62b251e701406b6abf8727f65c46a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:84:a4:8c:56:16:9c:13:ad:aa:a3:2e:dc:
bd:86:0a:74:2e:56:bc:42:56:a1:78:8c:66:9a:74:
89:ef:21:b6:af:77:cf:6f:b0:99:b3:b6:74:ec:14:
ca:5d:f8:8b:58:e6:dd:70:d9:c1:22:ac:df:40:c1:
38:28:ca:74:b2:d7:05:89:e0:80:d0:0f:7d:e0:a0:
66:de:d8:31:32:53:43:dc:59:ca:ff:35:e3:af:ba:
83:e0:5e:d2:7f:64:0c:a2:7b:cd:35:f7:31:64:82:
c9:13:3a:0a:e1:07:4f:69:2d:aa:0c:72:38:0b:09:
19:92:f4:76:ac:fd:59:e0:55:27:b2:de:25:70:86:
cc:68:78:f6:43:6b:a0:3e:54:dd:f2:51:fc:0a:6b:
b3:1e:55:f1:02:ed:53:94:fe:2e:72:1e:d1:53:bf:
32:9e:1f:60:aa:ef:e6:30:98:d8:ac:1c:d7:16:c5:
c1:29:6c:0f:81:66:b5:5b:22:b4:c4:33:a7:bd:cf:
5a:f8:e5:76:c5:2b:54:63:0a:8f:1b:30:fe:1d:eb:
85:98:da:31:a5:c3:65:79:d4:c3:05:a3:de:ba:0d:
89:4d:3b:8c:55:8c:8f:b2:53:10:91:a5:4c:44:95:
90:20:7f:91:57:f3:92:a9:b3:67:01:ca:5b:37:cd:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B0:30:45:D6:2B:25:1E:70:14:06:B6:AB:F8:72:7F:65:C4:6A:30
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/WbAwRdYrJR5wFAa2q_hyf2XEajA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.72.0/21
IPv6:
2001:67c:25c0::/48
Signature Algorithm: sha256WithRSAEncryption
81:53:18:4d:e4:0b:2e:74:4e:90:9b:9c:34:b5:77:22:bd:63:
ea:db:f1:71:7c:df:95:ac:b1:5a:5e:9d:48:bc:42:b1:3a:81:
e9:de:8b:c2:01:d7:7f:1c:3a:b7:87:12:3a:c0:26:8e:36:49:
a6:14:42:71:42:f8:6b:b0:75:b9:e8:5e:15:ed:dc:f9:05:3e:
21:9d:62:f7:29:d0:3d:e5:86:d6:7c:55:7c:d5:83:90:3c:1c:
45:ab:b2:26:bc:89:76:85:7d:e9:88:8d:40:fe:8f:18:63:83:
3d:3c:9a:20:78:e9:4e:b7:7f:98:f0:15:43:fb:73:41:26:e6:
ff:5c:e6:28:8b:29:af:f9:ca:e0:60:1a:01:a1:16:47:58:fd:
e4:77:87:fa:e9:ef:21:85:cf:f8:6f:09:2a:c6:f8:dc:a4:bb:
3f:cd:b8:21:89:fc:a2:a3:64:5f:7f:aa:97:d3:0c:62:37:99:
03:93:80:f8:7b:1c:38:c5:70:c1:1e:71:f8:47:ca:e0:b8:54:
c9:c1:bb:4d:9a:6a:f5:df:58:6f:3f:2c:db:fe:a4:2b:58:d5:
27:39:a0:73:08:8d:9a:cf:bd:5e:f0:53:ea:4f:a7:7a:84:e4:
fb:b4:03:15:b3:43:99:a9:6f:0b:9e:95:8b:a5:a0:da:b4:c9:
d7:ef:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:10 2026 by rpki-client