Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/W1e0EWYLXXz7WEE9jIFX4zFwLi8.roa
File: W1e0EWYLXXz7WEE9jIFX4zFwLi8.roa (raw, json)
Hash identifier: MBpCLgOals90jJpQV95qSwbxGgxUH35zT0YlklNTg2M=
Subject key identifier: 5B:57:B4:11:66:0B:5D:7C:FB:58:41:3D:8C:81:57:E3:31:70:2E:2F
Certificate issuer: /CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Certificate serial: 019B7EA71CE6FEC1B952286F344E4201AEEA
Authority key identifier: C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/W1e0EWYLXXz7WEE9jIFX4zFwLi8.roa
Signing time: Fri 02 Jan 2026 12:20:39 +0000
ROA not before: Fri 02 Jan 2026 12:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206795
IP address blocks: 185.176.66.0/24 maxlen: 24
185.176.67.0/24 maxlen: 24
2a0a:d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:1c:e6:fe:c1:b9:52:28:6f:34:4e:42:01:ae:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Validity
Not Before: Jan 2 12:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b57b411660b5d7cfb58413d8c8157e331702e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:60:dc:ee:f3:27:43:b6:1d:5d:2e:53:4f:
57:68:ea:2d:ac:26:6e:c0:43:1e:56:5d:48:b0:77:
26:d4:76:8c:21:55:2b:28:f8:2f:fd:dd:54:a1:f4:
60:6c:8d:ed:a7:31:21:38:15:d8:72:78:f1:46:08:
4f:a9:b4:47:07:85:6b:a8:eb:bb:8f:60:ae:a1:7c:
c1:c6:35:75:67:55:fd:88:d3:fc:dd:e6:63:6e:64:
bb:9e:8e:47:12:e4:dd:03:74:51:5a:c7:e5:a1:fe:
d0:71:d2:3d:80:55:c0:1e:3e:e7:ac:85:05:6d:58:
75:0e:08:47:45:56:bd:1d:fc:e3:fc:69:81:ab:99:
0b:67:09:05:67:b8:b9:8d:d4:ed:ab:88:55:a4:66:
9e:52:fa:88:bb:61:31:f3:d4:fc:7b:ae:5a:a8:b5:
01:a7:be:80:c3:89:e6:7e:a6:91:71:62:23:fb:12:
e5:f1:35:ba:3e:ef:b7:79:d4:d3:91:ca:76:33:fd:
34:a6:dc:59:5f:bd:e1:0d:ac:70:c8:e7:76:f2:41:
e1:98:f8:85:de:6b:7a:3e:d9:d5:11:58:be:2b:8e:
ee:00:16:a0:32:b0:35:02:a8:b2:a6:a5:00:9b:aa:
48:8b:9c:ab:ff:7e:54:57:a7:0a:51:c0:f9:1c:15:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:57:B4:11:66:0B:5D:7C:FB:58:41:3D:8C:81:57:E3:31:70:2E:2F
X509v3 Authority Key Identifier:
keyid:C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/W1e0EWYLXXz7WEE9jIFX4zFwLi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.66.0/23
IPv6:
2a0a:d80::/29
Signature Algorithm: sha256WithRSAEncryption
52:99:0a:7a:4f:82:45:f4:67:f1:f1:a6:66:70:18:d5:2a:26:
10:d6:d9:3b:a3:c2:fe:8f:60:80:61:3d:97:e7:ae:5c:c3:85:
42:92:66:99:94:83:cd:b5:13:34:55:0a:92:da:09:5f:bf:b8:
67:a8:03:c2:48:24:e7:6a:1f:47:6a:a5:24:3c:52:75:73:20:
9e:4d:45:7a:c8:c0:58:8a:8c:39:85:2e:08:e3:10:bd:20:14:
b6:af:3b:56:6f:d4:59:78:e6:a4:5e:9a:63:b4:21:d8:0c:3b:
03:bc:ee:cd:be:01:ca:6c:8b:49:20:76:47:26:49:4f:4f:ba:
1b:f3:12:52:9c:7b:6b:2f:43:40:c5:38:e9:3c:0b:47:48:87:
fc:bc:d0:45:c3:30:a4:ff:e6:e5:89:73:78:f9:8e:bb:66:6e:
4f:9b:da:2f:a5:21:9f:b4:37:0a:a9:99:bd:67:bf:9c:86:24:
3b:aa:1c:ad:c8:2e:9e:d4:09:f9:8d:21:fc:88:96:6c:b3:ac:
f9:bd:31:07:85:d4:19:b6:cf:bb:9f:33:48:b8:09:7d:47:fa:
17:7d:48:b2:fb:d3:d9:34:84:f0:0a:40:67:9b:3e:93:35:a3:
1e:59:95:20:85:58:02:2c:ea:7c:1c:28:4b:bf:6b:9e:bf:32:
1f:6a:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:32:30 2026 by rpki-client