Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/WgFjeIjodHf0tIFJwgd7qL6VzDY.roa
File: WgFjeIjodHf0tIFJwgd7qL6VzDY.roa (raw, json)
Hash identifier: SbLcaGFtR51gDtKvy7+lV/tvtr//sjAXrktSn3Oq23Q=
Subject key identifier: 5A:01:63:78:88:E8:74:77:F4:B4:81:49:C2:07:7B:A8:BE:95:CC:36
Certificate issuer: /CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Certificate serial: 019D8CA02A5FD5EB4BE34B5E52CE70B7CC18
Authority key identifier: AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/WgFjeIjodHf0tIFJwgd7qL6VzDY.roa
Signing time: Tue 14 Apr 2026 15:33:20 +0000
ROA not before: Tue 14 Apr 2026 15:33:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43320
IP address blocks: 91.197.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:a0:2a:5f:d5:eb:4b:e3:4b:5e:52:ce:70:b7:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Validity
Not Before: Apr 14 15:33:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a01637888e87477f4b48149c2077ba8be95cc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:e0:c5:f3:dc:58:de:19:84:81:6d:bb:27:
a3:04:ed:f8:3a:87:82:0c:b6:a8:d4:72:a5:0a:91:
14:7f:46:ff:1d:c1:16:2b:53:6b:f3:2e:a9:ee:98:
a8:a8:e7:94:db:74:f2:0f:4a:3f:50:89:98:bf:be:
8f:cc:96:49:5a:72:7b:24:0e:4a:62:bb:b5:8a:19:
ac:65:08:3f:b7:04:00:a8:2d:a4:43:6c:42:6f:dc:
da:ea:6f:d5:b0:01:80:57:9c:3d:d9:78:1c:c0:14:
82:b4:b3:66:54:93:30:4d:46:39:bd:0b:99:07:08:
68:40:43:4e:4a:1c:0e:24:8a:69:a3:f4:4a:14:ec:
7e:e3:b7:9d:0a:aa:98:db:69:d0:80:bc:72:c8:2f:
f2:e9:ba:0a:45:a3:ac:91:f0:5e:10:ce:da:01:ad:
24:35:55:7e:12:01:53:87:70:0d:9a:05:7a:41:4c:
cc:02:39:d5:86:3c:81:32:11:0c:65:e1:45:2e:81:
f3:18:50:f5:2e:b2:5f:7e:16:29:e5:25:d9:c8:8a:
f7:42:17:16:3c:7c:69:5c:f4:a3:b5:34:52:39:da:
a2:a7:c1:88:e3:b8:20:64:f8:86:0f:05:45:9f:0b:
71:ae:9b:5f:10:8a:a4:9c:b8:00:d7:bf:fa:cb:cf:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:63:78:88:E8:74:77:F4:B4:81:49:C2:07:7B:A8:BE:95:CC:36
X509v3 Authority Key Identifier:
keyid:AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/WgFjeIjodHf0tIFJwgd7qL6VzDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.16.0/22
Signature Algorithm: sha256WithRSAEncryption
51:21:d6:f9:34:14:45:28:fd:19:87:03:f0:fb:17:e7:a8:38:
20:0c:ee:99:80:bb:82:f5:ae:0c:9f:d7:a6:35:ac:9f:16:a3:
04:92:85:dd:26:f9:4e:98:f8:c3:f6:91:36:d2:70:f2:7e:8f:
b5:e2:af:5a:74:f9:b7:b7:6a:5a:09:db:84:28:55:3a:12:92:
3c:a6:0b:7c:e3:bf:50:d1:29:b6:20:15:73:ce:87:08:e0:ea:
c8:4b:2c:7e:1a:39:86:99:75:ca:f4:1e:22:0f:c4:24:62:ac:
2a:39:92:39:c0:ed:99:72:dd:94:51:25:48:ce:0e:aa:2d:df:
4d:25:c4:94:22:bd:50:ab:b9:98:e5:db:13:7b:64:f7:88:4b:
86:fb:ec:98:5d:2f:11:d6:b7:51:9d:08:89:37:0e:fe:e4:5b:
d2:8c:73:e2:a8:74:c0:1a:33:9f:2a:bf:c7:a7:53:aa:13:c9:
e6:6f:12:5e:30:4f:83:cd:a4:89:a3:c9:a4:d3:74:28:62:ad:
d8:fc:9c:2b:22:70:1d:54:9c:c7:32:8d:3d:1d:73:fe:d0:ab:
4a:cc:17:95:fc:25:1c:c7:3e:85:77:5c:03:25:63:c8:4b:75:
e5:ed:4c:31:0b:d0:33:cb:aa:82:4e:1a:aa:e6:77:71:43:2f:
79:a9:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 18:23:01 2026 by rpki-client