Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WPuFmeFf7bolQ2pQQfkaLL7CUUw.roa
File: WPuFmeFf7bolQ2pQQfkaLL7CUUw.roa (raw, json)
Hash identifier: VJJREJvuhCSwz9Xj/YAxJrPq/Z7f1rpbd0POJHOOZkw=
Subject key identifier: 58:FB:85:99:E1:5F:ED:BA:25:43:6A:50:41:F9:1A:2C:BE:C2:51:4C
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0A4E9AE8D713E923C89B2D70567A7C6FC
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WPuFmeFf7bolQ2pQQfkaLL7CUUw.roa
Signing time: Tue 15 Sep 2026 11:52:52 +0000
ROA not before: Tue 15 Sep 2026 11:52:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218674
IP address blocks: 193.187.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:e9:ae:8d:71:3e:92:3c:89:b2:d7:05:67:a7:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 15 11:52:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58fb8599e15fedba25436a5041f91a2cbec2514c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:de:35:62:92:22:63:10:34:b9:1b:5f:22:
3f:32:f1:c8:c5:26:cc:a6:af:20:ec:7f:6f:46:39:
7f:f3:a7:8f:b1:ef:fd:c8:a4:2d:bd:a1:50:76:a8:
4a:64:01:fd:ed:97:7e:64:1a:73:4d:89:3b:fc:a0:
00:49:52:12:e6:36:07:83:36:91:c6:69:98:1c:b2:
ee:f8:f3:1a:ac:8d:02:73:76:df:1d:ea:b6:96:0f:
23:1b:4c:a5:ae:ab:79:78:15:d1:2b:4c:6d:58:61:
e1:f8:ae:fe:46:a7:e0:a2:35:ea:b5:80:18:a7:92:
5f:a4:6d:72:cd:5e:89:19:0d:94:db:ca:45:11:00:
48:44:de:cd:1a:05:8d:66:77:a6:63:69:2e:d1:58:
9c:52:98:6f:ed:ac:55:be:ec:11:d2:a3:ab:50:c9:
b6:97:2c:22:2e:94:1d:a0:e4:8d:84:56:65:30:f5:
b3:37:47:05:ba:82:4d:7d:1d:59:7e:83:d8:2f:d9:
52:d8:eb:f9:14:13:e8:e9:1c:6a:6e:bd:10:db:23:
c8:9a:41:b7:aa:53:09:b4:85:57:3b:17:ca:d5:f9:
d1:3c:ca:cb:75:1b:0e:4b:c2:c2:d7:0b:16:2b:2e:
b6:34:f9:00:27:16:5d:6f:e7:7c:52:19:77:ac:ac:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FB:85:99:E1:5F:ED:BA:25:43:6A:50:41:F9:1A:2C:BE:C2:51:4C
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WPuFmeFf7bolQ2pQQfkaLL7CUUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d2:e8:22:70:72:52:5a:bf:e8:5b:cb:49:3a:9b:9f:0d:56:
4c:d6:d3:7f:41:17:13:dc:2a:36:04:65:6c:89:5b:fc:ba:55:
98:77:10:48:93:6d:42:99:be:7d:e9:ed:5c:0e:c7:55:7c:a3:
63:28:60:80:05:1e:db:e1:9e:a0:a1:b4:10:9f:9c:db:42:bf:
81:ef:94:77:00:09:aa:1e:1d:2c:40:73:1c:cf:a0:8a:f1:53:
51:a5:3d:03:8f:63:7c:3a:e1:50:5f:23:05:16:48:ed:32:d8:
2b:6d:6d:29:d5:0f:c4:98:e4:eb:a2:e4:b8:61:6f:ae:a4:ce:
dd:2b:f1:62:b0:02:a6:fa:4d:c2:6f:30:fe:f4:89:de:5e:48:
67:c2:40:5d:0e:75:84:87:c8:2d:89:66:97:84:cf:fc:11:3f:
7f:f9:9d:c5:e3:04:83:4e:e3:c8:4f:ff:12:92:84:f5:57:ed:
07:b5:e2:2d:4f:6b:04:87:6a:2b:79:93:a5:2a:b5:82:22:1c:
c0:80:fd:d0:36:da:e9:32:bc:af:56:a7:3d:a5:41:9d:98:84:
51:63:ff:ab:06:06:f5:11:e5:07:95:ac:44:64:fa:6e:63:a3:
f0:89:4d:cb:80:27:02:99:b2:ce:c4:0b:9f:00:d8:7f:ee:c2:
dd:b9:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:10:16 2026 by rpki-client