Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/wapsyTE49PwMmdRHTnG_OVdDXfM.roa
File: wapsyTE49PwMmdRHTnG_OVdDXfM.roa (raw, json)
Hash identifier: +FSFHYz+BsW26hVZI3gmX7SmktTPZc0pdFZLjVouElk=
Subject key identifier: C1:AA:6C:C9:31:38:F4:FC:0C:99:D4:47:4E:71:BF:39:57:43:5D:F3
Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial: 019B7EA53E55066B4C9E95C85ECEEE0F914D
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/wapsyTE49PwMmdRHTnG_OVdDXfM.roa
Signing time: Fri 02 Jan 2026 12:18:37 +0000
ROA not before: Fri 02 Jan 2026 12:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57089
IP address blocks: 91.230.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:3e:55:06:6b:4c:9e:95:c8:5e:ce:ee:0f:91:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Validity
Not Before: Jan 2 12:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1aa6cc93138f4fc0c99d4474e71bf3957435df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:5a:d2:c6:dc:fb:10:cf:57:d7:06:8e:e6:
22:1c:7d:62:0f:53:6b:76:ea:1b:64:6b:03:b7:67:
b7:b6:fa:66:18:e5:8a:9a:5a:c7:42:bb:f3:b3:e8:
5c:2d:fd:1a:ec:7f:74:69:75:32:8b:8d:62:72:7b:
bc:43:2f:cc:3e:69:2c:79:97:a8:85:36:27:19:49:
0c:66:c6:2c:cd:ae:b4:6a:ac:31:9e:55:e0:1a:db:
71:a4:c0:49:bf:a8:43:03:cf:ab:a7:9f:0f:f0:0f:
31:e3:e2:87:1a:40:90:54:ea:94:65:9e:c9:e2:12:
b8:59:60:ed:e0:62:cc:f5:c5:7f:1e:61:29:37:bf:
91:90:9e:00:2f:92:95:ed:91:71:78:29:9e:5a:c2:
b5:3f:0f:99:df:04:9b:c6:f6:50:b9:ea:a4:33:9b:
05:e3:f9:a6:d2:cd:96:4c:18:68:b0:75:15:15:2c:
5b:a3:28:47:37:7a:6b:e7:ea:4e:67:77:d6:a0:ab:
35:7d:e7:ab:b6:88:5a:dc:17:6a:cf:72:89:64:24:
22:67:9c:03:e7:95:58:6f:05:00:fd:15:a0:ad:89:
7e:e5:55:2d:6a:af:88:a4:40:6f:2c:75:5a:2d:4d:
11:c3:14:e3:37:7c:21:cf:c9:88:9a:38:51:41:9c:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:6C:C9:31:38:F4:FC:0C:99:D4:47:4E:71:BF:39:57:43:5D:F3
X509v3 Authority Key Identifier:
keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/wapsyTE49PwMmdRHTnG_OVdDXfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.160.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:0f:11:d7:60:c5:c3:25:e9:f3:fe:ca:9d:8e:73:17:6d:b8:
d9:25:ac:ce:7f:ad:e8:ca:ee:11:6f:96:62:72:6d:87:6c:25:
a4:b8:fe:04:87:3a:61:cf:78:cc:61:8b:2f:83:a0:db:12:45:
21:1d:78:50:90:a1:0f:af:cf:ac:22:eb:5e:67:9e:40:13:c8:
32:87:7c:7f:54:85:89:7b:2c:19:d2:d9:12:82:1b:ef:de:6d:
7c:31:fb:e6:7b:5d:e6:4f:77:b1:8f:a3:28:77:59:43:eb:95:
57:e1:cf:4c:cc:d2:86:a5:6e:5c:15:a9:1f:53:e4:3f:92:58:
41:4d:5e:48:2b:e3:64:66:a4:e3:d4:0f:a9:7d:72:13:a7:e8:
17:00:0c:62:c5:43:c5:f6:29:2e:98:50:28:27:d0:32:95:b9:
28:90:44:4a:03:fd:b8:06:20:01:1c:ef:0e:33:8e:fe:90:98:
54:09:00:fd:b6:ff:aa:e2:d9:30:03:45:40:89:45:4d:74:9c:
e9:c7:00:d9:d4:75:4e:e1:d9:6b:80:ee:d8:29:17:45:2d:d1:
be:dc:d3:01:ff:d0:38:d3:57:63:e1:e6:d2:5d:0a:62:f6:41:
70:fb:51:67:23:7d:4a:13:eb:70:3d:4a:8a:eb:9f:b4:7f:66:
4d:38:72:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:43 2026 by rpki-client