Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/whxcCnhogn97oOA-3W--x_-koQs.roa
File: whxcCnhogn97oOA-3W--x_-koQs.roa (raw, json)
Hash identifier: HE7EpssHJvheNhI9v3hNt9r9mWY3igkSeO5p0Z+zZ8U=
Subject key identifier: C2:1C:5C:0A:78:68:82:7F:7B:A0:E0:3E:DD:6F:BE:C7:FF:A4:A1:0B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019D976968B9F0AB7DF231E0BE03C4866B3B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/whxcCnhogn97oOA-3W--x_-koQs.roa
Signing time: Thu 16 Apr 2026 17:49:20 +0000
ROA not before: Thu 16 Apr 2026 17:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 88.216.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:69:68:b9:f0:ab:7d:f2:31:e0:be:03:c4:86:6b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 16 17:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c21c5c0a7868827f7ba0e03edd6fbec7ffa4a10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:43:ab:d9:05:71:11:25:36:c9:02:c2:8c:
2f:52:5f:64:65:d5:aa:f3:e0:8f:7a:fa:01:1e:9f:
99:9f:b1:79:10:b9:6a:a9:04:90:a9:ab:d4:b5:54:
d8:01:1c:61:5c:d1:a5:27:61:b0:bb:93:7a:ea:63:
d9:4c:dc:72:1b:b9:39:dd:d0:bf:b6:7d:49:2e:70:
bc:c6:cf:91:2c:9f:9a:1a:c5:15:4b:36:59:73:30:
ea:80:b8:17:46:95:b8:43:8d:0c:22:9b:20:d4:d4:
e2:35:70:29:e8:ab:1b:ea:60:27:79:d8:0f:77:06:
9f:14:0c:12:ba:df:06:07:77:fc:3b:1c:58:e1:73:
48:12:03:58:68:da:bc:d4:24:f2:91:e8:f0:da:2f:
25:80:74:67:67:2a:96:35:a8:9e:2b:db:88:25:f8:
7d:1f:9c:03:a8:26:0c:b8:7d:be:c5:fd:dc:c8:a5:
11:68:fe:31:fd:f8:5d:bd:01:66:2f:0a:49:12:25:
7a:41:18:47:32:aa:97:ec:58:61:66:22:a7:f0:bc:
ac:c7:fe:43:b9:ac:48:c4:c8:75:1c:bf:bc:60:6f:
60:b7:20:62:f4:1e:63:77:9a:79:39:5c:2f:2e:91:
8a:29:40:66:1c:ae:3e:4f:85:38:2f:b2:e5:93:a1:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:5C:0A:78:68:82:7F:7B:A0:E0:3E:DD:6F:BE:C7:FF:A4:A1:0B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/whxcCnhogn97oOA-3W--x_-koQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:79:53:e9:0d:cc:19:5b:b1:bf:16:e6:5c:87:64:5c:63:be:
c8:3b:cf:c3:26:19:8d:54:b1:c9:ce:e7:10:77:36:38:b3:66:
37:1a:71:96:1f:31:24:32:79:82:8a:97:c9:a4:88:f7:b5:75:
1d:d4:9c:af:3a:55:31:f4:5d:76:c1:55:11:f6:1d:9a:d6:2c:
e7:d9:52:02:02:73:95:f0:ec:2d:50:ab:41:45:3a:2e:97:82:
b1:6e:b9:53:d0:ef:d4:78:78:1c:23:f6:22:2e:e3:a8:6c:67:
4c:65:08:7a:96:42:eb:88:38:8b:90:62:c7:97:d0:2a:7e:46:
21:7b:3d:00:f1:4e:93:e9:77:85:e7:88:36:60:06:bf:ca:d5:
ef:30:16:3f:fd:2a:16:09:12:7b:34:6f:8c:e9:26:3d:c7:51:
02:31:90:3b:87:71:fb:65:46:7c:80:3f:40:01:9f:ab:8f:d0:
58:e0:38:42:55:c4:15:4c:2a:00:4d:99:e4:26:d3:0f:47:d8:
5d:6b:a9:95:30:ce:b0:12:71:50:07:ec:44:40:51:f5:9b:de:
6b:e6:83:3e:ff:66:93:fe:f1:89:e1:6f:cc:7c:21:d7:22:0e:
6d:ae:12:f3:34:bd:14:dc:31:51:53:c6:d5:52:22:de:0b:bb:
31:fc:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:30 2026 by rpki-client