Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/wf5sNUg_rbqRFKM77CUPVakyd14.roa
File: wf5sNUg_rbqRFKM77CUPVakyd14.roa (raw, json)
Hash identifier: u0+ZIMsIG7nFtIJ2mRUxaKHejLv2YpWJSvDFcdHEntk=
Subject key identifier: C1:FE:6C:35:48:3F:AD:BA:91:14:A3:3B:EC:25:0F:55:A9:32:77:5E
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019D91090399657B3A8A68EB9726F992A67A
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/wf5sNUg_rbqRFKM77CUPVakyd14.roa
Signing time: Wed 15 Apr 2026 12:06:20 +0000
ROA not before: Wed 15 Apr 2026 12:06:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58065
IP address blocks: 158.173.102.0/24 maxlen: 24
158.173.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:09:03:99:65:7b:3a:8a:68:eb:97:26:f9:92:a6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Apr 15 12:06:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1fe6c35483fadba9114a33bec250f55a932775e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:6a:94:47:3e:74:46:c3:40:46:87:39:41:
88:8a:db:eb:40:32:a1:cd:a6:c0:3d:f3:10:99:bd:
23:23:32:e1:ca:38:d7:0a:ce:55:3f:d9:57:60:0e:
96:fc:02:ea:67:64:55:ea:f5:62:6c:db:41:df:21:
f7:da:46:44:da:22:ab:f6:f3:6a:cc:fa:8d:e1:73:
53:b4:01:b4:ad:14:7f:f4:9a:1b:30:11:ab:5f:c2:
20:2c:c9:21:14:03:4f:19:2b:e8:4a:5e:bb:01:7b:
38:c2:bf:5d:3e:19:e0:90:b1:07:9e:c3:94:58:e2:
6b:68:60:41:3e:10:88:a5:4d:7d:cc:7e:b1:80:88:
dd:88:a2:49:41:76:c1:b0:23:45:51:b7:78:ce:07:
29:51:e7:25:94:d5:6f:e0:56:4a:8f:27:82:2f:ba:
0f:d4:e7:d1:5c:50:9a:46:5a:ca:1a:6e:1c:20:da:
2c:02:8d:fa:be:17:2f:b5:60:8f:d7:d8:9c:a7:0b:
49:f7:93:5f:cc:8c:ed:ce:6d:c4:59:cd:8d:0f:cd:
43:91:9b:c8:0b:4f:53:8b:b8:05:8a:2b:37:e5:2b:
9d:f6:dd:fc:c6:b0:42:b2:2e:30:3b:62:11:50:01:
5e:c2:ae:19:31:05:a5:dc:28:46:32:f3:4f:06:2a:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:6C:35:48:3F:AD:BA:91:14:A3:3B:EC:25:0F:55:A9:32:77:5E
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/wf5sNUg_rbqRFKM77CUPVakyd14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.102.0/23
Signature Algorithm: sha256WithRSAEncryption
83:7f:32:10:1e:79:fd:5d:00:99:6b:ea:51:78:2f:bb:f8:b7:
f5:30:61:76:7c:0a:03:87:52:d5:00:9d:89:6a:21:4b:16:be:
95:12:28:94:2e:f2:3b:47:ce:bc:88:1f:09:bc:4c:45:27:e9:
15:21:de:d6:ee:b7:22:ad:54:ac:aa:c1:e0:4d:6b:8e:4f:ab:
03:c7:3d:ae:30:c0:6f:84:5d:7a:c9:7b:28:e2:db:1b:cc:2d:
1f:1f:78:12:33:f0:7f:32:4c:be:67:90:dd:45:d9:1f:a0:be:
e5:2f:52:9c:8a:d1:f0:b1:77:3f:6b:7f:18:c6:64:7f:9e:04:
b5:f5:f5:22:7a:b7:11:92:a4:3f:ab:90:70:8f:5b:c2:fc:3f:
60:a2:9a:1d:57:d4:b1:df:50:58:49:69:ea:a0:ac:16:60:eb:
a2:1d:af:99:3f:80:d4:da:77:bf:f6:6c:27:fa:f9:90:76:4c:
37:01:30:62:5c:b4:69:f6:50:0e:f9:24:a6:4a:4a:6f:c1:89:
31:6d:80:3e:d3:4e:14:97:f2:40:40:9d:03:6d:1f:16:27:2a:
93:05:e0:49:ac:5b:b3:c0:a3:06:6e:9b:03:f2:0d:a4:84:5d:
ac:c8:61:41:8f:f1:12:ee:54:11:22:a5:c6:33:14:89:10:74:
36:a7:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:42 2026 by rpki-client