Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WsKI-icOdmtZRc_ks1a2qHulX6c.roa
File: WsKI-icOdmtZRc_ks1a2qHulX6c.roa (raw, json)
Hash identifier: bStR5ItzC0qenTl0stjgtCkAHqIUHlVoYJatQJbS4YU=
Subject key identifier: 5A:C2:88:FA:27:0E:76:6B:59:45:CF:E4:B3:56:B6:A8:7B:A5:5F:A7
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E78F997D420FBDD146BCCEC4B34486692
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WsKI-icOdmtZRc_ks1a2qHulX6c.roa
Signing time: Sat 30 May 2026 13:01:23 +0000
ROA not before: Sat 30 May 2026 13:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201129
IP address blocks: 87.229.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:78:f9:97:d4:20:fb:dd:14:6b:cc:ec:4b:34:48:66:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 30 13:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ac288fa270e766b5945cfe4b356b6a87ba55fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:b8:fc:ef:4f:6f:2d:5f:85:e3:2b:ea:31:
01:24:da:cc:41:81:d3:25:38:b7:12:21:8d:27:e5:
a6:d0:84:c5:d6:b9:4d:de:af:ee:ec:45:51:08:5a:
52:56:fc:cc:36:0b:43:b4:a0:5d:49:b6:18:ff:b1:
93:2c:7c:63:09:c5:38:39:fb:36:f9:7c:fc:dd:ee:
70:74:37:f7:3e:9e:8e:84:a9:1b:cb:ca:8a:86:20:
b0:ce:99:68:35:9f:81:03:93:9d:ff:cc:d3:fc:2e:
03:4b:55:96:a0:84:b9:6b:39:66:f4:17:4e:6b:c8:
bf:65:90:ac:f5:62:39:52:85:cb:03:91:3c:69:37:
9a:c2:0a:d9:5e:64:f6:b8:3b:31:68:e8:5e:28:e5:
0a:e6:7f:a1:b9:5e:c0:04:bf:58:5b:31:c9:7d:29:
8d:5b:de:07:6d:76:c8:a2:3c:dc:a3:12:16:09:ff:
15:8e:bc:18:b1:04:cf:03:7d:2f:53:82:7a:ec:cd:
16:18:7f:59:65:a4:86:3a:b6:c3:40:c3:1d:4c:1f:
e8:10:10:9a:09:28:6f:c6:bf:9b:5b:4d:9d:b5:04:
02:7a:31:26:02:fb:6d:0a:f1:32:cf:ce:aa:40:52:
b6:b4:57:7d:90:e1:8f:54:38:26:52:fd:85:2e:6a:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:88:FA:27:0E:76:6B:59:45:CF:E4:B3:56:B6:A8:7B:A5:5F:A7
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WsKI-icOdmtZRc_ks1a2qHulX6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
81:66:71:c7:91:ed:5a:41:71:2e:a8:b2:1e:58:9e:49:5b:ca:
b6:3e:ae:9d:ba:a1:78:c7:61:44:87:20:5c:56:58:03:74:b3:
72:56:84:32:40:ce:e5:9a:13:c8:13:56:e2:e3:cc:e7:b7:e7:
32:0e:53:26:f4:cd:8c:1f:a6:dc:b8:33:70:9e:4d:81:0a:8d:
5b:c0:05:bf:ab:8d:6e:a5:8f:c4:3d:a6:f6:a1:ee:77:12:35:
0c:b3:19:24:ba:59:cf:10:b3:4c:bb:de:75:d9:7b:ea:c9:3a:
c4:b6:f1:46:09:84:46:42:ec:ff:24:f8:94:a4:64:1c:19:8b:
25:7f:de:f6:da:34:f9:4a:76:85:eb:42:90:2b:48:60:d8:42:
d8:53:d2:5b:4b:f4:43:a5:10:6a:c6:1b:49:5d:16:72:3f:f6:
89:6d:04:9d:46:06:3b:7e:d2:e1:ff:3f:15:f3:39:eb:8c:e3:
f3:c1:b4:32:c7:71:9a:4c:f0:9e:fd:6e:1c:d1:79:50:45:35:
88:f7:0d:dc:ad:e5:00:ee:0d:d3:4e:a5:04:df:aa:61:4d:fa:
bb:6a:86:7f:63:65:57:81:d7:15:37:b8:88:4f:ef:e6:fb:2b:
ea:73:2c:9d:22:49:3f:91:97:b4:86:d7:2a:47:57:d5:1a:44:
94:ea:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:00 2026 by rpki-client