Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/wnan_W7zCPprToqepPHW7EUykg0.roa
File: wnan_W7zCPprToqepPHW7EUykg0.roa (raw, json)
Hash identifier: eqswj0sa1030vJf6t6fs8wRbb8GrMkLO8GUWPgVpPBQ=
Subject key identifier: C2:76:A7:FD:6E:F3:08:FA:6B:4E:8A:9E:A4:F1:D6:EC:45:32:92:0D
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0BA8CD6CA2EC6FCB860A0D0B891B95FBF
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/wnan_W7zCPprToqepPHW7EUykg0.roa
Signing time: Sat 19 Sep 2026 16:43:07 +0000
ROA not before: Sat 19 Sep 2026 16:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a0b:a300::/30 maxlen: 30
2a0b:a304::/30 maxlen: 30
2a0f:a700::/30 maxlen: 30
2a0f:a704::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:8c:d6:ca:2e:c6:fc:b8:60:a0:d0:b8:91:b9:5f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 19 16:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c276a7fd6ef308fa6b4e8a9ea4f1d6ec4532920d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:73:92:b7:62:7b:71:95:b5:b4:e2:06:89:
e2:94:2c:5f:0d:3a:37:5a:32:2a:4e:f9:26:37:69:
28:6c:c9:1e:9f:11:b4:d3:ae:54:06:1b:84:f3:f2:
a4:91:e4:67:41:6a:d5:53:9d:54:26:79:dc:66:a2:
e4:72:61:ae:7b:7b:f4:f6:cb:bb:16:19:7d:29:04:
33:f8:34:44:58:26:f4:7d:b6:6e:51:41:2c:75:f7:
4d:9d:6d:c0:11:44:b7:f2:16:87:80:3e:7c:76:3f:
43:ce:f7:80:31:2f:e4:a8:bb:59:7a:e2:e0:ea:7c:
05:f3:05:d2:4c:a3:df:c8:90:53:35:42:ce:d2:90:
ff:d3:5b:f3:d2:27:6f:70:78:04:e9:4c:2b:35:be:
6c:33:bf:bc:8a:53:b4:15:45:53:3b:8e:92:d0:c9:
42:83:38:b9:a1:39:a8:af:d6:23:02:8a:07:2b:75:
74:8a:20:0d:a4:8f:80:22:05:76:89:5b:2e:3e:68:
9d:ea:86:24:56:58:ae:ab:d3:95:82:3b:80:2b:42:
8e:6d:a5:d4:f0:62:47:45:75:d8:22:f4:da:ee:97:
4b:87:fc:4f:31:b6:ef:92:5c:ad:eb:81:37:07:55:
ee:b0:22:54:08:93:97:29:8d:de:db:8e:4f:16:c2:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:76:A7:FD:6E:F3:08:FA:6B:4E:8A:9E:A4:F1:D6:EC:45:32:92:0D
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/wnan_W7zCPprToqepPHW7EUykg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a300::/29
2a0f:a700::/29
Signature Algorithm: sha256WithRSAEncryption
74:3e:20:1e:00:6d:46:fc:28:4c:1a:14:46:13:e9:b6:63:59:
e3:f9:ff:d6:12:fb:43:70:8a:2a:4c:be:4b:c3:b1:94:d6:bc:
d7:3f:25:22:35:02:67:5d:ee:89:4b:8d:2a:c9:19:13:30:df:
7d:62:b8:a6:fc:4e:fa:22:1d:2f:c6:00:d7:4d:cf:72:a9:48:
58:3e:be:6f:b5:67:8a:6c:98:1c:8b:8b:8e:59:c6:62:e8:29:
ae:4d:73:e4:97:6a:d1:4b:d7:01:76:e3:67:fc:09:99:57:55:
59:06:09:99:5b:e5:f5:41:67:6d:e5:5d:37:cd:6e:59:c7:7f:
36:bc:7d:32:e5:77:f9:f3:bf:8d:fe:40:db:c8:3a:e0:c2:56:
9d:34:b1:b8:19:c1:94:f5:cd:80:93:01:bd:4f:fd:9d:00:d7:
67:4e:d9:f0:38:ad:ad:8e:25:e0:43:d1:dc:5e:61:54:55:4d:
bb:50:99:5f:e3:5d:17:87:b3:35:29:53:4f:85:4a:c5:30:1a:
95:f3:36:3e:d5:b6:fe:01:20:d7:8a:5d:bf:cb:7a:a9:46:89:
6d:46:a9:47:9b:19:12:86:3e:ef:6d:94:fc:55:cb:23:c9:01:
1a:14:5d:72:73:16:31:70:c5:9b:1a:27:17:e5:09:2c:82:8f:
d8:cf:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:10 2026 by rpki-client