Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/WkGJa1Pp2TnAS5bcKy-YTSSwhZ4.roa
File: WkGJa1Pp2TnAS5bcKy-YTSSwhZ4.roa (raw, json)
Hash identifier: M0Ci2ysoXFVb8CpwgUXJKfhAYlVeaawTHbasQvFH/aA=
Subject key identifier: 5A:41:89:6B:53:E9:D9:39:C0:4B:96:DC:2B:2F:98:4D:24:B0:85:9E
Certificate issuer: /CN=981a1187f56bdb637d56a7803a47cda54e0c62af
Certificate serial: 019F2368C01C1B4FBF3CFD0A0326AA55FAFF
Authority key identifier: 98:1A:11:87:F5:6B:DB:63:7D:56:A7:80:3A:47:CD:A5:4E:0C:62:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBoRh_Vr22N9VqeAOkfNpU4MYq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/WkGJa1Pp2TnAS5bcKy-YTSSwhZ4.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57115
IP address blocks: 91.230.83.0/24 maxlen: 24
195.191.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/mBoRh_Vr22N9VqeAOkfNpU4MYq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/mBoRh_Vr22N9VqeAOkfNpU4MYq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBoRh_Vr22N9VqeAOkfNpU4MYq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c0:1c:1b:4f:bf:3c:fd:0a:03:26:aa:55:fa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981a1187f56bdb637d56a7803a47cda54e0c62af
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a41896b53e9d939c04b96dc2b2f984d24b0859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ce:2d:08:82:88:ca:79:c4:08:8a:c7:15:f9:
69:53:ec:86:42:9e:fd:62:7b:ad:a0:23:2d:fe:1c:
dd:b9:6e:70:77:28:7d:6d:77:12:bc:5f:b6:51:8b:
86:4e:6f:b6:52:65:fd:f9:fb:6a:20:20:ef:ac:ca:
ce:38:01:c3:4f:43:6f:61:78:bc:1a:b0:3b:b1:f9:
bc:4d:80:6a:fc:c8:dc:73:c3:2f:a4:9f:63:2b:21:
24:d8:7b:18:ac:3e:d5:1b:15:8e:f7:d9:fd:e4:41:
7d:cb:a2:b0:66:f8:b5:63:fc:22:71:a8:e5:62:d4:
94:1d:d9:f4:40:a0:0f:c6:19:01:31:3b:f0:00:ec:
57:a1:84:e8:2c:9f:0c:ce:1b:70:46:56:10:a5:d0:
17:27:80:c5:b4:30:70:d9:d8:60:56:ef:90:57:13:
ed:4d:f1:10:bf:f6:79:cf:53:9d:fe:2b:75:2d:d4:
1a:7c:b0:1f:34:70:04:2f:8a:6c:a5:10:e4:98:34:
ef:35:f4:3c:6c:b6:0b:a6:7a:25:5e:50:a8:f5:e7:
55:5a:05:e2:9d:f1:86:b9:67:4d:1a:55:87:04:cc:
9d:03:0d:ba:31:0d:50:35:57:5f:dc:59:2c:f5:e7:
82:ef:0c:5f:2b:11:c1:24:9b:ff:65:d6:58:e1:7a:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:41:89:6B:53:E9:D9:39:C0:4B:96:DC:2B:2F:98:4D:24:B0:85:9E
X509v3 Authority Key Identifier:
keyid:98:1A:11:87:F5:6B:DB:63:7D:56:A7:80:3A:47:CD:A5:4E:0C:62:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBoRh_Vr22N9VqeAOkfNpU4MYq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/WkGJa1Pp2TnAS5bcKy-YTSSwhZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/mBoRh_Vr22N9VqeAOkfNpU4MYq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.83.0/24
195.191.92.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:7b:bb:5c:48:2f:d5:9d:1d:81:78:ad:88:ae:e4:4f:48:96:
f6:09:81:c5:86:21:ab:e6:4b:ff:75:80:a4:d1:c9:e8:1e:42:
0a:8f:35:36:03:b5:68:de:5d:ae:73:f5:63:31:f1:a5:2c:2d:
b2:87:d5:1d:b0:4d:d3:96:ff:18:55:61:ce:e2:8f:6c:ef:b5:
ae:0e:0e:ad:28:21:cb:22:db:20:47:34:e8:78:76:f6:21:8c:
94:0d:16:06:ca:42:1c:f9:df:22:21:12:78:c0:a2:58:d3:ed:
c4:a6:d9:a4:d2:07:34:53:c1:a4:51:bf:9e:23:ec:2a:f5:cc:
be:28:42:5f:a7:21:3e:85:63:48:8f:93:5e:1c:2c:77:7e:b0:
43:cd:f2:fe:25:68:9d:ab:b0:cf:ac:e7:05:ab:c4:dc:ea:00:
cd:8c:1a:76:7d:a2:7e:e9:3f:a0:7f:c2:1c:aa:9a:b8:72:2a:
47:a8:de:d2:8d:8d:9e:af:1b:d0:8e:11:df:59:39:1f:fb:13:
7f:6e:46:19:43:23:de:27:2f:e9:59:58:53:6d:49:c2:9b:0e:
ac:f7:a2:ee:67:d9:1e:c8:ce:5a:00:5c:13:83:56:93:7f:76:
a7:42:5a:e4:72:cf:3e:e1:f7:09:c0:88:7a:cc:de:61:bf:87:
64:d0:63:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:24:14 2026 by rpki-client