Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wFqZRDKP4LK_Xpy2j430Y5jugNo.roa
File: wFqZRDKP4LK_Xpy2j430Y5jugNo.roa (raw, json)
Hash identifier: IJoAT1eBcPjSpr6vKM6BJ3wkVw9Ve4ghKNGoRi6Z56k=
Subject key identifier: C0:5A:99:44:32:8F:E0:B2:BF:5E:9C:B6:8F:8D:F4:63:98:EE:80:DA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EB5586E913C2DA0DB342F7C0FF08C036E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wFqZRDKP4LK_Xpy2j430Y5jugNo.roa
Signing time: Thu 11 Jun 2026 06:22:12 +0000
ROA not before: Thu 11 Jun 2026 06:22:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134488
IP address blocks: 87.83.2.0/24 maxlen: 24
195.40.157.0/24 maxlen: 24
195.40.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:58:6e:91:3c:2d:a0:db:34:2f:7c:0f:f0:8c:03:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 11 06:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c05a9944328fe0b2bf5e9cb68f8df46398ee80da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:cf:fe:c2:8f:ab:59:1b:54:e2:f1:f9:9f:
a3:de:20:3b:c7:31:60:09:5d:6e:b1:86:e5:50:29:
ac:d6:76:f0:84:33:be:72:a1:0a:84:69:d8:3a:37:
1e:14:56:d2:ff:21:98:fc:92:fb:18:d4:d2:23:38:
4b:d2:2d:46:9e:d6:51:d4:0d:41:68:57:db:6b:a1:
8e:69:ec:4e:19:ce:c5:33:f2:01:89:df:d6:88:89:
e2:4c:cf:a6:c3:47:4e:1a:c3:13:e9:70:f4:45:18:
d0:29:af:9b:7e:b4:f7:75:e6:79:22:80:f4:78:31:
2b:ff:9a:e7:6f:1e:d8:39:75:84:f0:fa:39:50:68:
a7:99:7a:47:c3:26:47:96:1b:3d:37:ad:75:48:b9:
70:2b:6e:5e:7f:c3:91:f6:1d:af:af:85:59:65:10:
d2:b0:0d:0f:7f:97:de:c8:f5:fd:31:22:7d:d1:15:
8c:b8:8f:83:d2:e7:1c:76:02:95:4f:0f:04:28:cf:
a7:8c:8c:96:da:6d:53:b1:dc:f3:ee:db:0a:b0:75:
a9:8f:32:0b:dc:8f:dc:da:c8:b2:ac:58:d5:40:ed:
da:ca:5b:38:32:c6:30:f4:0f:83:1e:bf:8e:d3:ea:
ad:ef:00:19:7e:f1:21:c7:98:20:e3:ba:fb:e9:01:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:99:44:32:8F:E0:B2:BF:5E:9C:B6:8F:8D:F4:63:98:EE:80:DA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wFqZRDKP4LK_Xpy2j430Y5jugNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.2.0/24
195.40.157.0-195.40.158.255
Signature Algorithm: sha256WithRSAEncryption
8d:78:63:d8:72:a3:c0:c8:f3:40:4b:ce:25:b4:7a:98:86:f3:
19:ef:58:c3:21:d7:48:dc:08:59:ac:78:6c:01:f3:73:48:69:
54:b0:4f:32:6f:28:3f:c5:f6:10:84:c6:54:5d:44:14:0f:47:
c7:f1:2f:7a:76:83:e0:92:f0:f0:19:f3:b8:59:9a:db:b5:90:
ad:f9:6e:a0:30:55:80:67:40:0b:ee:eb:1a:af:eb:80:d0:53:
f5:d4:7c:5f:fd:5b:f3:b5:39:2f:46:21:75:0e:60:0c:16:8e:
19:ac:d1:77:19:83:58:ed:c1:52:b9:56:65:50:fa:3f:49:64:
62:16:59:6d:97:6e:66:6f:70:49:92:14:0e:f7:9b:d0:2b:68:
11:68:fc:be:19:ec:f2:06:ac:d8:eb:72:ba:73:3e:4d:ee:e8:
6c:8c:24:7c:59:30:d1:cd:22:c6:7d:42:48:bf:a4:5b:e8:71:
ee:99:a5:14:c5:17:8a:5e:22:79:5a:33:58:e4:cc:c1:d7:1f:
3d:5e:a6:b4:08:dc:74:90:26:8f:7f:52:28:bb:a3:42:6d:b7:
52:73:c3:69:50:d5:84:eb:03:4c:69:a4:4b:f0:72:d3:ff:59:
b6:e5:8f:cf:da:a7:67:b7:d1:6d:ff:57:8c:bc:41:09:7b:4b:
1d:61:ec:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:54:59 2026 by rpki-client