Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/Wc_H_BQm_T1przFaClfQ_aiSbiQ.roa
File: Wc_H_BQm_T1przFaClfQ_aiSbiQ.roa (raw, json)
Hash identifier: MkPhhtBoGp/lssKXEDwA7t5KV65sjPCdBtv5VeMIgt0=
Subject key identifier: 59:CF:C7:FC:14:26:FD:3D:69:AF:31:5A:0A:57:D0:FD:A8:92:6E:24
Certificate issuer: /CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Certificate serial: 019FA50548B10821D42F655FE42A71A833DD
Authority key identifier: C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/Wc_H_BQm_T1przFaClfQ_aiSbiQ.roa
Signing time: Mon 27 Jul 2026 19:20:14 +0000
ROA not before: Mon 27 Jul 2026 19:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204767
IP address blocks: 153.56.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:05:48:b1:08:21:d4:2f:65:5f:e4:2a:71:a8:33:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Validity
Not Before: Jul 27 19:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59cfc7fc1426fd3d69af315a0a57d0fda8926e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:65:38:e5:d8:bd:1d:3e:31:27:a3:9c:16:
aa:10:08:1c:9e:f6:fc:4a:a4:39:ee:dd:dd:a8:50:
f7:7c:cd:47:4d:f1:f7:17:d3:15:1c:21:2f:17:8d:
b2:c7:c9:a7:00:4e:40:d0:01:15:22:ce:d4:d1:ea:
73:86:cd:24:38:21:39:6c:dc:a8:27:ef:0f:55:46:
48:d5:2f:7d:c3:a2:ba:7c:d7:f4:64:58:cb:38:1d:
7f:83:aa:83:92:ed:7a:fa:ae:46:cf:f4:17:9e:b1:
64:9c:ef:73:96:96:15:22:dc:d8:d7:88:17:ba:d2:
0e:e1:d1:b0:cf:c5:c9:1f:ea:e5:ed:db:fe:0e:86:
85:a3:ed:7a:2b:b7:23:a1:7e:1a:26:40:a0:52:fa:
6f:ac:c2:f7:f0:c7:b0:6d:5a:57:42:7c:9f:f1:07:
0e:73:d1:0d:6b:3c:69:02:11:e8:23:6e:39:08:27:
9d:ea:9e:b3:c2:5f:0f:88:41:3a:83:6b:4e:4e:cf:
07:74:f5:8d:bf:f9:ac:15:c1:e2:96:c4:d0:4d:d3:
79:ba:3f:39:04:b3:e3:8a:4c:e9:ff:1b:ba:d5:ba:
ab:68:7e:24:e3:2a:86:ab:4e:b9:4d:0c:70:66:18:
30:f9:bd:c8:c9:ee:c5:ec:82:7b:d9:e3:68:b5:a8:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:C7:FC:14:26:FD:3D:69:AF:31:5A:0A:57:D0:FD:A8:92:6E:24
X509v3 Authority Key Identifier:
keyid:C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/Wc_H_BQm_T1przFaClfQ_aiSbiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.143.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:cd:ee:4d:42:61:b7:5b:1c:7b:7b:c2:c7:06:ba:2b:29:a4:
64:67:cb:d8:97:b6:f0:fe:d6:d7:11:dd:ec:62:89:b1:78:47:
75:25:19:d2:d6:b3:0a:de:30:8c:4d:5f:cd:ee:4e:ae:08:60:
6c:dc:08:3b:3c:0b:6d:cd:3d:2f:83:52:d3:54:0b:3e:a5:c2:
45:91:71:d9:13:2f:57:66:8e:d7:8b:27:94:bf:07:40:44:32:
27:6f:6f:5c:ce:1f:dc:80:98:a2:e2:e1:aa:5c:27:83:d2:8c:
c1:bb:02:c8:17:4f:00:8b:42:fd:a1:84:ea:a9:90:a3:ef:ce:
5d:4b:af:f9:3a:37:60:5e:bf:4a:ed:93:fd:59:8a:c3:fd:0e:
8c:df:2c:c5:a8:c6:cb:a2:6c:b0:fa:e8:a7:d0:c4:0a:9d:a1:
9c:ef:5e:8a:a7:f8:1b:6e:5f:9b:91:ae:a2:70:dd:0c:8a:e8:
74:a3:51:99:a9:63:1c:3f:8b:3d:4c:ad:c7:9b:15:54:dc:8c:
ac:e6:52:5f:a0:84:17:2e:d8:28:95:79:9e:4e:93:66:2f:3b:
c8:1e:a9:06:e0:f5:ad:e6:13:f1:a9:9b:6d:52:72:4b:63:47:
e2:1a:a4:f8:bb:a4:cb:d3:1f:2d:88:27:76:e2:73:6a:e4:55:
09:18:eb:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+lBUixCCHUL2Vf5CpxqDPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0M2ZjNmIxNDA3NzUzOTNmYzMzNjlhZjNkMGJjZTIwYzQz
ZTVkNWIwHhcNMjYwNzI3MTkyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWNmYzdmYzE0MjZmZDNkNjlhZjMxNWEwYTU3ZDBmZGE4OTI2ZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqodlOOXYvR0+MSejnBaqEAgcnvb8
SqQ57t3dqFD3fM1HTfH3F9MVHCEvF42yx8mnAE5A0AEVIs7U0epzhs0kOCE5bNyo
J+8PVUZI1S99w6K6fNf0ZFjLOB1/g6qDku16+q5Gz/QXnrFknO9zlpYVItzY14gX
utIO4dGwz8XJH+rl7dv+DoaFo+16K7cjoX4aJkCgUvpvrML38MewbVpXQnyf8QcO
c9ENazxpAhHoI245CCed6p6zwl8PiEE6g2tOTs8HdPWNv/msFcHilsTQTdN5uj85
BLPjikzp/xu61bqraH4k4yqGq065TQxwZhgw+b3Iye7F7IJ72eNotaivYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFnPx/wUJv09aa8xWgpX0P2okm4kMB8GA1UdIwQY
MBaAFMQ/xrFAd1OT/DNprz0LziDEPl1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveERfR3NVQjNVNVA4TTJtdlBRdk9JTVEtWFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zMTBlNzQtMjdjOC00MDUzLTk1ODgt
MGM3M2YwMTYwODA0LzEvV2NfSF9CUW1fVDFwcnpGYUNsZlFfYWlTYmlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zMTBlNzQtMjdjOC00MDUzLTk1ODgtMGM3M2YwMTYwODA0
LzEveERfR3NVQjNVNVA4TTJtdlBRdk9JTVEtWFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTiPMA0G
CSqGSIb3DQEBCwUAA4IBAQCqze5NQmG3Wxx7e8LHBrorKaRkZ8vYl7bw/tbXEd3s
YomxeEd1JRnS1rMK3jCMTV/N7k6uCGBs3Ag7PAttzT0vg1LTVAs+pcJFkXHZEy9X
Zo7XiyeUvwdARDInb29czh/cgJii4uGqXCeD0ozBuwLIF08Ai0L9oYTqqZCj785d
S6/5OjdgXr9K7ZP9WYrD/Q6M3yzFqMbLomyw+uin0MQKnaGc716Kp/gbbl+bka6i
cN0Miuh0o1GZqWMcP4s9TK3HmxVU3Iys5lJfoIQXLtgolXmeTpNmLzvIHqkG4PWt
5hPxqZttUnJLY0fiGqT4u6TL0x8tiCd24nNq5FUJGOtJ
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:54 2026 by rpki-client