Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/WWXCLp8AKAwMMTTDbtTkCEwqNIw.roa
File: WWXCLp8AKAwMMTTDbtTkCEwqNIw.roa (raw, json)
Hash identifier: 0ZIMIlG8yYnukrtN0d2X8Yr+wlYVLsxn2KV6Qd+MwzI=
Subject key identifier: 59:65:C2:2E:9F:00:28:0C:0C:31:34:C3:6E:D4:E4:08:4C:2A:34:8C
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A4598DC08C106D5426E7A3DB63873606
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/WWXCLp8AKAwMMTTDbtTkCEwqNIw.roa
Signing time: Tue 15 Sep 2026 09:15:27 +0000
ROA not before: Tue 15 Sep 2026 09:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206762
IP address blocks: 188.241.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:59:8d:c0:8c:10:6d:54:26:e7:a3:db:63:87:36:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5965c22e9f00280c0c3134c36ed4e4084c2a348c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:c4:d2:c1:9b:e5:8c:7d:97:1d:a1:6f:b0:
0e:99:18:5f:61:62:61:19:8a:76:df:68:14:1c:72:
cf:29:f1:63:3c:2b:68:6d:4e:90:e0:88:61:94:1a:
15:6e:ca:35:86:64:29:b9:e0:6a:36:88:85:98:16:
6f:2d:01:b9:20:33:00:52:d6:fc:56:07:fe:af:a9:
82:43:7c:19:42:41:5d:7c:39:f6:1c:f8:34:77:b0:
e1:5e:07:7d:00:56:62:d1:f8:31:3b:fc:3d:34:2f:
17:4a:7f:a2:e7:e0:d2:8f:51:e2:34:3e:f8:90:c5:
81:f1:81:70:5a:b6:8a:13:b3:ea:dc:d0:27:4c:6f:
29:7c:51:1b:5a:88:81:55:b7:e2:a6:a3:94:32:01:
c4:87:0c:10:35:a5:2f:8b:6d:36:9f:22:4d:83:ae:
72:84:40:2c:22:73:36:4c:0a:3e:39:87:09:08:53:
00:50:0e:c1:37:ed:e5:32:89:e1:26:e5:73:ea:fb:
62:20:43:38:da:24:8b:50:54:e7:9b:59:cf:7e:ba:
f1:ab:86:65:6b:48:5e:b7:0c:20:bf:32:3a:68:8b:
29:27:5a:03:4c:50:ae:4b:a8:2a:47:9c:0c:ce:cf:
3b:cd:cf:a1:5d:1e:36:d2:20:9b:78:b1:18:e1:93:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:C2:2E:9F:00:28:0C:0C:31:34:C3:6E:D4:E4:08:4C:2A:34:8C
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/WWXCLp8AKAwMMTTDbtTkCEwqNIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.29.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fb:59:2c:67:cc:b5:ff:4b:d7:28:33:bf:a5:1e:c5:5f:19:
8c:91:07:67:d8:7a:fe:32:b0:2b:6b:2f:06:bf:55:c8:d9:2d:
9d:c4:97:40:60:d1:68:a8:4d:56:21:0d:43:66:60:b5:69:89:
cd:81:4d:42:70:92:d4:f2:22:90:47:7a:d7:64:bd:af:fd:ff:
29:80:b7:68:ac:19:45:8d:0f:f4:9a:26:39:fc:62:0a:cf:65:
7b:a6:8b:7f:26:34:a1:06:4a:02:05:24:77:1a:3c:8f:69:de:
72:cc:b7:67:06:43:b5:bd:a8:02:d4:84:3e:b9:44:55:d4:26:
6c:9b:f9:b2:de:01:a5:d6:a7:87:00:c1:92:95:88:f2:ee:7b:
e3:8c:ce:cf:fb:c5:90:5d:2e:e4:80:48:b2:f5:90:eb:31:14:
d2:6e:11:e9:1b:ea:5e:96:24:63:1b:11:5e:f5:3c:7f:5c:f3:
ec:4d:93:b3:7a:92:f4:41:21:b5:8c:17:05:b0:e4:be:0e:7d:
e1:8c:21:26:08:81:b7:94:3b:3d:c8:56:7b:a5:78:9e:5c:6f:
3c:62:f4:f2:7a:ea:49:bd:e2:ac:66:e6:43:02:a3:20:eb:61:
c2:be:85:85:51:f7:f6:2d:c6:82:62:5a:4c:66:29:7d:0d:81:
bd:52:19:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:04:40 2026 by rpki-client