Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/WUQrr_4ErwTyokIEksE5ipDNF2Y.roa
File: WUQrr_4ErwTyokIEksE5ipDNF2Y.roa (raw, json)
Hash identifier: IBd7pbChaAcJbC+ej8XSxTMwsER0dU7akkgBcvjAl3U=
Subject key identifier: 59:44:2B:AF:FE:04:AF:04:F2:A2:42:04:92:C1:39:8A:90:CD:17:66
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 01A0620F890D4A5FCA786055A863BA391644
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/WUQrr_4ErwTyokIEksE5ipDNF2Y.roa
Signing time: Wed 02 Sep 2026 12:19:40 +0000
ROA not before: Wed 02 Sep 2026 12:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210560
IP address blocks: 2a13:5947:135::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0f:89:0d:4a:5f:ca:78:60:55:a8:63:ba:39:16:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Sep 2 12:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59442baffe04af04f2a2420492c1398a90cd1766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:c0:89:51:b4:3f:52:c5:f3:73:9b:4c:90:
64:66:4c:f9:34:9c:15:64:8c:ce:f9:af:9a:a1:88:
ab:a0:d4:20:9c:a5:a6:0d:5c:11:e8:77:6f:eb:dc:
d1:c4:ad:b5:4d:03:e6:42:c3:29:c5:87:52:9b:26:
55:0a:0f:68:a3:d3:db:b5:fd:02:64:cf:64:00:aa:
f8:b8:91:06:68:15:1a:17:24:07:b2:2c:c1:a5:85:
3f:82:4a:bb:28:98:72:f0:01:8c:d9:95:a6:f8:33:
9e:d4:c3:3a:fa:b7:c3:7f:6c:15:d5:19:15:05:11:
f7:d0:d7:68:77:88:10:d8:68:4a:49:63:be:43:61:
9f:2a:ba:6d:b1:d9:67:bf:f5:6c:5d:04:ec:15:fa:
3c:5b:cd:bd:71:f2:df:57:6e:58:88:cd:54:12:08:
b1:a9:61:b8:36:db:0e:4b:a6:42:83:d0:86:cc:9b:
d5:53:60:dd:15:f0:a1:a1:ca:cb:20:92:a7:4b:15:
cf:08:b3:1f:10:ef:b0:e2:18:3e:82:b9:87:87:6c:
2b:f0:91:79:58:5d:be:73:cf:41:49:3d:25:5c:f8:
9b:49:ed:63:b6:7e:98:03:1c:41:e5:e9:57:da:5e:
3f:3a:4e:43:99:8a:74:25:c2:e6:78:d0:63:0d:c3:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:2B:AF:FE:04:AF:04:F2:A2:42:04:92:C1:39:8A:90:CD:17:66
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/WUQrr_4ErwTyokIEksE5ipDNF2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5947:135::/48
Signature Algorithm: sha256WithRSAEncryption
02:ca:53:d7:8f:98:85:7c:17:2c:8c:dd:fb:f3:aa:52:e2:09:
a5:24:33:ce:4b:11:e3:cf:68:cd:53:ac:46:b0:08:ae:b2:70:
4c:26:d0:4f:81:df:2c:4f:94:bd:42:9e:6d:e3:30:59:a5:ba:
b0:e1:80:45:54:40:fb:65:40:80:fb:40:af:3a:36:f5:95:df:
09:fe:b3:da:1e:32:b9:36:12:c6:af:17:62:4e:e1:b0:ec:c8:
44:88:04:40:db:34:24:b2:4a:4b:a4:36:52:0d:7e:bf:94:1f:
33:2d:56:58:a7:9d:77:9a:b4:05:1d:32:84:1f:5b:d8:49:56:
88:8f:5f:c1:02:0b:cc:7d:78:bd:33:c7:3b:30:29:d2:e8:87:
ba:c8:45:90:e7:3a:a3:d9:6d:47:13:eb:bf:ee:77:b6:90:76:
37:6a:3a:6c:11:3f:7b:3d:2a:0d:2f:d6:41:4d:40:16:a5:76:
89:41:f5:7f:35:93:25:7b:80:90:d8:3a:76:3f:df:8f:21:aa:
da:35:09:e1:87:f6:1e:2d:49:90:d3:2e:98:30:12:00:61:0e:
a4:e1:95:df:0f:c4:b0:b0:9c:10:09:a2:d6:a6:d5:4f:d1:83:
85:91:88:e1:ce:3e:4b:14:66:33:0c:d6:96:3a:8d:57:be:2d:
53:97:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:59:37 2026 by rpki-client