Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa
File: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (raw, json)
Hash identifier: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=
Subject key identifier: 59:DF:2A:D2:6A:05:2D:5B:0C:C7:8A:2C:10:9E:32:90:C6:EA:F1:3B
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019D773C65B560126ED5CC65934EB366AE79
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa
Signing time: Fri 10 Apr 2026 11:52:20 +0000
ROA not before: Fri 10 Apr 2026 11:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 168.222.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:3c:65:b5:60:12:6e:d5:cc:65:93:4e:b3:66:ae:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Apr 10 11:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59df2ad26a052d5b0cc78a2c109e3290c6eaf13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:5e:b5:7f:d9:e5:77:c2:13:83:04:e4:d1:
48:92:32:f3:5a:db:f8:c7:b5:b7:33:84:09:70:0c:
8a:1d:0e:a1:73:b4:76:94:e0:3d:2b:a4:00:a6:e6:
cc:03:78:aa:36:d7:af:fe:a0:7a:ad:07:81:de:d7:
72:52:f5:81:0d:f5:75:98:15:9e:b1:aa:39:02:40:
9e:12:17:83:b9:25:ca:90:27:df:55:57:a4:e5:aa:
c1:42:90:98:08:13:cb:ef:58:92:c5:4a:dc:6a:83:
11:28:33:46:69:0c:f2:ce:76:b0:61:f8:6c:5e:b7:
09:d1:54:d8:05:f5:57:08:8e:8a:a0:d3:79:15:1d:
b1:9c:3b:21:38:2b:f7:c6:4d:99:e9:23:81:de:68:
e3:9e:48:cf:62:de:be:af:2d:6a:2a:da:97:76:7d:
af:a1:2f:41:74:61:7f:16:71:f3:fa:da:07:df:7d:
a5:87:1d:64:6a:bb:29:8b:95:26:c1:cd:7d:55:30:
a8:23:8b:1d:dd:e7:cb:b5:1b:7a:28:5e:15:f6:1e:
8e:31:da:0d:49:26:70:69:2a:b2:b0:39:45:48:d1:
03:d6:5a:56:15:4b:03:73:4e:27:74:d9:d8:82:8a:
fd:4d:ac:a7:82:50:23:8e:61:55:50:f4:45:e4:b3:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DF:2A:D2:6A:05:2D:5B:0C:C7:8A:2C:10:9E:32:90:C6:EA:F1:3B
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:06:4e:6b:ed:24:f5:91:db:7d:a9:64:5d:49:28:69:54:be:
36:45:32:0a:bb:73:cc:1b:51:8f:8d:eb:33:7f:d4:dc:da:c2:
4e:d5:31:7e:1f:a5:72:4b:d8:5b:b7:c8:66:93:ac:5c:3d:bd:
7b:4d:f1:ba:6f:16:7e:46:ca:8c:bd:71:5a:48:97:1a:d4:88:
fb:9a:33:2e:de:73:47:28:77:9e:5e:db:44:a4:61:eb:45:d6:
2e:15:4c:d5:56:5a:b4:ff:9c:05:35:2c:f6:1e:b2:b1:ec:87:
8c:54:60:e3:6f:e2:1a:ad:b4:ea:77:f4:1e:0a:23:c1:5b:23:
30:d6:94:ef:f2:29:2f:ca:05:55:5a:01:7d:b2:fb:ef:88:2f:
34:56:fe:07:fe:5c:73:97:65:97:30:fa:9e:99:fa:28:df:05:
da:47:23:41:13:c7:65:5f:70:f3:c6:18:8a:fc:c2:39:fa:94:
2a:9f:3a:58:4b:91:ea:30:34:b1:6d:ae:fb:17:da:c1:63:08:
40:6d:42:a6:77:23:50:21:6c:06:39:a2:48:19:2d:2b:42:83:
fb:95:0d:4a:72:3f:21:7e:09:61:75:94:80:d8:fd:a5:17:14:
38:28:4d:d8:20:aa:4b:0b:63:77:81:b8:f6:1e:88:4e:21:64:
87:0c:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:48 2026 by rpki-client