Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WWZ2sbhnh4o-0r4a79p2giVxaeU.roa
File: WWZ2sbhnh4o-0r4a79p2giVxaeU.roa (raw, json)
Hash identifier: VbfQf+8AYwYV10Qs/RQ5zsPOjZZbKIl1K79WvJH9NcY=
Subject key identifier: 59:66:76:B1:B8:67:87:8A:3E:D2:BE:1A:EF:DA:76:82:25:71:69:E5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EAD7C1E83C67700E31C25693FE98B3AC4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WWZ2sbhnh4o-0r4a79p2giVxaeU.roa
Signing time: Tue 09 Jun 2026 17:44:13 +0000
ROA not before: Tue 09 Jun 2026 17:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212701
IP address blocks: 31.76.72.0/22 maxlen: 24
31.77.132.0/22 maxlen: 24
31.77.174.0/23 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:7c:1e:83:c6:77:00:e3:1c:25:69:3f:e9:8b:3a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 9 17:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=596676b1b867878a3ed2be1aefda7682257169e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:47:8d:e9:00:d9:86:90:b8:fa:7f:00:30:
7f:79:f7:41:9f:3d:34:39:b7:35:16:d3:a1:f9:84:
55:8b:b3:49:f3:f9:9e:69:d6:34:e6:d8:21:65:7e:
10:9d:b5:64:45:3b:a7:9b:13:4f:d1:13:8d:25:82:
af:be:cf:21:07:7e:9b:45:93:58:26:16:28:a0:40:
2a:d4:e3:0e:4b:22:8d:fe:34:be:30:c8:c5:62:a9:
2a:3e:54:c0:8a:3b:df:b9:66:46:aa:67:39:4b:3a:
a4:3f:06:9e:9c:a7:54:64:7f:8e:31:9e:90:be:81:
ce:16:b9:80:15:c3:f9:ec:89:89:78:82:28:d5:3a:
16:b6:d4:fe:25:2d:d8:d2:d1:ee:3c:d8:a0:3e:5a:
c6:ae:f2:70:55:9e:96:5d:a9:87:d2:04:f1:a1:d4:
e1:b8:0b:ed:2b:5d:28:e2:57:74:a2:e5:8a:c9:ce:
a7:63:ee:06:a1:05:f1:c3:78:76:74:54:53:c9:52:
f9:d1:2f:56:69:cf:8f:6f:85:ac:3e:ee:05:15:68:
cc:7d:1c:95:16:5b:86:d4:ee:1d:55:ee:f8:d8:b4:
89:62:a0:c8:60:36:c0:24:b2:9b:bf:f0:1e:e0:30:
b1:03:55:d5:3a:bc:17:c6:3f:41:30:af:96:cb:03:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:76:B1:B8:67:87:8A:3E:D2:BE:1A:EF:DA:76:82:25:71:69:E5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WWZ2sbhnh4o-0r4a79p2giVxaeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.72.0/22
31.77.132.0/22
31.77.174.0/23
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:40:26:be:2b:a5:61:77:22:2a:18:71:f1:f3:a1:bc:76:fa:
df:94:20:36:10:9c:f2:ef:8c:0b:bd:d6:d1:b5:e9:30:d1:1e:
76:03:a5:94:e3:d8:4d:bb:ff:3f:7b:c3:fb:6f:2b:75:2a:fe:
a0:e0:b2:b8:e5:58:81:fa:b1:f3:0e:3f:07:a3:ad:22:b8:14:
35:ae:2d:eb:c9:f8:28:c7:f3:a8:2b:6f:2b:0a:c7:98:e6:98:
5c:e8:84:f1:28:82:8c:d1:c5:69:dc:99:82:81:71:74:9c:e2:
d1:0d:bb:78:02:6c:2d:32:93:ec:43:31:75:f6:37:66:29:1b:
00:b3:39:30:d2:3b:05:74:e4:24:13:bb:93:87:ac:63:72:b4:
1d:13:80:01:67:5f:ec:34:73:04:fc:35:7e:d9:1f:cb:e5:e1:
79:49:a7:34:36:32:f7:ac:b8:4b:c8:50:26:9e:06:cb:b3:35:
93:02:51:eb:a6:46:48:e4:6d:0a:03:38:19:07:44:78:49:71:
c7:b5:bd:ac:1c:32:9f:fd:cd:ab:76:c4:18:f0:e4:66:8a:3f:
12:13:96:c8:31:76:df:77:65:40:a8:ba:23:a9:62:c4:9c:54:
0e:83:ec:f2:cf:ba:5d:53:22:24:b5:81:b1:ab:a7:e2:e0:d1:
58:65:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:24 2026 by rpki-client