Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/WgNv7-eEqKwSW95Nva_O1MQX1iY.roa
File: WgNv7-eEqKwSW95Nva_O1MQX1iY.roa (raw, json)
Hash identifier: 9ipqetu8ePvj0pp7eCO9cwEQqK0gXGR/o2mUfaHu77U=
Subject key identifier: 5A:03:6F:EF:E7:84:A8:AC:12:5B:DE:4D:BD:AF:CE:D4:C4:17:D6:26
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 019B7A5AC29C421B98ABDECC288106F5B235
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/WgNv7-eEqKwSW95Nva_O1MQX1iY.roa
Signing time: Thu 01 Jan 2026 16:18:46 +0000
ROA not before: Thu 01 Jan 2026 16:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199249
IP address blocks: 2001:67c:12bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:c2:9c:42:1b:98:ab:de:cc:28:81:06:f5:b2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: Jan 1 16:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a036fefe784a8ac125bde4dbdafced4c417d626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:2c:22:76:00:1f:52:af:36:8a:ae:59:9e:
c2:97:54:44:16:13:ce:8d:56:e1:8a:2c:43:4e:38:
19:a7:40:c8:02:6b:00:67:fe:1b:49:0f:df:08:b1:
1e:01:fd:f8:85:5a:86:31:07:36:ea:e8:33:b5:7d:
d5:f6:95:13:02:4a:ee:19:50:46:89:55:a4:9f:7f:
1d:e0:44:b4:f0:fa:f5:2d:ab:3e:1b:fb:3b:38:31:
b2:aa:91:a3:e4:c6:05:2e:ab:d9:58:87:c8:7d:4c:
e9:68:4d:c1:96:3e:23:e6:31:49:7f:13:ae:f4:89:
ea:92:34:31:9e:b9:04:88:a9:7a:bb:ba:d2:07:e0:
fc:13:f4:98:bd:f9:2a:ef:86:30:72:69:24:7a:98:
74:6c:7e:52:0d:53:7b:ec:68:c5:15:85:ed:43:c6:
0c:41:71:99:86:50:b5:5f:da:af:b4:fb:db:03:76:
fd:7b:46:d9:45:12:0d:47:9d:a0:af:20:4d:5e:9b:
ab:5c:af:0a:cd:3b:a3:c3:af:10:87:63:4a:b4:78:
50:46:01:0e:3b:bc:0a:58:f4:6b:02:e3:61:83:46:
87:d4:6a:ca:c9:ef:5c:2f:f3:1e:41:82:85:70:a8:
be:a8:10:ef:72:c3:0c:52:32:a3:33:34:1b:66:d6:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:6F:EF:E7:84:A8:AC:12:5B:DE:4D:BD:AF:CE:D4:C4:17:D6:26
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/WgNv7-eEqKwSW95Nva_O1MQX1iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12bc::/48
Signature Algorithm: sha256WithRSAEncryption
61:6e:24:27:2a:de:1d:07:1c:8e:de:27:a6:cc:43:30:86:2b:
7e:a1:0c:d3:6f:b9:81:34:2b:e0:00:35:31:77:35:73:d5:e1:
c5:7a:c7:45:e9:ab:1c:3e:fe:53:4d:61:de:1e:55:33:b4:8d:
17:63:ed:9a:5d:43:af:c6:eb:1c:db:34:05:fc:ad:bf:e8:f7:
74:66:98:47:45:7a:c9:51:ed:59:c3:ed:08:e9:2c:ac:6c:14:
7a:39:57:ef:c9:2c:c4:f5:3f:97:c5:c9:b8:cb:d9:fe:19:99:
8c:2f:f6:80:29:0a:b9:14:50:77:bb:3e:fd:7e:42:ee:fc:65:
bc:96:28:15:a9:4a:a2:89:75:4d:fa:0c:f0:7c:7b:b8:d6:ff:
dd:a7:18:b6:92:37:ac:20:5e:32:06:a1:ea:6c:f9:53:fc:9b:
af:57:c6:06:4b:ed:77:48:cc:46:e3:04:b0:fe:bb:3d:a1:71:
92:1f:76:29:a3:40:3d:0b:67:60:54:cd:89:85:23:51:20:3b:
b0:76:97:b1:47:a7:f6:2f:86:e6:f7:69:d8:ec:19:2f:91:a0:
67:d6:fe:c8:6e:b1:5c:b6:0a:39:57:23:25:ac:08:4b:3b:7e:
96:6f:3b:32:a0:8e:a0:77:87:7d:6e:ab:df:21:fc:0e:3c:a0:
c1:40:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:27 2026 by rpki-client