Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WcTAonUQPuzfDTrxltVnhfY2zA4.roa
File: WcTAonUQPuzfDTrxltVnhfY2zA4.roa (raw, json)
Hash identifier: +phY7k0Gb6ZwAhforjB6Tnyq2+Dv+yII1yTXDSRmYqg=
Subject key identifier: 59:C4:C0:A2:75:10:3E:EC:DF:0D:3A:F1:96:D5:67:85:F6:36:CC:0E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019E92A0DAB740CF824DEA896E7D5622E486
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WcTAonUQPuzfDTrxltVnhfY2zA4.roa
Signing time: Thu 04 Jun 2026 12:34:35 +0000
ROA not before: Thu 04 Jun 2026 12:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399992
IP address blocks: 185.142.140.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:a0:da:b7:40:cf:82:4d:ea:89:6e:7d:56:22:e4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jun 4 12:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59c4c0a275103eecdf0d3af196d56785f636cc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:4f:92:bf:d2:37:38:6e:bb:91:b0:41:2d:
12:9f:10:f9:a9:5f:a0:5b:83:56:7f:00:f1:0c:a1:
db:f4:e7:b8:b5:1b:44:82:97:d6:cb:81:f3:c3:26:
b9:64:fc:2b:2b:9c:06:9d:67:e1:9f:f6:c7:7b:7b:
54:e7:2f:5c:1b:d8:bc:ee:5f:85:8e:c4:e5:7b:40:
b1:2e:70:f5:53:ff:b0:f8:22:8d:0f:54:41:73:83:
da:b9:91:52:91:15:38:28:0c:80:42:a5:22:2d:12:
ea:5e:63:36:45:2c:d8:65:fc:39:2b:22:c6:be:8b:
3f:ab:ae:91:93:39:9e:1c:6e:db:dc:a5:87:53:2d:
b7:40:74:b8:4f:5d:7a:2e:4a:19:61:1d:aa:40:5c:
9d:d6:e2:d9:87:79:79:e4:07:07:2b:fa:23:23:e6:
4b:5d:3a:ca:50:39:75:04:8a:54:a2:fb:fd:69:3b:
72:4c:6d:2b:f2:ae:2c:4f:13:da:e8:37:ec:1c:09:
95:c5:06:4d:96:f4:50:69:74:53:97:bb:ba:77:62:
f4:b2:e6:c5:12:70:0c:c3:88:ba:ee:39:a7:13:b8:
78:54:b6:dc:fd:c5:14:7a:15:7c:49:f7:70:08:06:
fd:b5:47:8e:f6:4f:53:d1:4d:79:b4:4a:1d:6e:54:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C4:C0:A2:75:10:3E:EC:DF:0D:3A:F1:96:D5:67:85:F6:36:CC:0E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WcTAonUQPuzfDTrxltVnhfY2zA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0d:49:81:66:c6:6d:c3:fa:e8:27:82:ca:9e:83:1e:7f:5f:
99:6e:51:1f:3b:f3:eb:96:90:a7:bf:d1:09:49:39:d3:0d:e8:
93:85:79:8f:0a:58:f6:78:88:d9:e2:93:37:73:39:c9:b2:f8:
d3:af:43:ea:4f:58:d5:e1:2e:a5:dd:05:70:2b:bd:be:ad:27:
67:af:b4:5f:1d:b5:6c:f7:4b:4e:cf:37:f4:c2:57:d1:13:f3:
2c:1f:d0:f7:48:09:f5:fb:9f:32:e5:3b:57:8f:7e:52:aa:90:
be:ca:02:84:85:70:8a:5e:02:c5:8f:75:47:32:5d:9d:ea:d0:
b5:fa:17:fa:0d:01:7a:97:f8:f4:37:2a:1e:e5:6a:6e:b0:ae:
fc:aa:bd:23:41:95:3f:8f:86:a1:76:91:4e:5b:08:ec:51:f6:
47:53:90:b2:3c:82:73:5a:68:bc:8f:23:36:59:a8:66:4f:a9:
cf:77:38:1d:58:a2:09:d5:98:3b:df:46:57:8b:e3:0b:07:f8:
14:4d:2b:a0:68:54:83:fd:97:48:40:f4:ba:b9:23:b3:bc:eb:
55:48:3c:cf:0c:57:90:d2:63:94:7b:01:22:cb:32:91:05:e6:
37:e0:90:47:c9:75:ee:5a:c2:a8:3f:73:24:bb:4e:28:b3:88:
3a:f3:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:48 2026 by rpki-client