Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/WtWfOSH1xg4tDfqcdTAxqRpWFVA.roa
File: WtWfOSH1xg4tDfqcdTAxqRpWFVA.roa (raw, json)
Hash identifier: AIFk01h0tMQIOg1R1VI1vZ9Z/E9vbhpIO7oshPhdH9Q=
Subject key identifier: 5A:D5:9F:39:21:F5:C6:0E:2D:0D:FA:9C:75:30:31:A9:1A:56:15:50
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019D8B3996508BBFADD945C0B323B089CF04
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/WtWfOSH1xg4tDfqcdTAxqRpWFVA.roa
Signing time: Tue 14 Apr 2026 09:01:40 +0000
ROA not before: Tue 14 Apr 2026 09:01:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 213.189.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:39:96:50:8b:bf:ad:d9:45:c0:b3:23:b0:89:cf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Apr 14 09:01:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ad59f3921f5c60e2d0dfa9c753031a91a561550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:8c:42:ae:d9:6b:15:30:34:89:50:92:b9:
54:fe:df:16:08:cf:e7:6a:86:57:c8:49:e4:1d:6d:
2f:1f:26:0d:81:58:75:b3:86:85:c4:85:0d:54:59:
54:cb:e0:d4:cd:c7:c6:e3:9c:f4:2e:dd:68:7c:7c:
b2:60:2e:66:78:67:cb:1c:33:74:5b:d8:90:4d:d8:
96:94:e0:04:c4:5d:a1:be:66:97:f0:c3:9f:5c:44:
9a:7e:52:4f:fd:44:26:76:20:1c:c6:85:58:8e:c1:
cb:f6:96:76:97:98:80:70:6b:41:23:b5:95:5c:f2:
4e:cd:58:71:1f:b7:55:fd:b3:bd:5f:be:60:bc:cf:
3a:7a:40:31:b6:70:20:c4:6a:58:b6:cb:cb:c9:de:
df:07:b8:38:c5:03:23:65:14:90:9e:59:5c:b2:ec:
5d:d0:36:3b:1d:69:5d:b6:ed:3b:0b:75:0f:5b:5e:
72:ff:f3:4a:41:eb:f4:2a:08:83:5e:94:22:80:e0:
d7:ea:93:c6:68:28:81:5e:b2:47:0d:2b:fa:d0:ba:
bb:a9:43:81:e2:02:50:9c:0a:7f:c6:56:a7:3f:47:
b9:da:de:0d:1a:3b:26:b8:a0:ef:99:7c:82:f8:01:
06:20:86:92:6f:c5:da:9e:8d:71:09:d6:58:1f:ce:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D5:9F:39:21:F5:C6:0E:2D:0D:FA:9C:75:30:31:A9:1A:56:15:50
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/WtWfOSH1xg4tDfqcdTAxqRpWFVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.8.0/22
Signature Algorithm: sha256WithRSAEncryption
66:c3:23:69:4b:b1:63:ba:26:17:17:9f:35:b7:07:91:e8:00:
c2:4b:87:f2:e3:4a:8f:38:83:92:6f:c2:24:bc:6d:23:eb:1c:
a0:aa:bf:25:6d:40:85:b7:8c:f4:20:e8:4e:f3:19:df:93:a6:
34:82:67:cf:d9:94:53:8b:ff:2e:17:2a:03:30:43:9e:10:84:
7f:e2:c7:9d:e2:2a:72:4f:9d:fa:bb:9f:7d:72:3b:1a:e4:b7:
62:9d:98:ba:9e:c0:14:c3:84:d1:03:54:c7:f4:c8:4c:29:ff:
bf:29:9c:94:14:64:c2:18:04:8d:a5:9a:26:16:cd:ac:83:04:
a1:65:ea:34:65:95:d4:63:96:1b:72:46:19:6d:c4:f9:c8:b6:
1b:a3:91:2c:91:62:a8:e5:67:01:80:72:ce:a3:21:1b:c1:18:
4e:e9:6d:58:93:7c:a6:3f:c2:4f:24:0b:74:81:52:0a:ed:fa:
fe:53:95:aa:5a:14:11:e1:00:cc:4d:b5:15:80:99:96:b6:54:
42:28:f4:96:e1:c0:45:3e:59:17:9c:de:3c:66:21:11:98:f5:
97:a2:49:e7:5d:d9:d2:7e:a3:84:c1:c1:5b:a2:2b:4b:bd:bd:
0d:62:90:c2:b1:c7:8b:13:83:2e:a5:e1:c9:6f:30:c3:f5:fd:
0b:fe:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:04 2026 by rpki-client