Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WaQnOx7vfgmFfiKBBFHdWXd1X60.roa
File: WaQnOx7vfgmFfiKBBFHdWXd1X60.roa (raw, json)
Hash identifier: IjzzpBqMF6UM3MBchnGE/XeyHHB6F2VWr6wSPn33/DI=
Subject key identifier: 59:A4:27:3B:1E:EF:7E:09:85:7E:22:81:04:51:DD:59:77:75:5F:AD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F81268D09F10FF151E03A24DEF466B0BA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WaQnOx7vfgmFfiKBBFHdWXd1X60.roa
Signing time: Mon 20 Jul 2026 20:10:14 +0000
ROA not before: Mon 20 Jul 2026 20:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.232.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
62.76.238.0/24 maxlen: 24
62.76.239.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
192.124.175.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
193.124.2.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.41.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.58.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.89.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.106.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.58.47.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.67.0/24 maxlen: 24
195.133.83.0/24 maxlen: 24
195.133.92.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
212.193.18.0/24 maxlen: 24
212.193.20.0/24 maxlen: 24
212.193.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:26:8d:09:f1:0f:f1:51:e0:3a:24:de:f4:66:b0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 20 20:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59a4273b1eef7e09857e22810451dd5977755fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:f1:63:70:9e:50:70:f6:11:71:ca:59:81:
1e:23:84:e5:98:a6:fd:5b:c8:8e:dc:14:c8:12:3e:
52:54:92:be:1f:8c:e7:b4:bd:8b:5a:bb:f2:c5:3e:
05:c3:95:5e:81:e6:05:37:e1:3a:4f:02:49:7b:ab:
cd:41:a8:05:53:d5:a3:18:96:92:b3:fc:6a:ac:0d:
8b:a6:c9:ea:7f:f3:66:29:d8:85:c7:f3:fb:17:83:
bd:0f:3b:49:a9:6b:86:da:f2:25:16:84:41:24:89:
f1:8d:62:3b:7f:f0:3f:70:d5:ec:0d:b8:38:fb:50:
2b:74:0e:a6:b6:ab:20:4e:6b:88:6a:97:dc:21:05:
9d:bd:9b:19:68:39:8b:f0:d8:0b:fb:57:ac:d3:ca:
58:36:eb:e8:16:7e:c8:09:c9:cb:db:41:6e:65:2a:
8a:aa:97:30:47:37:24:f4:f4:23:27:0a:ce:1a:28:
50:a9:8f:e1:d4:78:a7:74:cd:10:a3:55:19:d2:00:
18:54:05:83:9c:1c:ab:ec:aa:a3:44:4f:be:f9:62:
13:51:c0:3d:c6:8d:bf:60:db:ae:47:eb:d8:15:2d:
87:39:cc:21:2d:a1:57:30:7a:b2:30:6c:a7:73:70:
27:e9:3a:c1:3d:d1:b3:68:87:eb:d7:46:41:1d:24:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A4:27:3B:1E:EF:7E:09:85:7E:22:81:04:51:DD:59:77:75:5F:AD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WaQnOx7vfgmFfiKBBFHdWXd1X60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.234.0/24
62.76.238.0/23
192.124.172.0/24
192.124.175.0-192.124.176.255
192.124.209.0/24
193.108.112.0/24
193.124.2.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
194.58.38.0-194.58.40.255
194.58.59.0/24
194.58.66.0/24
194.58.68.0/24
194.87.2.0/24
194.87.10.0/24
194.87.17.0-194.87.18.255
194.87.23.0/24
194.87.30.0/24
194.87.39.0/24
194.87.41.0/24
194.87.47.0-194.87.48.255
194.87.58.0/24
194.87.73.0/24
194.87.82.0/24
194.87.89.0/24
194.87.105.0-194.87.106.255
194.87.108.0/24
194.87.123.0/24
194.87.125.0/24
194.87.128.0/24
194.87.137.0/24
194.87.162.0/24
194.87.178.0/24
194.87.198.0/24
194.87.227.0/24
194.87.230.0/24
194.87.240.0/24
194.87.245.0/24
195.58.47.0/24
195.133.55.0/24
195.133.67.0/24
195.133.83.0/24
195.133.92.0/24
212.192.223.0/24
212.193.1.0-212.193.2.255
212.193.6.0/24
212.193.18.0/24
212.193.20.0/24
212.193.23.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7b:8c:a0:6f:d8:87:86:78:95:5b:0e:a7:fe:a4:4d:43:0e:
0f:16:26:22:2a:f1:b0:89:b4:4b:f2:93:f8:0a:70:31:5c:16:
56:45:99:31:0d:85:35:c2:b1:df:35:31:22:c2:de:c8:5e:0e:
48:14:8f:3f:70:55:ed:38:d0:60:d1:91:1e:3f:44:58:b2:df:
56:d6:c6:a3:de:7e:7f:5f:53:08:9c:47:b8:77:31:a9:04:84:
4c:f8:61:6e:de:22:69:38:84:9c:06:49:48:dd:cb:ef:9d:29:
53:34:a2:65:3a:27:c5:50:88:31:4a:7f:77:15:6b:52:79:89:
a4:db:38:88:ac:1c:11:99:cf:6e:8a:72:4a:e5:1c:b9:4e:2c:
c6:fe:d3:27:e0:9b:88:6b:96:70:ed:30:2f:1f:a0:0d:8e:12:
c7:ea:fd:4d:60:f3:30:e7:05:07:4e:2e:0d:51:ae:47:5f:2e:
23:1a:85:4b:54:c1:78:49:c2:27:6a:b6:fe:6f:86:63:f9:9c:
a7:8f:0a:44:ce:5d:7d:7b:fb:1d:82:f3:cc:56:7d:4d:6b:c0:
d2:ae:8d:b3:c4:63:1e:e4:0c:b8:11:60:34:e6:d2:c0:fc:9a:
17:97:c2:b7:a1:0f:81:9a:cd:c6:89:ca:ea:bd:b0:0f:30:93:
21:8e:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:40 2026 by rpki-client