Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/WGKxWsXXggV_9LnnRlMcRw2xOM0.roa
File: WGKxWsXXggV_9LnnRlMcRw2xOM0.roa (raw, json)
Hash identifier: xVQycK0zci/2Z38JyGwMyPvHZLSCVjFzsH7yQ4G+eoM=
Subject key identifier: 58:62:B1:5A:C5:D7:82:05:7F:F4:B9:E7:46:53:1C:47:0D:B1:38:CD
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A1626673445FFE9EFBDEC73044D226052F
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/WGKxWsXXggV_9LnnRlMcRw2xOM0.roa
Signing time: Thu 22 Oct 2026 06:57:23 +0000
ROA not before: Thu 22 Oct 2026 06:57:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 85.239.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:66:73:44:5f:fe:9e:fb:de:c7:30:44:d2:26:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 22 06:57:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5862b15ac5d782057ff4b9e746531c470db138cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:2d:b0:c9:ae:a1:bd:41:53:21:83:47:11:
9b:64:be:61:b9:8a:80:49:0b:cb:77:10:b6:62:4c:
91:02:42:18:a2:6d:0a:e6:28:35:50:40:f6:6e:c9:
0e:ee:cc:3f:c8:fb:43:2e:2f:dd:9d:3e:2a:9b:dd:
4a:c9:f7:7c:1f:2e:dd:94:3c:e8:b6:79:8a:6c:e4:
2b:5b:2c:b4:ec:bc:e6:1c:fc:c2:35:57:d7:f4:58:
97:df:6e:2a:4a:93:f5:8f:d2:e7:7f:bd:31:66:a4:
1c:97:5f:66:32:5d:24:30:7d:c3:96:0e:d4:98:ef:
8d:66:02:73:ba:c2:a7:13:1a:97:d2:12:f1:a4:da:
e6:e8:a3:8a:3c:0c:d9:65:6b:83:c9:ae:ce:dd:29:
38:fb:39:24:50:3f:9a:c0:7f:2c:cf:d1:73:31:f1:
04:f1:38:ee:10:88:e5:24:5c:e4:2a:47:e5:68:dd:
5d:48:86:13:8b:ba:2a:60:80:74:28:c1:7d:37:6b:
92:4e:b6:96:e6:69:13:d0:c3:0d:01:a0:6c:0d:41:
64:05:b5:79:cc:8d:6f:47:e4:77:9b:45:a3:df:aa:
24:78:cb:e2:3c:31:23:14:ed:7e:7c:b8:5a:ed:54:
87:83:8a:5a:85:f9:3c:21:85:f8:ad:8f:1a:a1:1e:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:B1:5A:C5:D7:82:05:7F:F4:B9:E7:46:53:1C:47:0D:B1:38:CD
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/WGKxWsXXggV_9LnnRlMcRw2xOM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f7:94:1b:d2:30:e7:d8:af:dc:26:2e:3d:6d:19:13:9d:58:
58:16:e0:1c:14:78:52:3a:ad:d7:81:b7:97:71:0b:a2:5a:70:
ae:82:81:50:ee:e0:e2:73:e4:95:5a:0e:cd:62:a6:f8:52:c3:
ac:bb:5d:a2:cc:e1:ac:bc:2d:70:80:db:e5:fd:f9:9b:aa:7e:
ea:b2:5c:db:6b:21:de:57:0b:bd:85:25:bc:3b:5a:f4:4a:83:
39:a0:b9:09:6e:3f:39:80:70:f8:78:46:a6:44:2d:b4:cd:e6:
56:6d:c7:da:cf:54:22:3e:b6:b2:6c:0c:d6:a4:5b:84:b6:51:
5b:21:ff:de:98:19:f4:b3:55:f3:cf:58:5f:ca:b1:24:3b:4f:
bf:86:97:d8:62:37:72:f0:75:4f:ef:31:39:47:a0:e0:ef:bb:
34:26:4c:cf:57:b9:77:94:66:db:30:f9:76:1e:2f:89:6b:7d:
5b:3e:db:e9:5c:97:68:cb:0f:da:8c:29:49:38:77:93:8c:68:
14:88:78:a1:f4:7e:c6:a4:ef:03:f9:ad:dc:92:52:93:f5:b4:
66:9b:b6:a8:83:d3:7d:6a:c1:a5:b5:62:57:9e:92:e2:a8:0e:
f8:e4:09:4c:19:03:98:f3:88:31:f1:70:6d:fe:a4:a0:06:65:
f4:8b:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:29:40 2026 by rpki-client