Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wWcFsHyEK5iLGIQJFYBRXsN_Q28.roa
File: wWcFsHyEK5iLGIQJFYBRXsN_Q28.roa (raw, json)
Hash identifier: 0VRna5FntY/a6ljHw3sgsCSj9m+Nd4uXnLzEqhL9+Rg=
Subject key identifier: C1:67:05:B0:7C:84:2B:98:8B:18:84:09:15:80:51:5E:C3:7F:43:6F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F291AB584F0789F98FB1F871663D0CC09
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wWcFsHyEK5iLGIQJFYBRXsN_Q28.roa
Signing time: Fri 03 Jul 2026 17:50:43 +0000
ROA not before: Fri 03 Jul 2026 17:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 153.76.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:1a:b5:84:f0:78:9f:98:fb:1f:87:16:63:d0:cc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 3 17:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c16705b07c842b988b1884091580515ec37f436f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:87:89:fc:d5:52:e1:84:ed:22:3b:ed:40:
fd:e3:f1:ed:a0:0c:b0:c8:56:bd:c8:e5:cf:5d:eb:
84:cc:42:ec:4d:e7:bb:e6:0c:97:c5:cd:fa:56:f4:
5f:b7:02:f5:ed:a0:df:47:91:9f:20:9e:cc:55:c4:
93:f8:09:e9:3a:8a:2c:23:55:b8:55:4e:d3:93:86:
46:76:c9:51:ad:6e:ef:d3:9b:cf:4e:eb:8b:67:e9:
79:64:62:9e:2c:8d:1c:e7:88:d2:bc:d5:5c:4c:7d:
36:dd:dc:a8:16:26:0c:e4:14:37:63:9d:bc:4a:4e:
04:45:b5:4a:47:03:e9:e3:d9:82:07:50:f9:39:17:
b7:91:8d:c6:f4:0e:69:e8:72:a5:a1:84:e0:63:d1:
58:23:2d:46:c1:b4:fc:20:00:de:d2:bb:e0:32:34:
cd:3e:fe:8d:73:27:24:d6:41:ba:37:b4:2c:f1:e2:
e2:5f:d3:01:4b:3a:95:29:61:05:0d:1e:22:66:0c:
98:63:c5:54:81:d8:5c:00:15:8e:88:97:7f:dc:f0:
ce:67:6d:2f:87:60:e6:b9:e8:63:04:48:d0:85:26:
b5:43:1f:55:e5:7d:34:de:5b:04:a1:ce:ef:75:2f:
f5:16:9f:51:20:3f:e4:8e:80:63:b2:1c:d1:47:f4:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:67:05:B0:7C:84:2B:98:8B:18:84:09:15:80:51:5E:C3:7F:43:6F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wWcFsHyEK5iLGIQJFYBRXsN_Q28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.211.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ba:80:80:1b:af:98:9d:7c:94:3e:0a:71:f0:7c:ce:3f:dd:
d4:d9:af:ed:0c:ae:3e:52:a6:06:59:01:69:c3:e7:92:b4:1d:
58:48:bb:74:1a:3c:db:d6:d6:a2:1a:e7:04:71:12:45:d0:06:
a8:ad:0e:dd:08:77:96:d4:46:1c:7c:96:9f:ac:01:f6:e0:6e:
06:09:e9:b2:9b:41:54:72:f7:57:8e:2f:04:6f:ff:6f:bb:73:
51:ec:06:e3:a2:53:ad:bc:61:15:df:eb:29:4f:ed:c0:4d:fb:
d0:84:08:7c:ac:2a:2b:c9:9f:de:55:25:bc:9d:54:4f:b8:82:
7c:ec:2b:be:ed:3d:7a:03:fe:c6:4c:f0:7d:92:0d:83:5f:ac:
13:54:3f:e8:5b:ff:52:b2:e7:47:6d:dd:05:e6:2a:b8:96:74:
df:42:8c:96:07:d6:a7:33:db:23:74:1f:4d:7b:2f:7d:6a:6e:
d0:1d:85:fd:c6:f7:0d:b1:a2:d9:fb:d9:15:7e:41:96:d9:65:
89:78:dc:78:c4:47:b0:57:5a:37:60:7b:52:e9:a7:17:67:0a:
e4:bf:48:8f:18:f1:a3:7b:64:1d:df:74:e5:62:9a:5e:eb:39:
cd:f9:31:72:4a:ab:87:b4:73:24:3c:0c:e9:a1:4a:14:6c:82:
59:44:1a:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8pGrWE8HifmPsfhxZj0MwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNzAzMTc1MDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTY3MDViMDdjODQyYjk4OGIxODg0MDkxNTgwNTE1ZWMzN2Y0MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAqHifzVUuGE7SI77UD94/HtoAyw
yFa9yOXPXeuEzELsTee75gyXxc36VvRftwL17aDfR5GfIJ7MVcST+AnpOoosI1W4
VU7Tk4ZGdslRrW7v05vPTuuLZ+l5ZGKeLI0c54jSvNVcTH023dyoFiYM5BQ3Y528
Sk4ERbVKRwPp49mCB1D5ORe3kY3G9A5p6HKloYTgY9FYIy1GwbT8IADe0rvgMjTN
Pv6Ncyck1kG6N7Qs8eLiX9MBSzqVKWEFDR4iZgyYY8VUgdhcABWOiJd/3PDOZ20v
h2DmuehjBEjQhSa1Qx9V5X003lsEoc7vdS/1Fp9RID/kjoBjshzRR/RerQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFnBbB8hCuYixiECRWAUV7Df0NvMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvd1djRnNIeUVLNWlMR0lRSkZZQlJYc05fUTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUzTMA0G
CSqGSIb3DQEBCwUAA4IBAQCVuoCAG6+YnXyUPgpx8HzOP93U2a/tDK4+UqYGWQFp
w+eStB1YSLt0Gjzb1taiGucEcRJF0AaorQ7dCHeW1EYcfJafrAH24G4GCemym0FU
cvdXji8Eb/9vu3NR7AbjolOtvGEV3+spT+3ATfvQhAh8rCoryZ/eVSW8nVRPuIJ8
7Cu+7T16A/7GTPB9kg2DX6wTVD/oW/9SsudHbd0F5iq4lnTfQoyWB9anM9sjdB9N
ey99am7QHYX9xvcNsaLZ+9kVfkGW2WWJeNx4xEewV1o3YHtS6acXZwrkv0iPGPGj
e2Qd33TlYppe6znN+TFySquHtHMkPAzpoUoUbIJZRBpI
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:24 2026 by rpki-client