Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/wVx7rtULVcYW9BDWlkXZjIZtBo8.roa
File: wVx7rtULVcYW9BDWlkXZjIZtBo8.roa (raw, json)
Hash identifier: LmhyElDVrU5UgStQexdVCOdGPfV7XQ8KLpCnik7DKA0=
Subject key identifier: C1:5C:7B:AE:D5:0B:55:C6:16:F4:10:D6:96:45:D9:8C:86:6D:06:8F
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019F7F8E370AA0BCDAFEAB510B9EB64E8B91
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/wVx7rtULVcYW9BDWlkXZjIZtBo8.roa
Signing time: Mon 20 Jul 2026 12:44:14 +0000
ROA not before: Mon 20 Jul 2026 12:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42474
IP address blocks: 159.200.242.0/23 maxlen: 24
2a06:dd01::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:8e:37:0a:a0:bc:da:fe:ab:51:0b:9e:b6:4e:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jul 20 12:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c15c7baed50b55c616f410d69645d98c866d068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:d0:6d:cd:b1:d4:f3:2e:11:c1:f5:3c:ad:
e2:ff:a9:3d:39:5d:9b:4a:75:50:51:de:81:1f:56:
4a:21:b7:76:13:9b:c5:83:e9:4d:05:e5:ce:77:1f:
d3:90:f3:62:ad:e5:37:3e:06:a6:97:60:57:89:da:
8c:53:7b:1d:11:d4:b4:3e:da:57:be:a7:9f:44:9c:
1b:77:4e:b7:9b:81:4e:cb:bb:6f:fb:1d:15:e8:21:
74:89:cc:7a:a8:66:4c:95:02:bb:ba:b5:81:8d:31:
6f:d1:74:2f:b9:e9:1c:cf:41:9d:31:2f:f6:e1:9e:
00:62:80:e6:10:8b:6b:ff:61:95:19:85:86:55:df:
24:21:e1:ba:ff:1b:71:1c:5e:67:7f:c1:ed:b4:85:
65:d5:d5:c3:f4:cb:ae:93:12:17:0c:b9:33:3e:a0:
f9:d5:6f:6e:9c:99:39:da:f2:b9:4b:44:38:26:4d:
bc:91:16:f2:3a:aa:92:ec:5c:13:6c:5d:5a:75:2c:
f4:2a:1f:93:8c:58:7a:20:45:75:bc:62:77:c2:3c:
79:5c:5f:94:b5:47:8c:39:eb:a9:2a:7a:4d:b6:57:
ef:3f:52:49:81:87:d1:8f:87:7d:d3:81:66:18:84:
19:d5:e6:cf:3d:97:47:2f:62:8b:6f:58:58:6a:55:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5C:7B:AE:D5:0B:55:C6:16:F4:10:D6:96:45:D9:8C:86:6D:06:8F
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/wVx7rtULVcYW9BDWlkXZjIZtBo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.200.242.0/23
IPv6:
2a06:dd01::/32
Signature Algorithm: sha256WithRSAEncryption
6b:f8:fc:dd:35:d2:c4:08:55:73:b4:e1:d2:da:74:6e:ee:51:
f9:ab:c0:0d:1d:e7:42:16:04:86:6a:31:ab:a5:f2:c9:4a:c0:
58:28:13:f3:91:5e:32:cc:80:e7:ca:34:85:86:5c:22:8b:c9:
54:08:09:1e:73:a0:3b:e5:f7:3e:6a:a9:a6:59:f1:28:c6:4a:
b1:5d:d8:36:88:47:cb:b2:a5:ce:56:0d:89:4a:2a:f9:02:ff:
b5:a2:e1:4c:49:67:22:88:25:55:3c:85:ca:27:4e:41:12:3d:
0e:44:de:0f:2b:a1:d2:d3:a1:0b:70:3b:33:a8:63:92:86:90:
f2:82:d2:c6:c4:f9:9b:d0:8d:7f:82:ce:42:a7:ed:a2:8a:0d:
e0:08:50:a9:25:b0:d6:1a:44:f1:b3:57:6a:dd:d3:87:e3:49:
08:0b:f6:9a:f1:c8:91:c8:0a:53:94:9f:f9:ac:1a:09:04:f1:
9c:96:38:6a:b6:c4:62:f4:10:65:04:49:f4:9f:2c:af:4a:e5:
60:ad:91:5d:d0:2f:15:bc:15:fd:ba:70:79:bd:cf:62:8c:f7:
68:5d:4b:dc:57:22:99:ea:58:13:3f:ca:2e:ab:3e:17:7b:85:
ff:ec:54:d6:9d:20:f8:72:28:18:1f:8c:2e:03:a7:79:fa:cd:
fd:df:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:13:41 2026 by rpki-client