Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Wbovr48YT-QqwS_GXtViVKFEcy0.roa
File: Wbovr48YT-QqwS_GXtViVKFEcy0.roa (raw, json)
Hash identifier: Nc5yzap8jJS6JbkO+Br5dkY09puFnK2S3u3YGLq9JMs=
Subject key identifier: 59:BA:2F:AF:8F:18:4F:E4:2A:C1:2F:C6:5E:D5:62:54:A1:44:73:2D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EF5498183954E574D518D3CD6A7ED8401
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Wbovr48YT-QqwS_GXtViVKFEcy0.roa
Signing time: Tue 23 Jun 2026 16:21:35 +0000
ROA not before: Tue 23 Jun 2026 16:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56655
IP address blocks: 191.222.248.0/21 maxlen: 24
200.102.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:49:81:83:95:4e:57:4d:51:8d:3c:d6:a7:ed:84:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 23 16:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59ba2faf8f184fe42ac12fc65ed56254a144732d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:ab:67:79:38:e9:a8:53:ae:e0:c0:a3:75:
fa:6c:f5:97:80:34:2e:36:6d:44:2a:30:ef:9d:ec:
96:98:e2:49:cc:5b:8d:13:86:45:64:27:c8:fd:8f:
4f:7d:2a:18:fb:85:b7:56:bd:d5:4d:17:97:46:0f:
e1:fe:bf:32:fd:49:df:55:19:a8:7d:d5:20:a5:f8:
af:da:b1:53:36:11:38:05:35:07:bb:d0:2e:22:c8:
db:c4:b6:f2:c1:30:12:9d:22:ef:59:f3:fb:e3:cd:
bb:5d:6f:e2:f3:c8:cb:f7:aa:8a:31:40:96:9e:4d:
00:0a:fa:e5:2a:dd:8a:db:b3:58:26:b2:de:be:ec:
bd:e3:a9:e8:7b:fb:cd:e9:d3:da:e6:50:cb:d4:f9:
86:91:8d:31:71:1b:1d:58:09:51:61:c7:13:a8:1b:
d2:15:7b:9b:2d:be:ab:a7:61:c5:b0:c0:6b:25:a4:
73:b9:56:ec:42:22:30:72:d9:d2:c3:46:bd:02:85:
e1:50:0d:c1:cc:52:ea:15:48:e7:bc:bb:53:39:f7:
56:37:b8:ae:d3:54:9c:83:95:42:b3:9e:0a:ea:92:
00:e4:24:c2:5e:a9:a2:ed:99:05:33:e7:e0:6f:0b:
f5:3a:f7:f4:5b:00:da:54:ea:1e:fc:29:a4:50:70:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:2F:AF:8F:18:4F:E4:2A:C1:2F:C6:5E:D5:62:54:A1:44:73:2D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Wbovr48YT-QqwS_GXtViVKFEcy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.248.0/21
200.102.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:e0:2d:6f:8a:c4:39:fe:1f:dd:70:a0:2d:90:c3:0e:ab:33:
8b:3d:f7:be:f3:d7:83:24:38:66:7d:49:7d:2f:4d:01:99:c9:
b1:73:2e:f7:04:bf:32:86:57:54:c0:13:b2:c6:ef:8d:97:44:
b8:8a:80:64:25:f6:a5:91:24:07:b7:1e:4e:dc:ef:78:78:43:
8a:cc:74:af:2f:ca:ad:94:a8:ca:d7:97:c7:45:5f:6b:7f:19:
47:dd:1a:60:75:82:ec:65:40:07:13:be:20:1d:ee:fa:85:1a:
4a:99:45:2a:97:51:0b:66:80:84:2f:1e:7d:50:d4:ff:b3:ee:
a9:1e:dc:57:03:18:17:a7:01:dc:d8:29:3f:77:a8:75:41:f0:
3d:79:c2:f6:d3:c3:c8:76:ba:0a:cd:f7:47:2a:9b:7c:00:e5:
33:3e:ef:e1:02:a9:f1:c1:db:cd:30:ff:10:2c:ea:16:a2:d6:
b8:42:f5:b5:46:78:28:04:b2:9a:a7:cc:d2:36:1f:d0:19:0e:
76:cc:bc:1d:c6:6f:f1:64:01:ad:6c:69:36:3a:19:6f:3c:6b:
52:b8:29:58:b4:81:c2:a4:f3:51:c8:2f:53:77:6d:c5:97:a7:
57:a7:5c:76:0b:d7:2d:70:ee:bd:ac:e7:c8:94:d1:eb:ee:02:
38:db:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:15 2026 by rpki-client