Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WJRhLnQkc_oBuQDWH8BnUmKahq4.roa
File: WJRhLnQkc_oBuQDWH8BnUmKahq4.roa (raw, json)
Hash identifier: sXifYEMN6wD4Ccq/GxUd23Uc2RO6nkaHTwEXXqVmJMA=
Subject key identifier: 58:94:61:2E:74:24:73:FA:01:B9:00:D6:1F:C0:67:52:62:9A:86:AE
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A05C8065688279C913875AFEB337B0C632
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WJRhLnQkc_oBuQDWH8BnUmKahq4.roa
Signing time: Tue 01 Sep 2026 10:25:13 +0000
ROA not before: Tue 01 Sep 2026 10:25:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218820
IP address blocks: 2a0c:9a40:e020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:80:65:68:82:79:c9:13:87:5a:fe:b3:37:b0:c6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 1 10:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5894612e742473fa01b900d61fc06752629a86ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:90:bf:3e:19:0b:60:f4:a7:18:13:c2:64:
00:95:d8:41:e4:09:b6:41:9f:65:13:3d:1a:f5:cb:
6d:f7:dc:d4:fc:a8:5d:47:bf:93:8d:85:dc:f6:ab:
8e:59:8c:b6:74:99:72:d9:05:46:01:e3:83:35:b0:
b6:02:a0:d6:2f:0f:d3:09:1b:ae:b3:40:81:5f:ee:
bb:73:36:a3:d5:ec:2c:37:f0:e5:09:c0:bd:f7:32:
58:9b:76:24:e9:68:9c:a7:8b:f8:11:48:1e:0b:4b:
69:d5:22:f8:db:dc:6e:b3:25:9a:27:fa:db:20:14:
e7:b1:31:2c:70:d6:cb:e8:ba:e3:17:e4:de:c3:a8:
20:54:dd:76:5b:c9:07:8c:5f:09:9e:b7:ab:95:b7:
51:69:d5:fd:c7:ca:26:b9:da:96:d0:f5:68:da:07:
cb:0c:66:69:12:12:6b:2f:f2:53:4a:fb:65:24:55:
8e:2f:2e:7a:ff:4e:78:bc:d5:59:57:c3:39:6f:88:
63:86:17:ed:ee:b4:ec:26:96:5f:09:55:fe:4a:6c:
4a:dd:6d:cb:88:c1:54:39:18:f8:c1:ea:9b:0c:20:
69:10:7e:63:b8:de:8a:03:86:4c:7a:12:96:97:79:
b8:05:12:7a:4a:c8:4c:17:28:68:8b:09:68:b9:68:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:61:2E:74:24:73:FA:01:B9:00:D6:1F:C0:67:52:62:9A:86:AE
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WJRhLnQkc_oBuQDWH8BnUmKahq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e020::/48
Signature Algorithm: sha256WithRSAEncryption
67:df:c5:b8:c2:d7:e6:d7:5f:19:7e:8e:f0:8d:56:da:51:27:
08:b5:d2:a3:55:f2:74:93:62:6f:4b:35:4d:ce:25:85:de:e9:
51:37:27:02:68:c5:22:03:f7:1f:c3:97:e3:94:cd:dc:f0:d9:
88:6b:77:12:c1:0f:b8:4a:49:fe:5d:7d:de:7a:99:24:fb:7e:
df:02:bf:c6:a9:03:cb:4d:49:7e:b4:14:7a:c8:34:33:1f:02:
6c:9c:6d:de:3a:cf:fc:a2:29:4f:87:13:ca:55:58:e2:16:e3:
24:25:73:69:76:59:58:f2:66:1b:50:e7:bc:b8:45:25:f6:83:
d9:0b:c4:e4:bb:df:3d:4f:60:4b:df:72:7f:f2:63:6d:29:de:
58:4f:3a:23:36:3d:44:a1:9b:cf:55:b3:3f:90:0b:cd:d4:fe:
13:aa:d8:1d:db:cc:a7:e8:41:f0:6a:0d:23:c8:67:94:92:ce:
b2:e7:51:61:f9:69:06:53:06:aa:3f:03:c7:cb:1d:d0:c9:5e:
84:1b:a2:28:dd:6a:f4:32:dc:da:a5:f3:bc:d3:fd:63:63:ef:
f7:a4:63:3c:a0:02:7e:fa:a5:20:91:05:57:2b:ce:03:41:6e:
09:e9:3b:f0:82:de:97:59:55:93:b6:e2:ed:e5:80:24:10:04:
78:88:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:39 2026 by rpki-client