Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WLvfHhxE_kAQ6KMgks_uFwEyZcA.roa
File: WLvfHhxE_kAQ6KMgks_uFwEyZcA.roa (raw, json)
Hash identifier: cnla81bBuCqqBA5sjMK4XOre9P5bRRVRYRTKn17nkXE=
Subject key identifier: 58:BB:DF:1E:1C:44:FE:40:10:E8:A3:20:92:CF:EE:17:01:32:65:C0
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A03624ACEA86D9F4139FE287468E4DF23D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WLvfHhxE_kAQ6KMgks_uFwEyZcA.roa
Signing time: Mon 24 Aug 2026 23:39:28 +0000
ROA not before: Mon 24 Aug 2026 23:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218890
IP address blocks: 2a0c:9a40:e010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:36:24:ac:ea:86:d9:f4:13:9f:e2:87:46:8e:4d:f2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 24 23:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58bbdf1e1c44fe4010e8a32092cfee17013265c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:61:8f:e2:b1:df:45:1d:1d:f9:03:16:76:
0c:68:6a:16:21:45:51:11:38:db:9a:d7:12:1d:31:
f0:10:3c:ec:2c:6a:21:ee:96:ad:0f:a6:d6:f1:6a:
bc:d5:2d:9e:c0:00:18:16:f8:38:d6:07:80:7e:f1:
c4:2f:a8:8c:7f:27:5f:90:e8:98:eb:65:35:aa:64:
0d:b2:23:1c:dd:f4:05:91:45:0f:76:f7:bc:a4:44:
c8:17:cb:35:d0:f8:15:29:2b:7e:06:a4:27:24:9a:
a7:6d:e2:99:e9:08:2b:d5:27:b2:8d:20:4a:f9:ed:
9a:0c:81:97:43:e2:37:62:00:3b:5a:85:39:57:55:
79:d4:55:bf:7d:6a:3b:c6:b7:4e:f8:48:1a:df:a3:
84:a2:fa:f2:58:d5:7a:6f:99:41:7c:ed:8f:e3:48:
3c:fb:2d:6b:f1:86:53:fa:3f:1a:2a:d9:9a:d1:d2:
88:86:35:ad:40:a4:24:61:37:06:b4:f2:e8:41:56:
78:f3:39:be:ab:a2:8e:4b:51:d4:f1:2d:a1:c4:ca:
8f:a6:0d:04:6e:f1:05:c9:89:2e:bd:cb:45:f7:b7:
42:71:38:08:ac:34:9d:ca:79:6e:08:c8:9a:52:ed:
b6:1f:66:6e:a9:c0:ad:b1:5b:27:2b:ff:ff:da:c3:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:DF:1E:1C:44:FE:40:10:E8:A3:20:92:CF:EE:17:01:32:65:C0
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WLvfHhxE_kAQ6KMgks_uFwEyZcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e010::/48
Signature Algorithm: sha256WithRSAEncryption
9a:82:84:40:e1:67:1d:8f:ef:56:84:60:9c:8e:b6:b5:33:30:
4c:cb:ab:1d:20:3e:d3:10:29:bb:df:56:39:bc:3a:ff:d7:61:
b0:56:b1:ca:d8:71:83:18:2c:56:11:2e:da:7b:5d:5b:a5:0c:
c5:5c:3d:28:ec:08:ab:e9:8a:3b:0e:9a:22:ff:6b:ac:17:f9:
34:18:58:35:b7:46:14:b3:34:3a:7e:fb:84:c6:56:c0:96:33:
0a:02:bb:e4:d8:ed:7f:6c:a3:a1:e0:f9:41:52:31:e7:53:a8:
19:e4:3b:86:99:4b:b3:0d:18:6e:1b:f6:ca:91:be:ec:5c:01:
99:92:99:7e:a0:ea:56:93:08:3d:54:91:e5:1b:65:97:27:f8:
b2:43:1f:dd:0c:47:f5:21:cf:2a:a5:b3:ab:03:d6:7b:63:23:
5c:01:e4:30:a7:6f:0b:36:3e:d3:f5:79:50:20:f4:87:e6:e9:
89:f0:2e:0b:23:4e:c7:cd:70:6f:7c:d9:2f:96:0e:78:2d:7e:
95:b7:94:f1:ef:b5:d7:8c:75:bb:e8:8f:a6:18:16:d6:f7:8b:
46:9e:b3:d6:58:17:67:13:a2:b4:6d:06:da:f9:05:78:ae:ed:
97:bc:f2:b5:99:bb:be:db:40:7d:71:97:1c:d7:a9:a4:4a:dd:
40:f3:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:31 2026 by rpki-client