Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WE8jwzFiXyzxP0XduyNEXiTNMAA.roa
File: WE8jwzFiXyzxP0XduyNEXiTNMAA.roa (raw, json)
Hash identifier: yncyaetHmwzY+aHYEMy99E27QCpBiNEHIG0jxMKxK18=
Subject key identifier: 58:4F:23:C3:31:62:5F:2C:F1:3F:45:DD:BB:23:44:5E:24:CD:30:00
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D04FFE0057AE74DDC024966E25F680D7D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WE8jwzFiXyzxP0XduyNEXiTNMAA.roa
Signing time: Thu 19 Mar 2026 07:29:31 +0000
ROA not before: Thu 19 Mar 2026 07:29:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41798
IP address blocks: 45.88.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 14:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:ff:e0:05:7a:e7:4d:dc:02:49:66:e2:5f:68:0d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 19 07:29:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=584f23c331625f2cf13f45ddbb23445e24cd3000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:23:8a:8d:10:18:ca:6e:82:ce:b7:a4:be:
37:e6:7a:ab:a3:b6:07:d9:c4:3b:fa:7a:e8:6b:d7:
ab:bd:c4:4b:a4:3f:42:37:6e:a4:b2:3e:9e:72:64:
47:08:53:9e:21:52:26:ae:30:dc:b0:85:5e:6f:5e:
83:40:59:06:66:04:b5:63:3c:50:eb:0a:58:66:fa:
92:04:d9:4f:d6:28:61:e5:9f:f2:47:c9:58:a9:8a:
13:c0:06:f6:0f:86:58:eb:00:1f:df:3c:37:c8:fe:
de:cc:26:a7:81:0e:2b:b1:9d:51:c8:0e:a1:cb:3e:
b5:b4:93:cb:bf:c5:21:40:4e:f0:46:f6:6e:eb:39:
a0:cd:db:b5:af:64:07:42:d0:4f:cc:53:06:ea:e1:
e2:b7:e6:99:ba:b8:dd:d3:56:aa:3e:55:9d:43:97:
d7:9f:5e:48:96:ed:6c:e7:50:06:d6:34:97:2b:84:
a6:28:b6:9a:cc:1e:df:59:d8:7c:6e:2d:a6:c5:10:
b5:3f:a0:12:ab:40:1c:0c:7d:4d:e4:e8:5c:76:28:
68:d0:1b:a9:dd:b1:81:93:e4:3e:9e:ed:25:2a:34:
ea:7a:3f:2c:f9:4d:e5:ad:2a:fb:45:6d:5b:1d:ab:
45:3d:b7:74:7f:89:20:77:4c:7f:e9:41:ed:6e:4a:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4F:23:C3:31:62:5F:2C:F1:3F:45:DD:BB:23:44:5E:24:CD:30:00
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WE8jwzFiXyzxP0XduyNEXiTNMAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a4:54:b7:b0:57:58:cf:28:12:5a:e2:e2:31:58:96:23:ff:
a7:1e:ea:2e:56:34:64:b9:9a:ec:53:dd:57:45:cd:6c:a9:e1:
c4:2c:48:35:12:f8:9e:d7:48:44:62:4e:44:25:15:fb:fb:bd:
7b:13:8e:30:ce:5d:30:58:76:96:e2:be:49:9c:28:ac:41:4e:
94:24:e2:6f:e8:b1:81:a3:6a:37:55:11:53:06:f2:22:e0:f3:
9b:d8:49:c0:b6:11:d2:b8:63:c0:3c:34:ac:f2:5b:60:9b:44:
1c:4f:84:3f:aa:d1:1c:6c:95:34:ec:29:c4:84:65:26:6e:af:
81:fc:1d:1b:0b:d3:bc:02:4c:27:e6:bc:ba:97:e9:61:a5:1a:
fd:9d:cb:08:01:a8:6e:20:95:4a:4d:25:ad:d2:bd:2d:a9:b1:
7d:7e:77:7c:47:ba:6e:e4:e0:fc:b9:e0:f5:0a:61:93:48:18:
d3:79:b8:35:c9:97:fd:20:4e:90:18:1e:b8:85:60:85:b6:3b:
c6:a1:59:e6:42:bd:29:d3:31:78:a0:bb:7e:8a:99:ca:eb:07:
46:3f:b3:d9:53:b4:3a:ad:f5:aa:31:0f:1b:c1:50:67:59:14:
eb:7b:3a:1b:d7:62:96:e7:9d:bd:1c:4d:8b:16:2c:b2:7a:28:
d6:cb:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 22:37:34 2026 by rpki-client