Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WPK5ZFkWBgJRNvYZGVM57SEZE3A.roa
File: WPK5ZFkWBgJRNvYZGVM57SEZE3A.roa (raw, json)
Hash identifier: BrgvRxZc6dyOnI0LCd8sLX2KTUNsRyDjLbqG9i8FTk8=
Subject key identifier: 58:F2:B9:64:59:16:06:02:51:36:F6:19:19:53:39:ED:21:19:13:70
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FEFA629DF727C34AAAFD59BF02959B528
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WPK5ZFkWBgJRNvYZGVM57SEZE3A.roa
Signing time: Tue 11 Aug 2026 07:07:52 +0000
ROA not before: Tue 11 Aug 2026 07:07:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202610
IP address blocks: 194.55.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:a6:29:df:72:7c:34:aa:af:d5:9b:f0:29:59:b5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 11 07:07:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58f2b964591606025136f619195339ed21191370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:af:0c:99:45:9e:7f:b9:71:ae:ec:b9:55:
50:91:62:2b:ae:b3:36:39:b8:10:57:43:7c:11:fa:
cd:c3:37:c7:77:95:4a:f2:94:9c:11:1f:7c:50:fc:
ac:91:8c:8d:cf:a2:bc:56:4c:c8:74:ee:db:4d:15:
55:fd:08:e7:7c:a4:d7:8e:02:94:b0:0f:db:e2:e9:
c0:5c:8e:9b:f3:77:7d:73:a5:08:64:9b:c4:3b:9f:
49:2b:f9:48:a8:df:c4:00:b4:c6:00:87:6e:cd:dc:
90:56:f4:f3:6e:ab:0b:07:71:4f:e3:b9:c1:70:fa:
5b:2d:7c:12:0c:b0:f6:ca:78:58:46:e3:1c:70:d2:
dc:1c:36:64:0e:d2:12:b3:66:dc:eb:04:17:b1:b3:
9e:aa:11:38:fb:55:5e:b4:be:bc:5e:5f:52:43:de:
38:ba:c4:73:47:04:04:81:4a:6a:a1:18:61:cd:d7:
01:7b:bd:cf:d0:3d:ab:cf:6d:6e:7c:ed:67:f7:a4:
46:03:0a:33:d4:01:d9:07:01:86:57:85:6b:19:a1:
91:34:d5:06:42:05:93:bf:ad:35:3c:20:94:18:de:
8d:86:aa:95:4f:2c:e5:c4:24:6e:cd:3d:67:9d:52:
20:39:e2:ae:84:41:0a:10:63:99:3e:7b:99:7b:4e:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:B9:64:59:16:06:02:51:36:F6:19:19:53:39:ED:21:19:13:70
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WPK5ZFkWBgJRNvYZGVM57SEZE3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
49:41:b2:65:f4:37:5d:92:f1:ba:50:36:ad:bc:f4:9d:b8:77:
86:31:f2:b7:69:b2:49:ed:94:fb:db:1b:0f:0e:4f:e6:a3:f0:
f8:1e:ca:84:1f:25:7c:af:70:90:c2:b4:e0:63:b1:ac:19:5f:
75:39:60:05:1f:66:80:05:5f:09:66:4b:95:01:00:28:27:50:
04:a5:f7:2b:a8:6e:91:fb:9c:db:db:a2:24:b6:be:e6:cb:81:
56:f9:14:fc:5d:54:22:88:df:c3:37:38:4c:83:40:6c:02:29:
e6:b5:59:9e:d0:0b:a1:b3:42:87:29:df:93:1b:de:67:37:d9:
91:17:9e:c6:16:86:66:81:ff:58:1f:ed:20:dc:2d:be:36:a6:
25:46:fc:78:04:72:6a:a5:b5:bc:e6:73:03:83:77:58:d9:8c:
4c:30:cc:f7:31:3a:68:c3:d1:50:68:e4:09:a1:c5:2d:15:77:
fe:16:50:c2:18:59:3d:68:5c:b6:21:f7:0b:3e:24:bb:79:33:
4a:bd:d7:f1:8f:79:76:dc:28:d5:de:a4:9e:3f:d5:07:05:99:
46:7e:48:77:ae:b2:88:f5:d9:f4:cc:1e:90:d9:07:19:2e:16:
51:2e:f7:a8:ed:c2:6c:54:98:77:7e:c0:e3:0b:9d:df:5e:df:
8d:e3:ff:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/vpinfcnw0qq/Vm/ApWbUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODExMDcwNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGYyYjk2NDU5MTYwNjAyNTEzNmY2MTkxOTUzMzllZDIxMTkxMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nevDJlFnn+5ca7suVVQkWIrrrM2
ObgQV0N8EfrNwzfHd5VK8pScER98UPyskYyNz6K8VkzIdO7bTRVV/QjnfKTXjgKU
sA/b4unAXI6b83d9c6UIZJvEO59JK/lIqN/EALTGAIduzdyQVvTzbqsLB3FP47nB
cPpbLXwSDLD2ynhYRuMccNLcHDZkDtISs2bc6wQXsbOeqhE4+1VetL68Xl9SQ944
usRzRwQEgUpqoRhhzdcBe73P0D2rz21ufO1n96RGAwoz1AHZBwGGV4VrGaGRNNUG
QgWTv601PCCUGN6NhqqVTyzlxCRuzT1nnVIgOeKuhEEKEGOZPnuZe04NqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFjyuWRZFgYCUTb2GRlTOe0hGRNwMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvV1BLNVpGa1dCZ0pSTnZZWkdWTTU3U0VaRTNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjfgMA0G
CSqGSIb3DQEBCwUAA4IBAQBJQbJl9DddkvG6UDatvPSduHeGMfK3abJJ7ZT72xsP
Dk/mo/D4HsqEHyV8r3CQwrTgY7GsGV91OWAFH2aABV8JZkuVAQAoJ1AEpfcrqG6R
+5zb26Iktr7my4FW+RT8XVQiiN/DNzhMg0BsAinmtVme0Auhs0KHKd+TG95nN9mR
F57GFoZmgf9YH+0g3C2+NqYlRvx4BHJqpbW85nMDg3dY2YxMMMz3MTpow9FQaOQJ
ocUtFXf+FlDCGFk9aFy2IfcLPiS7eTNKvdfxj3l23CjV3qSeP9UHBZlGfkh3rrKI
9dn0zB6Q2QcZLhZRLveo7cJsVJh3fsDjC53fXt+N4/9N
-----END CERTIFICATE-----
Generated at Tue Aug 11 14:35:16 2026 by rpki-client