Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WXHyVR3Aet7eamBq5sjzFdjYXUs.roa
File: WXHyVR3Aet7eamBq5sjzFdjYXUs.roa (raw, json)
Hash identifier: Fi4kPMeASViZG7ujfQXtih8daURJ20xGx/+3ZFMOiSM=
Subject key identifier: 59:71:F2:55:1D:C0:7A:DE:DE:6A:60:6A:E6:C8:F3:15:D8:D8:5D:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0388BEA3312457AC309B245330F1181E0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WXHyVR3Aet7eamBq5sjzFdjYXUs.roa
Signing time: Tue 25 Aug 2026 10:51:28 +0000
ROA not before: Tue 25 Aug 2026 10:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60849
IP address blocks: 87.121.62.0/24 maxlen: 24
185.218.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:8b:ea:33:12:45:7a:c3:09:b2:45:33:0f:11:81:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 25 10:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5971f2551dc07adede6a606ae6c8f315d8d85d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:98:06:24:88:35:ca:47:a9:44:19:d5:d2:
d3:79:87:9a:2b:7a:81:b0:92:75:d2:28:e3:ab:ab:
96:f4:53:0c:3c:f4:ea:04:a1:6e:a5:54:91:a9:ee:
3e:23:81:ee:bb:ea:54:4b:8e:17:d6:76:26:f9:79:
d0:d1:66:26:d1:43:f9:82:5c:b0:f4:7f:0d:e3:02:
ec:3d:d3:6e:42:d1:24:1e:f2:f0:48:32:71:c9:1a:
0d:5c:fb:38:29:41:a0:8d:e7:68:59:d5:e2:bb:f5:
2c:93:75:2a:91:07:ef:a5:16:e9:57:6f:cb:f5:71:
c8:e4:70:a0:ab:e4:6f:a9:ab:d8:8d:0a:e1:5f:69:
74:76:90:1d:10:b9:d8:11:51:f1:b7:36:a3:73:fa:
b0:c7:20:ae:8f:54:17:e7:f1:96:20:4f:1e:3e:a3:
35:aa:be:d7:73:26:55:e8:3c:02:5b:27:20:d4:e0:
12:4d:b5:41:cf:57:5a:fb:bf:2f:13:9e:66:6b:09:
a7:70:27:f1:71:f5:ff:82:90:c7:6a:9e:06:4a:24:
f0:83:61:ce:6c:93:22:3e:1a:08:dd:d3:7e:eb:a4:
d3:82:1d:55:cc:35:94:14:46:fc:0b:2b:18:94:25:
6b:be:b5:87:78:74:82:f7:64:db:ea:c3:6b:e6:2c:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:71:F2:55:1D:C0:7A:DE:DE:6A:60:6A:E6:C8:F3:15:D8:D8:5D:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WXHyVR3Aet7eamBq5sjzFdjYXUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.62.0/24
185.218.85.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8f:1a:d9:ca:fe:e8:7f:40:56:f7:81:94:96:9f:98:24:bb:
30:e7:2c:07:ae:39:a9:58:80:b9:f1:ec:5c:43:27:39:1f:f7:
82:d4:e6:70:19:9c:82:96:15:3d:8d:58:5f:fe:50:99:26:bc:
88:83:49:9a:34:60:8f:87:65:83:d6:02:a2:f2:86:28:1e:fe:
d2:e9:9e:ab:dc:cb:c6:24:3b:d3:d1:fd:50:c6:25:01:66:02:
8e:96:57:29:98:95:d8:81:50:58:22:a8:3c:79:c3:c9:b7:b6:
3b:e2:e2:c9:48:d7:47:dd:84:af:bb:f6:48:37:48:7c:55:81:
62:72:b7:90:30:25:7e:c9:c5:55:50:53:12:db:47:58:a2:a9:
4f:64:38:03:c1:81:4f:8b:67:84:74:83:ae:86:fc:8b:3c:9c:
fd:77:9d:10:0b:d7:5a:75:d8:be:5e:94:37:75:ab:ed:cc:1b:
c0:89:3d:35:e9:76:d9:88:ba:4f:4c:c9:34:80:52:5d:0f:6a:
b7:d0:ee:da:f9:5d:b7:fb:56:12:5c:cf:4e:e3:68:d1:6e:d8:
c3:ee:76:2b:0d:a1:96:a4:20:ae:db:2a:b4:59:4a:81:31:33:
37:0a:d7:a9:d3:ce:ab:3b:db:5c:fa:3f:7f:ea:ec:4f:87:b6:
0a:d7:c7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:29:44 2026 by rpki-client