Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WeH4yuTSBotxtWFkHlhYSnxYnRc.roa
File: WeH4yuTSBotxtWFkHlhYSnxYnRc.roa (raw, json)
Hash identifier: ItEUbaGLQJp8A9vcyqiTu3bZikB1rTn0GWKZQjFkvkE=
Subject key identifier: 59:E1:F8:CA:E4:D2:06:8B:71:B5:61:64:1E:58:58:4A:7C:58:9D:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0AEBC15638C681D5836CDD920F7F93F9D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WeH4yuTSBotxtWFkHlhYSnxYnRc.roa
Signing time: Thu 17 Sep 2026 09:39:16 +0000
ROA not before: Thu 17 Sep 2026 09:39:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 87.121.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 13:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:bc:15:63:8c:68:1d:58:36:cd:d9:20:f7:f9:3f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 09:39:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59e1f8cae4d2068b71b561641e58584a7c589d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:2d:5a:20:41:1c:d0:f0:9b:e8:be:2c:ea:
c0:6b:b7:cb:86:ea:37:83:59:fb:53:11:29:17:58:
56:c6:0e:73:8b:d0:c0:b0:cc:00:97:3d:80:3d:91:
84:10:fc:59:3c:62:0c:21:ef:21:6f:43:58:26:79:
0a:72:b5:1e:cd:03:b7:8d:b1:e7:75:77:3e:81:6b:
91:bb:88:5d:5d:91:ec:5f:45:e2:df:c4:92:c0:40:
8f:b3:47:a1:b1:6e:d8:65:42:ab:16:55:3a:d9:d1:
dc:59:2d:63:de:3d:37:a8:ad:b5:f3:eb:72:8c:41:
6d:70:f4:1e:14:1c:e9:8e:94:72:97:61:88:a6:86:
9d:b6:df:3b:fb:ac:b8:f3:83:fc:9f:93:43:ed:48:
08:70:f1:88:4e:27:e7:2b:29:c8:a9:57:9c:d4:75:
82:11:29:54:1a:f4:e6:d2:67:2b:9f:b5:8f:e8:2d:
0b:84:04:1d:bb:c9:fb:cb:e1:f7:32:8b:53:22:c4:
f5:e6:99:9f:85:9d:55:d4:87:0e:b0:35:d4:f3:3c:
f7:cc:b7:1e:d5:1f:bc:ca:c7:c5:96:90:71:42:4c:
40:b3:cc:92:a6:c8:1f:c5:1b:f1:49:90:a9:90:c1:
1a:f5:0f:1d:cc:51:16:7b:55:12:1e:d4:fe:4b:ee:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:F8:CA:E4:D2:06:8B:71:B5:61:64:1E:58:58:4A:7C:58:9D:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WeH4yuTSBotxtWFkHlhYSnxYnRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.132.0/24
Signature Algorithm: sha256WithRSAEncryption
11:92:9d:92:aa:24:54:5e:8b:a7:d8:14:92:3f:b7:b6:39:66:
94:51:9d:ce:36:b4:6b:9d:81:a2:25:09:74:eb:f2:4f:02:d0:
74:95:08:72:b9:80:d3:74:2d:df:73:db:b4:25:83:d7:db:50:
7f:b5:37:ec:45:e1:2c:63:5a:75:b9:36:56:82:fa:c1:80:51:
e5:40:67:b8:1e:a8:df:97:f9:60:5e:0c:3d:27:88:9d:c9:64:
8b:7c:05:20:3c:31:11:02:97:0c:f4:6f:a8:74:0a:33:10:3f:
57:9a:71:35:bc:06:f9:cf:9a:d5:35:c1:fa:42:7a:85:d6:bf:
ce:5a:46:5b:b5:4d:93:39:ca:55:6e:91:90:b6:ec:d5:f3:1b:
da:6e:bd:d3:1d:ae:36:45:9d:ed:68:5c:91:fb:68:40:6f:be:
09:94:1d:d3:0d:64:63:f0:00:0c:a0:d6:7e:a7:07:39:34:4c:
23:41:7a:83:7f:8b:24:3e:dc:4a:e0:67:38:f3:3e:65:52:b8:
1d:0a:db:c2:3d:fe:08:30:1c:d3:45:6f:65:6b:21:54:f5:36:
5d:6c:51:64:b7:3b:1f:66:bb:0e:de:ac:dc:36:4e:ff:8a:9a:
87:e2:87:f3:6b:33:b4:c1:9a:de:96:c9:20:6c:c6:7f:1c:89:
ad:5a:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:31:02 2026 by rpki-client