Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/WeFQ5fS2UMSr-ycIpcZN3tQUiMs.roa
File: WeFQ5fS2UMSr-ycIpcZN3tQUiMs.roa (raw, json)
Hash identifier: oc6IvY7GDXmjVGbuanE/OX8JqSA6WH3isMGwrLT2E7k=
Subject key identifier: 59:E1:50:E5:F4:B6:50:C4:AB:FB:27:08:A5:C6:4D:DE:D4:14:88:CB
Certificate issuer: /CN=47f0b860e1350e087a06793181074f47b7953fa1
Certificate serial: 01A0FE3AF0B91199E8D9073F690A448C0427
Authority key identifier: 47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/WeFQ5fS2UMSr-ycIpcZN3tQUiMs.roa
Signing time: Fri 02 Oct 2026 20:07:50 +0000
ROA not before: Fri 02 Oct 2026 20:07:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 153.76.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:3a:f0:b9:11:99:e8:d9:07:3f:69:0a:44:8c:04:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f0b860e1350e087a06793181074f47b7953fa1
Validity
Not Before: Oct 2 20:07:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59e150e5f4b650c4abfb2708a5c64dded41488cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:da:aa:85:1c:1d:11:58:1a:ed:4b:4c:bc:
aa:fa:c5:38:e9:e3:07:c9:18:e6:3c:ea:57:97:50:
fe:80:c7:03:84:73:92:15:e7:d1:c8:f1:39:9d:49:
ea:58:8e:7a:13:e2:87:5e:79:d8:ec:92:ad:a4:a6:
8f:fe:64:4c:e6:c8:21:a8:2f:a3:32:55:a0:8e:39:
29:b2:16:7e:2b:bc:7d:fd:10:e1:c6:b9:d1:84:73:
18:60:c8:b6:ae:0f:ba:97:bc:ba:99:8a:21:70:33:
c0:4f:b8:7d:10:04:77:4b:9f:26:a5:e9:4e:b5:fc:
90:19:f9:c5:8d:42:76:30:be:6c:6c:24:e1:ad:b7:
8a:58:a8:2d:60:7c:16:d2:d5:3d:9a:b6:e2:ce:75:
81:9a:38:c7:51:ca:78:9a:b4:c8:3e:54:5a:93:b6:
39:36:74:e9:32:5e:04:5a:c6:00:5d:01:53:16:83:
39:d3:9b:e4:25:be:d9:29:d6:a5:1c:ce:e3:00:02:
96:50:7d:fd:0d:00:0b:90:26:aa:b7:89:75:c5:47:
75:fd:f3:bf:98:a0:e9:e4:ad:e9:e3:35:c3:d2:5b:
19:9d:56:3d:46:bd:39:6b:d1:79:47:6c:d5:de:c5:
59:c8:3f:94:c9:37:44:a0:c6:48:ac:62:9e:68:9e:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:50:E5:F4:B6:50:C4:AB:FB:27:08:A5:C6:4D:DE:D4:14:88:CB
X509v3 Authority Key Identifier:
keyid:47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/WeFQ5fS2UMSr-ycIpcZN3tQUiMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.232.0/24
Signature Algorithm: sha256WithRSAEncryption
31:48:00:06:c2:9f:50:c2:ff:48:ba:e2:a5:d6:c9:f2:90:70:
5c:2a:e6:f0:85:7f:c7:ca:19:1e:39:18:f4:e0:b9:de:ee:cd:
5c:c5:f8:e7:3c:0b:66:b1:43:84:59:55:0b:c6:d0:52:e7:43:
e8:4f:38:68:6e:1b:4e:6b:ec:df:4b:df:38:fc:52:ba:7b:99:
f1:71:bc:12:5c:e9:3f:3b:da:99:7d:b6:c4:b1:7e:1e:63:00:
a3:1d:f6:38:47:11:f4:5b:6d:fb:c5:69:83:d7:1d:2d:c1:8b:
a2:01:05:71:51:f1:08:95:84:d3:64:2a:36:4b:c9:2d:b0:ec:
3d:15:5b:f7:8b:1b:1c:b8:14:8f:58:5f:27:11:c9:00:29:0f:
af:c2:6d:dd:b8:da:d7:e8:23:1f:0d:ee:54:35:57:33:3f:62:
66:63:3a:b3:ac:69:4c:01:04:ac:95:15:52:8b:96:a8:b2:60:
f2:61:4d:72:d1:e8:7a:bc:70:f8:ab:04:a0:0f:ef:4a:cf:d8:
bc:d1:a9:e7:c1:92:b0:9c:f5:7e:b1:bc:8a:63:ed:9a:6d:9c:
27:23:64:23:86:80:00:2c:8b:82:05:52:b4:0e:72:4d:c6:13:
1c:04:53:2e:f9:1d:7d:af:36:03:16:35:06:9b:bf:e7:98:34:
8a:03:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:42:21 2026 by rpki-client