Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WKhy8MHnSQ8eDjtkoA49NRaBPGc.roa
File: WKhy8MHnSQ8eDjtkoA49NRaBPGc.roa (raw, json)
Hash identifier: 1iat9jhmZXs7OGFCERsF1oS5fbu2DAsl5vYF5ov0UEE=
Subject key identifier: 58:A8:72:F0:C1:E7:49:0F:1E:0E:3B:64:A0:0E:3D:35:16:81:3C:67
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982344C9DAAF228F0E16AD1D83F42E7
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WKhy8MHnSQ8eDjtkoA49NRaBPGc.roa
Signing time: Tue 25 Aug 2026 15:20:29 +0000
ROA not before: Tue 25 Aug 2026 15:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 193.38.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:34:4c:9d:aa:f2:28:f0:e1:6a:d1:d8:3f:42:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58a872f0c1e7490f1e0e3b64a00e3d3516813c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:c9:a3:7d:b4:22:61:cd:cb:83:aa:11:dc:
95:28:bb:93:0a:e1:b1:e7:47:73:58:e5:d9:95:ee:
79:d9:cf:3c:78:68:98:bb:fa:61:73:a2:01:05:8e:
31:99:c3:90:f2:74:5c:17:04:8f:ba:09:7c:1b:23:
f5:3e:01:a9:fa:20:0d:9e:40:1c:2c:29:46:dd:d6:
17:cb:8e:08:7f:1f:36:31:cf:e1:94:9d:12:40:df:
1d:ba:c6:41:96:c4:e6:0b:af:64:85:21:a6:31:05:
f8:9e:17:fa:06:f3:30:ee:43:8a:19:87:4f:e9:30:
53:44:66:a7:4c:81:4e:8e:fb:c6:3b:2f:f6:7d:1f:
2e:ad:f0:87:28:98:55:3a:ce:30:fa:fb:5a:20:8e:
64:cf:9f:53:5f:63:8d:67:88:30:b5:28:09:bd:69:
9e:17:32:63:94:c3:e6:b8:87:6d:16:87:19:5d:dc:
87:8a:d5:75:36:33:f8:4a:fb:e4:21:67:79:31:41:
aa:67:40:77:39:bf:77:57:d0:f5:1e:b1:99:13:3c:
3c:02:dd:d3:df:06:09:30:86:ce:fc:10:f9:c5:50:
b0:8e:38:35:61:8a:3c:dc:a5:cb:1d:d7:36:d9:68:
69:b0:e1:d3:a5:41:a1:dc:4f:33:63:40:1e:e4:7d:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A8:72:F0:C1:E7:49:0F:1E:0E:3B:64:A0:0E:3D:35:16:81:3C:67
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/WKhy8MHnSQ8eDjtkoA49NRaBPGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.47.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a7:35:cb:ed:00:0c:f1:27:70:1d:b8:35:9e:5d:cc:b5:ce:
1b:05:64:7f:4c:c7:10:b2:a6:3b:d2:ad:79:6f:06:92:41:79:
86:ec:53:29:f0:1e:4c:46:e8:e4:34:8a:50:68:5b:3a:20:56:
b1:9d:76:2b:d0:a3:ad:21:ae:63:ac:bb:67:01:2b:64:ab:16:
13:24:cf:03:29:e9:a0:cb:56:ef:d4:40:bc:c6:3d:35:9c:74:
a4:f6:6c:cb:f6:69:b1:bb:9f:77:55:4f:fa:bd:2d:ef:15:6e:
bb:d9:15:98:67:b8:37:cc:44:b1:bc:78:dc:8b:9b:9a:89:e3:
7a:ce:bc:a4:66:12:62:60:8f:2d:d0:3f:15:05:0a:72:27:73:
08:ca:cb:c5:db:55:8a:fe:e6:68:37:bb:3c:db:91:ba:a9:57:
2c:76:f3:d3:0c:45:47:2a:c1:2b:1c:ac:03:59:eb:2c:e9:04:
62:ef:ee:99:53:8a:6e:8e:65:3d:a9:d2:cd:59:8c:1e:75:5d:
3e:1d:74:2f:9d:6b:2d:06:de:55:49:77:d4:99:8d:61:85:ad:
01:27:e4:49:7f:2a:67:36:61:df:d9:5f:81:5e:50:b9:17:3d:
72:f2:77:9a:4d:f8:be:3a:98:e2:8b:87:aa:5c:f0:14:e4:c0:
02:74:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:29 2026 by rpki-client