Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/wscbDwHrmLx272pKZtGELGhuuXA.roa
File: wscbDwHrmLx272pKZtGELGhuuXA.roa (raw, json)
Hash identifier: UY3EK2y/Cexn1/dQSElqlxjbeeV/MbtFdhvzL6gAd7k=
Subject key identifier: C2:C7:1B:0F:01:EB:98:BC:76:EF:6A:4A:66:D1:84:2C:68:6E:B9:70
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F23686C01A0950BD6AAC86BD89D641398
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/wscbDwHrmLx272pKZtGELGhuuXA.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203062
IP address blocks: 217.9.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6c:01:a0:95:0b:d6:aa:c8:6b:d8:9d:64:13:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2c71b0f01eb98bc76ef6a4a66d1842c686eb970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:b9:f0:49:88:28:8a:fa:da:70:13:95:b4:
9e:4d:30:f1:fa:91:6d:00:e9:ff:b4:2f:bd:c8:06:
5d:b9:92:c5:3e:d6:0a:8e:09:97:c9:02:df:56:63:
bc:41:c1:37:4a:69:16:98:7c:38:c8:d3:36:ab:9c:
e6:81:2a:99:7a:a1:e1:d0:5d:3c:9b:49:05:f8:f7:
91:a9:0f:51:f8:49:93:65:01:40:dd:4f:b7:62:51:
d8:c0:cb:b9:2d:41:86:76:af:93:98:30:d3:9a:54:
a7:c1:6a:5d:63:68:9c:ec:90:75:47:71:c8:98:1b:
9b:69:6f:01:4a:0d:ca:0d:6d:48:39:9f:e2:b8:58:
6a:5d:78:83:b0:43:e3:46:d8:42:69:af:d7:58:ff:
91:67:97:a4:a1:69:cc:48:f7:b8:3d:9c:a6:69:2f:
6b:8c:c8:98:29:50:64:cb:84:30:f1:c4:d9:a5:5c:
1f:97:56:76:b8:e8:c1:e2:17:19:8c:2c:2c:98:ae:
5f:06:34:9b:5e:35:3e:3f:24:cd:4d:16:2e:fb:b9:
83:71:7e:e7:65:4c:80:51:be:d1:6f:b6:61:06:ab:
43:f4:93:db:6a:e4:3e:19:7a:2b:b5:87:3f:45:f2:
1e:b4:b3:8d:2e:59:76:31:27:50:08:8d:10:46:5a:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C7:1B:0F:01:EB:98:BC:76:EF:6A:4A:66:D1:84:2C:68:6E:B9:70
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/wscbDwHrmLx272pKZtGELGhuuXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4d:10:dc:a9:b5:6b:cd:21:7e:cc:40:37:ba:cb:13:66:e2:
ba:72:69:a2:f5:eb:fa:02:54:cb:d1:65:81:5b:84:8d:8b:e5:
ee:58:e6:74:8d:e5:60:f3:34:34:dc:7c:56:04:97:c0:87:e9:
9d:02:9a:44:ce:fa:c2:74:30:6c:39:3b:2e:ef:f9:ae:88:00:
99:a7:a3:7d:7e:41:65:57:fb:59:6a:8e:13:4f:83:37:14:db:
7b:4a:d7:83:65:70:8b:c0:89:24:31:7f:82:97:a6:df:11:44:
d4:a3:29:e0:19:b5:1a:9d:84:22:6b:a6:0b:46:5a:e6:dd:39:
6e:99:b9:27:82:12:6f:58:97:15:b8:88:a8:b6:60:b4:3d:d8:
df:c3:fd:77:eb:ba:50:84:2a:ee:0d:52:c0:c4:2a:15:74:17:
5a:b6:88:73:ed:c7:f5:87:80:44:72:4c:3c:be:aa:ee:fb:9d:
27:e2:f9:a7:48:0f:a1:ab:52:b4:f0:2a:32:9d:e5:1a:63:88:
a9:82:53:97:05:cf:50:e1:d3:4c:62:ef:ad:98:1f:eb:44:b8:
76:28:a5:45:ac:a7:69:60:67:e2:57:be:06:c6:f3:79:6f:6d:
33:f9:99:95:39:18:83:80:f6:b1:d4:78:9d:9d:7e:a7:8e:13:
88:f0:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:10 2026 by rpki-client