Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/wsxHxyI7mGxSUjTsm-7L5NO8m7g.roa
File: wsxHxyI7mGxSUjTsm-7L5NO8m7g.roa (raw, json)
Hash identifier: prIHWIUUpFVvzMqoym+Q9XjG+cnuXV951tyw6omzzUo=
Subject key identifier: C2:CC:47:C7:22:3B:98:6C:52:52:34:EC:9B:EE:CB:E4:D3:BC:9B:B8
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019E4470B1C1538E1F3BD9BBA6A55FE1B3EF
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/wsxHxyI7mGxSUjTsm-7L5NO8m7g.roa
Signing time: Wed 20 May 2026 08:11:36 +0000
ROA not before: Wed 20 May 2026 08:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153810
IP address blocks: 189.13.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:70:b1:c1:53:8e:1f:3b:d9:bb:a6:a5:5f:e1:b3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: May 20 08:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2cc47c7223b986c525234ec9beecbe4d3bc9bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:cc:75:6a:7c:bd:20:39:1d:7f:3c:6f:9b:
df:c2:4b:8a:87:db:c1:0e:4c:66:c2:5b:10:86:03:
4a:2d:1f:31:5d:dd:96:0d:87:da:a9:3e:ee:7c:25:
c1:2c:09:63:ff:20:78:7d:80:31:4f:24:d2:09:26:
b0:a4:78:3c:79:3b:44:59:a0:72:15:f9:24:df:d5:
3c:a8:bf:62:06:a4:7d:50:00:50:d6:06:2f:6b:09:
08:08:da:e7:29:c8:71:8f:d7:74:6b:59:a6:5a:c3:
51:f4:6d:f6:fa:4b:c8:f9:84:3d:39:75:57:fe:f8:
96:3c:c1:0c:4a:e1:02:23:2e:86:d9:9c:fe:cf:49:
63:ff:87:c6:f1:78:ff:ab:e3:50:02:1b:2b:ff:1d:
97:27:10:9f:e6:9a:3b:af:09:e3:43:08:bd:d1:e0:
7d:72:d9:fe:9c:cd:87:d0:b6:9c:20:d4:f6:41:8a:
f8:15:f8:49:60:d6:11:e0:eb:10:12:e5:d6:4c:d9:
0e:c7:e2:2a:bf:9c:b0:83:75:44:db:7f:f9:bf:26:
6b:2a:42:db:6f:40:af:e0:b5:9a:f5:50:90:ef:40:
eb:da:b3:31:cc:38:38:c2:13:99:70:aa:6f:39:de:
2f:ab:7c:f9:d7:65:df:e6:a2:87:58:97:73:23:3d:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:47:C7:22:3B:98:6C:52:52:34:EC:9B:EE:CB:E4:D3:BC:9B:B8
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/wsxHxyI7mGxSUjTsm-7L5NO8m7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:30:e7:31:06:ba:0f:e5:94:34:85:7c:0e:56:07:70:0a:5c:
d5:67:e5:4c:55:db:77:1f:b8:98:3b:f9:a6:54:d4:a4:af:ce:
24:c6:16:99:2b:93:54:b2:e1:61:ae:f8:52:eb:cf:90:59:d7:
3a:1a:7e:03:f7:a8:c5:1a:81:24:eb:cc:3d:3e:7e:90:3c:c4:
bf:3f:fb:71:4c:e4:05:ee:33:1b:5f:b1:f8:6c:1e:d4:bc:72:
3b:97:8b:34:3f:58:3b:12:bd:f6:78:27:3a:78:27:14:da:83:
ed:9e:4e:e6:6b:5f:dd:1a:05:78:bd:1a:67:4c:e4:69:75:da:
3b:03:40:0c:2b:da:a0:4a:65:f0:a5:c7:b5:8d:8b:70:59:15:
06:cd:6a:27:47:3c:8c:d8:b5:f6:73:70:53:65:c6:6d:ca:94:
48:42:c5:13:dd:73:ae:43:39:9a:c2:39:a1:1d:ff:6c:ca:7c:
55:5c:b1:7f:03:ba:64:e5:8b:b0:cd:96:10:d3:69:06:bc:6c:
dd:d9:57:89:86:8d:82:68:27:d5:43:9f:a6:f6:e8:f1:3e:a6:
d2:a5:11:fc:f3:41:c0:1f:65:b3:5d:be:1e:c1:6a:f3:bb:e7:
af:29:c0:50:3f:07:da:37:95:b7:c2:9e:38:de:f5:25:44:5f:
f7:b3:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:45:35 2026 by rpki-client