Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/WRpOfTJPCccC42CV7YRGE6ZB4S8.roa
File: WRpOfTJPCccC42CV7YRGE6ZB4S8.roa (raw, json)
Hash identifier: aa584vPwRk359UwenwBllw9kXmJPCVxnfFb7Rujx0kg=
Subject key identifier: 59:1A:4E:7D:32:4F:09:C7:02:E3:60:95:ED:84:46:13:A6:41:E1:2F
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 019FB7ED61BB75ECF50E9F439A8C0E6233CD
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/WRpOfTJPCccC42CV7YRGE6ZB4S8.roa
Signing time: Fri 31 Jul 2026 11:26:55 +0000
ROA not before: Fri 31 Jul 2026 11:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213035
IP address blocks: 185.188.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:ed:61:bb:75:ec:f5:0e:9f:43:9a:8c:0e:62:33:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Jul 31 11:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=591a4e7d324f09c702e36095ed844613a641e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1c:f5:21:95:80:77:84:aa:9f:dc:4a:2b:5c:
24:7f:a4:ba:be:a5:34:fd:ab:02:5f:31:08:b9:b1:
42:af:43:ef:77:44:bf:35:ad:1f:96:14:63:e6:4a:
ba:f6:30:23:25:29:de:09:4c:ae:cc:29:89:25:18:
fe:46:ec:a4:63:fa:d3:57:6a:a5:0a:d5:73:e4:4f:
30:cf:e5:d2:0f:c5:17:d4:77:ac:5f:ee:ff:a9:39:
cc:a8:f9:0a:db:f4:47:8a:ec:c1:60:af:21:04:71:
e7:20:a5:96:4f:20:21:5e:8b:38:21:c4:28:73:4b:
cc:ea:ef:24:03:e8:d0:14:3e:1c:1a:18:c4:b3:06:
bd:3d:14:e8:ad:a7:85:56:80:8b:90:3a:57:e2:ca:
5a:9c:74:cd:6e:cb:4a:68:e1:f0:54:e4:d9:a2:c2:
5e:54:1a:db:1c:34:e5:bd:a6:8d:1e:09:70:2c:15:
cf:f4:fb:5f:34:ce:87:dc:79:6a:64:77:98:01:2a:
1b:75:6d:8c:fb:99:e2:b0:09:f1:d3:80:9e:0d:10:
f3:b4:9f:e0:b0:cd:e9:5a:b4:9e:97:17:ab:17:a7:
64:9d:ce:41:4a:d4:5c:3b:5c:d4:e0:00:55:e3:ba:
cc:7b:87:f2:d2:4e:b3:e3:1a:0d:24:68:a8:d1:80:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:4E:7D:32:4F:09:C7:02:E3:60:95:ED:84:46:13:A6:41:E1:2F
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/WRpOfTJPCccC42CV7YRGE6ZB4S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.140.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c8:af:b0:d1:c9:4c:12:1c:55:f1:2c:90:ed:23:43:94:74:
07:56:c6:c9:28:8c:8c:a0:b8:57:5c:90:63:f3:6c:02:d1:0e:
f0:ff:44:5f:3d:f5:e2:65:df:a9:ea:ff:34:42:a2:a9:8f:68:
7e:db:d1:f8:e3:b3:85:e6:b3:d4:d4:4a:7a:a5:4e:82:86:d5:
a9:20:fa:10:19:c6:5f:ce:a1:1e:ea:f1:95:0b:86:88:f3:c1:
02:30:4e:87:c1:f8:d2:14:85:45:9b:4a:37:92:65:06:42:08:
50:44:cf:dc:fb:3d:81:9b:52:d8:1b:dc:82:b6:72:b1:84:4c:
43:23:7d:cd:99:6d:1b:a9:a3:f7:c6:cc:37:f0:79:31:c2:67:
db:5d:1e:62:45:3d:62:29:96:9e:4b:ce:eb:74:0e:48:96:8e:
3c:03:d1:02:ab:6b:62:45:c0:0d:b0:49:10:3f:a7:36:db:51:
24:a0:26:de:c9:4e:1c:06:4a:ac:31:2e:fe:43:24:f6:c0:6e:
57:ec:d4:31:64:e5:f4:5e:ba:8c:f0:15:ab:35:f0:f6:0e:c2:
7a:d1:d2:87:59:d3:d9:69:bf:10:29:05:34:d3:87:01:02:8d:
a9:bb:05:56:0e:33:83:15:a0:87:37:f1:6f:1d:70:4b:78:9a:
7c:f9:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:30 2026 by rpki-client