Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/wkk-CAjW8nH2K3kEmzjceaKq94k.roa
File: wkk-CAjW8nH2K3kEmzjceaKq94k.roa (raw, json)
Hash identifier: UU/D7ID4PKru4t3/Cm98EfKQeds7x948vKruRVhOLmE=
Subject key identifier: C2:49:3E:08:08:D6:F2:71:F6:2B:79:04:9B:38:DC:79:A2:AA:F7:89
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 019F236936CAC0B1835BC3CC8B71E5E78E24
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/wkk-CAjW8nH2K3kEmzjceaKq94k.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35280
IP address blocks: 128.139.0.0/17 maxlen: 17
128.139.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:36:ca:c0:b1:83:5b:c3:cc:8b:71:e5:e7:8e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2493e0808d6f271f62b79049b38dc79a2aaf789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:70:11:a4:b8:f8:26:e4:19:7d:ab:bc:00:
5e:31:5b:75:29:67:af:e4:b0:91:1f:2f:73:48:6a:
54:29:4f:73:9b:0e:28:fe:ba:9d:f8:d8:69:cd:13:
ca:c7:87:6c:5b:22:4d:5d:3e:75:d1:9c:b6:a0:49:
67:9a:87:52:30:67:7a:76:05:ef:fe:f4:5e:e6:7f:
0f:f6:33:9b:45:8d:46:83:26:c9:cd:68:24:ab:28:
8c:83:13:57:f9:a2:ec:37:4d:36:47:d2:04:3c:a2:
b1:f5:82:a1:30:be:5d:5e:30:3b:8f:88:ed:d9:ea:
0c:67:fd:a2:a5:28:2f:1b:9c:d2:9f:cb:01:65:f5:
e7:aa:45:d8:e7:d2:b2:6b:0b:0b:5d:00:84:76:2c:
5e:6b:32:28:a1:7c:d3:2c:4c:6c:a1:11:d8:56:ef:
b2:60:45:ae:a1:d9:9c:21:11:7c:49:08:63:d3:5c:
83:72:4a:de:1e:57:81:11:5a:8b:c2:e0:cc:4a:74:
c4:63:29:97:bb:e0:a9:04:3c:f1:69:2c:60:e1:9f:
c2:61:e4:20:29:2e:77:b4:e8:28:12:75:58:37:7e:
f0:60:bd:7c:5b:c9:ff:cc:4c:9f:d2:e1:dd:9e:51:
ca:9f:a2:f7:bc:28:01:0a:eb:ca:e9:cc:7f:6d:9b:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:3E:08:08:D6:F2:71:F6:2B:79:04:9B:38:DC:79:A2:AA:F7:89
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/wkk-CAjW8nH2K3kEmzjceaKq94k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:b7:06:40:d9:2e:c2:05:8d:76:2c:ac:2f:c6:e3:6a:45:42:
77:96:bd:a0:b2:97:f6:cf:8b:5f:93:c9:9d:76:bf:8b:3b:b2:
81:bf:d6:59:92:e9:d2:fc:b7:ad:88:da:48:d7:9a:cf:40:7d:
59:a2:8c:89:85:2f:9a:10:93:e6:e8:65:3e:4e:ed:be:ba:3a:
76:17:81:41:be:9f:33:7c:60:e9:6f:b0:91:ef:cf:2e:13:93:
34:02:ba:fa:6d:a7:42:bb:30:07:8f:a9:df:e3:cd:7d:ac:bc:
5d:b3:82:d2:f8:f2:f3:84:5c:87:e7:9b:99:5b:fd:9e:42:ed:
31:74:14:f0:ab:14:70:63:6e:05:5a:50:cf:d0:49:ba:2a:a6:
3c:b1:fb:67:97:7d:b4:77:79:f2:9f:6a:48:90:a7:81:80:74:
2a:f3:79:02:63:ef:cc:45:b2:05:05:53:fd:64:2c:1d:8b:db:
32:e9:c6:3a:d4:19:00:ff:73:1b:1f:cd:1d:b9:90:3b:f9:9e:
36:e2:89:50:95:9a:07:e5:86:90:b7:0e:ee:f2:6c:83:3a:97:
da:8f:99:81:fb:68:bc:69:31:63:6c:91:0a:0c:13:86:48:64:
8e:f2:eb:da:fd:bb:38:dd:dd:81:4a:a3:08:f0:c6:b8:22:2b:
0c:7c:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:03 2026 by rpki-client