Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/W4ZWtk6JsTaRO2f_bTtqGUMOprU.roa
File: W4ZWtk6JsTaRO2f_bTtqGUMOprU.roa (raw, json)
Hash identifier: CknDQZhsIyZhseB0fZRhF8Gu6d2z1J9bQP4o/xZ3Djs=
Subject key identifier: 5B:86:56:B6:4E:89:B1:36:91:3B:67:FF:6D:3B:6A:19:43:0E:A6:B5
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694EAC02B5B77A26DCFA940E1F0DA9
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/W4ZWtk6JsTaRO2f_bTtqGUMOprU.roa
Signing time: Thu 02 Jul 2026 15:18:51 +0000
ROA not before: Thu 02 Jul 2026 15:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207743
IP address blocks: 64.43.77.0/24 maxlen: 24
64.43.78.0/23 maxlen: 23
64.43.96.0/23 maxlen: 23
64.43.98.0/23 maxlen: 23
93.120.26.0/24 maxlen: 24
109.207.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4e:ac:02:b5:b7:7a:26:dc:fa:94:0e:1f:0d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b8656b64e89b136913b67ff6d3b6a19430ea6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:02:4a:6b:12:13:c0:49:e9:81:f6:30:70:
d3:3f:3d:2b:f6:09:3d:7d:5b:11:76:f4:71:ee:3e:
76:0d:19:4c:d2:76:5d:07:94:60:f0:27:29:8c:00:
e2:75:50:e7:92:d9:cf:de:4d:36:ad:54:55:39:e4:
a0:ef:9e:9f:b6:b8:ea:ba:1e:d4:cf:03:62:1a:31:
ef:06:42:22:c8:6d:9e:b0:a9:f8:f4:af:98:b4:3a:
ba:40:d3:97:59:46:a7:fe:6e:a8:58:0d:1b:46:6d:
94:f5:ea:0b:54:60:cb:6b:e0:0c:83:3c:98:8d:1f:
4f:86:51:75:e4:77:3e:8d:4f:72:54:b3:52:49:0b:
fd:5e:6a:a2:d2:df:65:8b:84:be:8f:64:30:a5:b4:
03:00:00:c6:59:4e:45:56:27:e0:66:fc:20:aa:24:
fc:48:dc:91:e7:46:da:c7:37:51:a9:dc:0f:fc:56:
77:83:13:d7:ad:c3:1f:b8:88:81:0c:e7:69:c0:94:
89:47:a1:82:6f:0b:45:39:cf:6d:36:42:ee:c5:bf:
74:a4:82:2c:49:1d:02:df:2d:4f:99:ca:5a:44:49:
60:e9:b4:de:bd:20:db:3d:a7:30:0d:fc:2f:2a:71:
e1:54:77:7c:ea:5f:82:65:a1:ff:8f:e9:34:55:62:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:86:56:B6:4E:89:B1:36:91:3B:67:FF:6D:3B:6A:19:43:0E:A6:B5
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/W4ZWtk6JsTaRO2f_bTtqGUMOprU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.77.0-64.43.79.255
64.43.96.0/22
93.120.26.0/24
109.207.134.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:c0:c8:33:d7:a8:6e:51:8f:d1:22:18:20:21:da:42:02:e7:
dc:00:cc:f4:75:2a:57:5e:a5:90:ff:a4:58:35:9d:4d:2e:56:
4f:0d:01:e8:14:5e:2b:b0:5b:52:a6:4a:51:33:4d:1f:f3:fc:
ac:40:cc:21:4d:84:fd:7a:0b:97:99:57:79:57:9d:3a:30:5e:
5a:d9:9a:96:ae:6f:30:f6:df:a2:7f:1d:9b:f0:24:ba:ea:3c:
10:bb:fd:22:b1:6c:ca:f2:ed:e4:66:82:38:d1:45:a7:3d:46:
40:34:24:34:ea:03:51:1a:20:3c:fc:ab:be:14:7b:aa:00:8d:
59:55:f7:5e:48:72:55:47:57:23:8a:1d:5b:b0:22:c6:5f:f7:
93:8e:76:30:e1:f7:18:06:df:04:eb:7f:45:72:f9:2f:ed:36:
13:41:01:b2:2e:18:9c:d6:09:66:d6:69:ba:f1:10:c7:1e:e7:
b4:47:2f:b5:b8:f2:d3:fe:54:5d:27:48:b5:cc:e6:db:5b:b6:
30:f3:76:44:a6:13:87:a3:67:d2:bd:8a:ad:cf:2d:69:a8:80:
de:59:ec:d0:31:1a:ba:cc:2e:44:13:f1:2f:22:74:f8:c5:21:
46:d7:8e:4d:52:b3:73:01:7a:2a:24:af:be:d0:ad:b0:37:79:
cc:83:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:30 2026 by rpki-client