Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/WrzqxUbHWF7HcxsL8cQxuxpNdmY.roa
File: WrzqxUbHWF7HcxsL8cQxuxpNdmY.roa (raw, json)
Hash identifier: WlfUvOzQ5YqMfbAGnnKjEm1gW/UCmNr5ct407GHIsZc=
Subject key identifier: 5A:BC:EA:C5:46:C7:58:5E:C7:73:1B:0B:F1:C4:31:BB:1A:4D:76:66
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A0EC16955E5A84048FC295114E61F7DF93
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/WrzqxUbHWF7HcxsL8cQxuxpNdmY.roa
Signing time: Tue 29 Sep 2026 07:34:58 +0000
ROA not before: Tue 29 Sep 2026 07:34:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 185.198.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:16:95:5e:5a:84:04:8f:c2:95:11:4e:61:f7:df:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 29 07:34:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5abceac546c7585ec7731b0bf1c431bb1a4d7666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:d0:6f:e7:bd:a6:83:9e:11:d4:a9:47:2f:
7b:20:ba:46:2d:74:c8:02:4c:3e:22:42:79:d3:5d:
cc:70:ed:21:55:db:69:76:e7:22:70:bf:44:fd:a2:
ac:d3:e7:02:3a:00:88:85:6d:6c:a7:f6:f4:b4:b3:
d7:0a:2b:64:05:ab:a3:44:f9:90:af:04:72:e7:5f:
a8:4b:49:26:c7:a3:4e:e3:dd:a8:b5:47:a1:0b:bb:
e5:32:ac:18:bc:ba:93:04:5c:db:50:e2:20:40:60:
fc:ec:fe:23:5b:e5:bf:f4:89:d9:a1:ba:fc:1e:77:
4d:b4:d0:6c:6f:70:e8:6f:9b:e7:c7:0f:9a:ba:98:
d9:72:08:c1:5d:d0:e6:76:11:2b:69:cf:cc:43:d6:
8e:44:9d:75:34:e8:a9:c7:94:5c:63:bf:15:5b:be:
48:7a:ed:e8:e9:41:69:7a:f1:8d:64:7a:59:bd:d3:
70:06:99:78:a3:dd:29:31:f6:82:54:a5:af:36:f8:
d5:10:a2:29:a7:93:f1:4c:f0:70:75:9d:a2:a9:40:
8e:d0:b8:7f:7a:02:bb:f6:ca:10:34:4f:48:80:15:
00:1f:af:c1:e8:d3:82:9a:c8:fa:2d:10:6e:b7:08:
32:dd:04:db:a2:b3:74:c8:65:28:6a:67:06:b4:d9:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:EA:C5:46:C7:58:5E:C7:73:1B:0B:F1:C4:31:BB:1A:4D:76:66
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/WrzqxUbHWF7HcxsL8cQxuxpNdmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.247.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3c:08:d2:33:14:f9:29:34:82:42:2d:f9:4a:59:6f:eb:85:
83:b3:4a:26:0f:58:13:bd:94:44:e4:2c:d0:77:9b:3c:b3:26:
17:cd:11:62:f7:46:aa:a3:27:b7:b8:b0:29:4a:f4:6a:54:bb:
9e:6f:3b:6c:30:35:e2:3c:c8:be:60:3b:c6:08:8c:58:87:6f:
f5:fd:25:9d:b1:9e:8f:2e:23:8d:0c:96:f7:97:fc:a9:7b:c7:
67:d9:64:91:12:8c:2d:4a:94:72:14:2c:e6:32:cb:c0:56:dc:
59:6d:cf:b9:f0:0f:1d:87:12:31:88:75:2c:c1:3e:b5:66:1b:
fa:0b:3a:7c:71:0b:5e:cf:e1:93:d2:b5:2c:b7:69:a0:39:9d:
16:8a:8a:26:c3:ff:e5:c4:0d:47:08:3d:4f:05:f3:47:7e:0e:
50:04:8c:28:ae:b8:3b:4c:05:ad:aa:03:34:64:49:29:b1:15:
40:1b:44:46:5d:e1:1d:d4:3f:77:cd:82:78:f7:2e:17:e7:14:
95:49:80:11:1c:da:16:a3:1b:3d:32:42:14:d0:be:7b:64:7e:
13:03:2f:09:c5:63:d1:5d:1a:50:fd:e2:0a:78:96:0a:bc:a0:
de:b7:da:9a:ae:27:fd:f0:ca:50:fc:2f:38:2d:30:80:ea:55:
b6:4a:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:22 2026 by rpki-client