Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/W26aEVjZFE9MGtx3eSUXWGkeOHI.roa
File: W26aEVjZFE9MGtx3eSUXWGkeOHI.roa (raw, json)
Hash identifier: UJJ5K0pMeNAy0ZZP+fZKk59NZeigXIwdWmRo5EEsR+A=
Subject key identifier: 5B:6E:9A:11:58:D9:14:4F:4C:1A:DC:77:79:25:17:58:69:1E:38:72
Certificate issuer: /CN=be21670889b869cd3437a9cd1fab218b8e380a0f
Certificate serial: 019F23686A73740BA6D0348BFD07FF29F957
Authority key identifier: BE:21:67:08:89:B8:69:CD:34:37:A9:CD:1F:AB:21:8B:8E:38:0A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viFnCIm4ac00N6nNH6shi444Cg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/W26aEVjZFE9MGtx3eSUXWGkeOHI.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28951
IP address blocks: 195.47.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/viFnCIm4ac00N6nNH6shi444Cg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/viFnCIm4ac00N6nNH6shi444Cg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/viFnCIm4ac00N6nNH6shi444Cg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6a:73:74:0b:a6:d0:34:8b:fd:07:ff:29:f9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be21670889b869cd3437a9cd1fab218b8e380a0f
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b6e9a1158d9144f4c1adc7779251758691e3872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:b7:f1:dd:4d:0d:42:50:fd:12:69:b9:3c:
95:f5:86:c0:37:8c:8e:45:6d:7f:f6:d2:6b:e1:5b:
e2:23:6e:85:bf:a1:b9:e5:05:f8:f7:2e:f8:71:c7:
e5:b9:e0:5f:a9:09:aa:a4:43:92:4a:3a:ee:c7:d4:
da:ca:59:fc:01:18:aa:0f:bd:54:65:80:d5:54:92:
35:62:aa:3f:6c:e3:6e:9a:6c:6e:99:2b:50:73:3d:
10:81:34:c9:93:c0:7a:07:d2:87:b4:58:88:e5:f9:
7f:78:88:7b:0b:e9:de:e2:92:4e:2f:49:2b:57:51:
ca:c4:1f:d6:83:41:40:5d:d7:ed:e5:f5:be:9f:93:
ac:49:a9:96:b4:60:01:0e:d1:b8:e7:6e:5f:1d:6b:
17:30:8b:32:25:8b:5a:d4:0c:a1:ec:e5:71:30:11:
2e:bf:6c:96:9a:3d:24:36:f2:cf:bf:00:1c:f7:05:
94:44:b2:d2:55:f5:28:e4:c0:7c:fe:f9:2f:04:be:
74:49:bc:b0:eb:c6:f3:5b:9e:75:57:30:a2:21:ed:
a3:a3:3d:76:38:a1:67:06:c8:55:9a:74:5e:15:7d:
7a:af:f7:7b:e0:5d:f3:50:da:aa:fe:dc:06:0f:16:
7e:e7:21:fb:0f:4b:ba:a2:6d:a9:31:c9:96:16:34:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:9A:11:58:D9:14:4F:4C:1A:DC:77:79:25:17:58:69:1E:38:72
X509v3 Authority Key Identifier:
keyid:BE:21:67:08:89:B8:69:CD:34:37:A9:CD:1F:AB:21:8B:8E:38:0A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viFnCIm4ac00N6nNH6shi444Cg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/W26aEVjZFE9MGtx3eSUXWGkeOHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/viFnCIm4ac00N6nNH6shi444Cg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:51:46:54:ab:46:f1:4d:7a:09:43:c6:b3:47:cb:96:01:00:
5f:77:db:82:98:55:cd:f2:13:6d:d9:db:8c:71:c1:17:2c:5d:
0f:8e:de:c4:a2:05:84:bb:91:7e:7f:e5:46:66:5e:06:79:e9:
42:28:a1:cc:84:80:9b:af:92:b4:2b:98:13:20:69:36:df:8f:
ec:72:05:30:c7:ae:ab:de:23:d2:b8:e9:78:ff:d6:5a:0b:16:
a7:30:d0:50:b4:03:c4:d5:94:3c:90:97:22:06:d0:25:3a:e8:
84:92:d9:0d:8c:e6:96:44:62:27:97:5d:ee:6a:90:ef:a7:58:
cd:28:cf:47:32:5a:2e:a8:9f:c7:e2:ef:75:90:7c:2b:73:29:
3e:01:7d:12:ed:8f:d5:d5:39:69:5d:56:fd:3a:56:96:29:55:
64:bc:87:d5:78:52:90:70:1f:e6:db:a7:ed:a7:6e:4d:20:41:
15:e2:61:61:d7:32:11:d7:a7:00:21:29:41:a2:5e:f3:3d:36:
70:ce:7b:00:74:b5:78:50:6d:01:9a:24:08:2a:7b:db:6b:b3:
a6:1c:ed:8d:05:23:04:92:06:15:2b:a9:ab:4a:4d:6a:5a:d5:
ab:ad:8d:48:95:47:3c:6d:1f:13:99:de:65:0e:82:13:20:a9:
53:5e:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:17 2026 by rpki-client