Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wHE7Dwscdr6M_C53KxoqTJ-Pr88.roa
File: wHE7Dwscdr6M_C53KxoqTJ-Pr88.roa (raw, json)
Hash identifier: ZzKY08Hy9454oW7HlQopWQzZsNIjCQ/Z4m5xo/0Dm8o=
Subject key identifier: C0:71:3B:0F:0B:1C:76:BE:8C:FC:2E:77:2B:1A:2A:4C:9F:8F:AF:CF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EE56A99148A2524CA2E3F9222DA16DF0F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wHE7Dwscdr6M_C53KxoqTJ-Pr88.roa
Signing time: Sat 20 Jun 2026 14:23:48 +0000
ROA not before: Sat 20 Jun 2026 14:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216405
IP address blocks: 194.77.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:6a:99:14:8a:25:24:ca:2e:3f:92:22:da:16:df:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 20 14:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0713b0f0b1c76be8cfc2e772b1a2a4c9f8fafcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:67:eb:4b:bd:c2:7f:f6:37:55:64:d8:da:
6b:be:b8:64:87:49:fe:7b:7e:81:58:9c:0a:40:08:
e7:b9:8e:f2:d3:9d:d1:f9:00:48:6a:d3:f5:f1:73:
fa:ab:b3:11:62:d6:f3:7c:15:3c:22:0a:cf:a8:72:
55:cf:03:68:fc:2c:f0:d8:96:d2:07:37:fe:3d:9c:
4a:17:76:e7:f8:46:66:ba:47:0e:1c:46:c3:dd:21:
6f:44:f8:5e:70:00:f3:18:7b:e5:0e:f6:86:14:f0:
df:0b:4a:29:ff:82:cb:7a:86:30:47:15:7b:27:7e:
41:f5:a7:02:60:23:ae:2e:d8:6e:1e:8f:c4:e0:7e:
c9:9f:8e:2b:76:94:a9:e1:89:50:64:ce:3e:b3:4e:
b0:91:c2:94:f7:9a:9d:3d:bc:30:c6:34:2a:08:fb:
20:78:31:04:0b:20:1b:2b:1b:11:16:26:3c:01:c6:
39:a9:5e:4e:3e:55:6f:eb:6e:cd:f1:c9:d9:74:c4:
29:46:a9:19:37:2e:c0:d8:9c:8a:da:10:de:1b:2d:
f3:4c:8e:15:97:59:6e:30:05:1a:58:21:98:05:66:
11:6b:3e:9d:f7:02:34:b4:4f:a4:c2:d6:9d:b5:b4:
f7:72:fd:ee:1d:8c:d9:14:8c:67:fe:fc:ba:e1:aa:
7b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:71:3B:0F:0B:1C:76:BE:8C:FC:2E:77:2B:1A:2A:4C:9F:8F:AF:CF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wHE7Dwscdr6M_C53KxoqTJ-Pr88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.95.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cb:d1:fb:da:6c:34:25:d0:b0:de:6c:14:a0:d6:76:75:23:
4f:d5:09:de:39:aa:87:99:2a:ef:ac:d1:08:67:de:30:e1:7b:
2f:a3:78:26:64:38:d7:51:4a:1b:bd:fe:03:14:e3:81:ee:d2:
ba:2d:cd:f6:a2:08:41:39:61:bc:87:cf:b2:e7:58:e8:67:9a:
01:be:74:ce:f9:8e:99:e3:7b:60:a2:31:88:7a:84:43:ad:a2:
1c:23:9e:84:12:5f:5b:bb:53:42:e9:44:13:90:45:96:c9:e6:
25:ce:c4:70:86:cd:c7:ec:ec:e0:7b:fc:2a:2d:9e:af:2c:24:
17:26:b0:e7:06:69:7c:26:ea:74:c5:61:26:53:86:5c:54:5e:
f9:b0:31:8c:86:94:f7:a3:46:18:cb:d4:12:3a:3c:e2:90:04:
8c:7a:76:7f:8a:71:5d:9f:89:2c:00:66:97:96:51:c8:34:73:
5f:ab:56:70:ed:0c:c8:c4:ab:b5:cb:aa:47:95:08:74:95:01:
73:13:a0:5c:53:1e:6b:45:84:b9:96:9a:98:e2:7b:2e:69:c9:
5a:25:df:5c:26:6a:8d:14:26:db:e2:e1:f3:9b:ac:75:6c:d3:
b0:8c:da:85:bb:aa:e3:8b:64:da:a2:fc:f5:6d:d9:8e:30:37:
6b:64:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:29 2026 by rpki-client