Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/WffXez4tRjvK8i61Xgp9_xyDej0.roa
File: WffXez4tRjvK8i61Xgp9_xyDej0.roa (raw, json)
Hash identifier: bMn3sIVFMxXy7m8YFxKTE0In+3PMB96dpHT4q7pYfYw=
Subject key identifier: 59:F7:D7:7B:3E:2D:46:3B:CA:F2:2E:B5:5E:0A:7D:FF:1C:83:7A:3D
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A032CE7B606830EA3C180F47B256E5BB0B
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/WffXez4tRjvK8i61Xgp9_xyDej0.roa
Signing time: Mon 24 Aug 2026 08:06:27 +0000
ROA not before: Mon 24 Aug 2026 08:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 141.0.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:ce:7b:60:68:30:ea:3c:18:0f:47:b2:56:e5:bb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 24 08:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59f7d77b3e2d463bcaf22eb55e0a7dff1c837a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:f5:3f:0f:90:40:aa:c5:71:80:a5:57:75:
68:81:ed:34:81:72:58:77:f6:a6:2d:6f:91:c3:d4:
df:24:07:bf:39:8f:0d:25:e6:a4:83:ac:5a:30:e8:
3d:29:8d:b8:c2:81:b1:06:95:fd:53:bb:8e:f9:26:
7d:e3:f0:74:a1:50:36:87:b1:3a:2f:86:d9:a6:49:
9b:31:10:ec:83:37:e3:66:65:61:2b:24:f2:c6:2a:
a8:b8:a2:9b:f7:7b:44:9e:7e:bc:f7:c1:1a:4a:9c:
4d:0b:1d:a1:ca:0c:39:b3:b6:4c:0e:d3:9f:5d:89:
b8:f3:59:25:25:9d:fd:63:2b:d8:b2:37:1f:27:ed:
39:5b:a3:d0:15:7d:26:ae:7c:dd:b1:27:0d:64:e8:
66:b2:7c:c3:0e:73:05:b8:c3:86:aa:2d:db:2c:96:
ca:a3:51:2b:97:c7:dc:2e:76:63:3a:34:ef:fa:0e:
4c:a3:c4:ac:d6:27:30:b5:a3:a0:ff:9a:aa:7f:a9:
3c:66:c3:6e:ea:89:c7:29:30:24:2e:e5:9d:db:62:
c6:a2:a8:f6:7c:59:54:dd:e6:da:17:02:bc:02:98:
3d:ca:50:cb:67:e7:42:ca:f2:cc:e0:79:d1:24:71:
a6:04:56:62:32:fd:c7:ba:82:9e:9a:dc:fd:3c:81:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:D7:7B:3E:2D:46:3B:CA:F2:2E:B5:5E:0A:7D:FF:1C:83:7A:3D
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/WffXez4tRjvK8i61Xgp9_xyDej0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:52:26:d2:58:8e:d2:dd:68:6f:a8:48:2c:3d:19:92:c0:79:
c7:95:7c:25:bd:45:c4:64:5a:75:93:c7:73:f9:0d:55:08:d4:
84:86:df:eb:b4:78:ba:e3:34:3c:76:4a:96:c6:06:64:48:f2:
52:f4:e8:38:52:61:19:84:f5:ae:ae:89:82:7f:d9:58:7a:99:
92:ce:13:49:55:80:31:c1:64:3c:5f:6d:de:15:80:91:a2:4f:
db:0c:4a:b6:bd:b0:83:5c:53:01:02:c9:8d:63:56:ac:0b:60:
b5:48:f4:ae:bd:3b:83:75:f9:9d:45:c5:b1:fa:e7:b7:c4:81:
eb:83:d1:14:04:85:b8:e1:c6:38:90:4b:c2:a0:68:58:c6:c7:
17:06:56:70:82:15:29:6a:fd:9b:6c:3a:6b:b1:fc:2f:32:1b:
cd:7a:79:73:fb:a7:3c:0d:7c:af:84:9a:f8:1a:85:c2:a6:bf:
a0:13:3a:f7:c2:bc:56:33:95:a5:be:36:05:39:71:15:33:63:
be:60:5f:a6:31:4e:24:0d:93:0c:94:1f:d3:70:fb:17:72:6a:
31:5b:1e:41:ef:47:96:f0:3a:d8:4e:d1:39:74:3a:c5:d8:d6:
a1:ff:34:2a:b5:d9:f9:e8:2c:4d:c9:91:c6:f5:0e:6d:8a:24:
79:40:e6:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAyzntgaDDqPBgPR7JW5bsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5
NTQwM2UwHhcNMjYwODI0MDgwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWY3ZDc3YjNlMmQ0NjNiY2FmMjJlYjU1ZTBhN2RmZjFjODM3YTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVT1Pw+QQKrFcYClV3Voge00gXJY
d/amLW+Rw9TfJAe/OY8NJeakg6xaMOg9KY24woGxBpX9U7uO+SZ94/B0oVA2h7E6
L4bZpkmbMRDsgzfjZmVhKyTyxiqouKKb93tEnn6898EaSpxNCx2hygw5s7ZMDtOf
XYm481klJZ39YyvYsjcfJ+05W6PQFX0mrnzdsScNZOhmsnzDDnMFuMOGqi3bLJbK
o1Erl8fcLnZjOjTv+g5Mo8Ss1icwtaOg/5qqf6k8ZsNu6onHKTAkLuWd22LGoqj2
fFlU3ebaFwK8Apg9ylDLZ+dCyvLM4HnRJHGmBFZiMv3HuoKemtz9PIHu8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFn313s+LUY7yvIutV4Kff8cg3o9MB8GA1UdIwQY
MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt
MzhlMDY4NTM2ZTZiLzEvV2ZmWGV6NHRSanZLOGk2MVhncDlfeHlEZWowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi
LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQC5MA0G
CSqGSIb3DQEBCwUAA4IBAQDJUibSWI7S3WhvqEgsPRmSwHnHlXwlvUXEZFp1k8dz
+Q1VCNSEht/rtHi64zQ8dkqWxgZkSPJS9Og4UmEZhPWuromCf9lYepmSzhNJVYAx
wWQ8X23eFYCRok/bDEq2vbCDXFMBAsmNY1asC2C1SPSuvTuDdfmdRcWx+ue3xIHr
g9EUBIW44cY4kEvCoGhYxscXBlZwghUpav2bbDprsfwvMhvNenlz+6c8DXyvhJr4
GoXCpr+gEzr3wrxWM5WlvjYFOXEVM2O+YF+mMU4kDZMMlB/TcPsXcmoxWx5B70eW
8DrYTtE5dDrF2Nah/zQqtdn56CxNyZHG9Q5tiiR5QOYx
-----END CERTIFICATE-----
Generated at Wed Aug 26 01:30:50 2026 by rpki-client