Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WciFjOc0e5kDBN8VrlueYWW0nRg.roa
File: WciFjOc0e5kDBN8VrlueYWW0nRg.roa (raw, json)
Hash identifier: BXdr0NF4UZY+YiN7johw3neQ8OKOT7Unc8IXjcxegww=
Subject key identifier: 59:C8:85:8C:E7:34:7B:99:03:04:DF:15:AE:5B:9E:61:65:B4:9D:18
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E4A173AB9F43AFCC1C6783949AE0C1E4D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WciFjOc0e5kDBN8VrlueYWW0nRg.roa
Signing time: Thu 21 May 2026 10:31:36 +0000
ROA not before: Thu 21 May 2026 10:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402508
IP address blocks: 87.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:17:3a:b9:f4:3a:fc:c1:c6:78:39:49:ae:0c:1e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 21 10:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59c8858ce7347b990304df15ae5b9e6165b49d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:7d:47:e4:d5:36:18:62:d0:e8:29:cb:12:
7d:3d:09:df:e3:9d:5f:22:09:1b:4c:83:fc:ee:37:
2c:78:d6:e6:f0:f9:99:8e:a8:8d:9b:40:9a:8e:81:
c5:99:d5:6e:05:1f:6f:41:7b:57:74:11:9d:2d:15:
c7:b4:ed:8e:df:9a:a5:db:e4:8e:b0:cb:de:0f:ae:
57:2b:73:a1:f6:04:ae:40:40:e4:e8:14:11:d3:63:
ad:d8:a9:78:9a:34:67:34:87:86:2b:06:a2:8e:c2:
b4:82:28:24:c0:e4:15:fc:48:13:fb:42:90:e5:57:
cf:2b:d9:71:e3:91:95:1c:84:f4:e5:62:5d:3a:d0:
8e:90:48:bc:24:af:34:a9:c6:ec:9d:f8:1b:11:7a:
d1:4b:9a:77:94:98:48:74:9b:3e:29:5b:d8:f0:a7:
0a:5e:2e:05:0f:ec:27:d9:c9:5f:2c:4a:d9:5b:9c:
08:ac:2e:4d:a3:7e:93:1c:27:66:3a:27:00:08:ef:
f7:e7:40:d0:3f:56:bc:5a:8f:34:1f:26:25:1a:e3:
e1:1c:2b:e6:05:c6:83:f0:a5:a7:ee:ee:fb:1a:68:
6e:46:d7:94:05:d2:e3:2b:ef:f3:b4:6f:bf:3c:b5:
1f:c1:55:80:d0:a7:6f:8e:8c:56:a3:aa:0a:96:8d:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C8:85:8C:E7:34:7B:99:03:04:DF:15:AE:5B:9E:61:65:B4:9D:18
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WciFjOc0e5kDBN8VrlueYWW0nRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.48.0/24
Signature Algorithm: sha256WithRSAEncryption
47:26:0b:8e:48:27:a2:49:76:34:a1:01:50:9d:9b:e5:27:82:
dd:38:a4:09:08:3e:5e:3f:31:26:57:83:06:b5:ab:b3:96:4d:
73:be:58:ac:81:d7:84:c8:79:79:4c:bf:44:ef:56:a5:df:f1:
61:5d:72:76:a7:23:be:fd:75:bd:9a:13:a0:a0:dd:d1:c8:c7:
af:f1:13:66:03:eb:f6:43:26:6e:d6:86:d8:ca:5d:0d:18:9c:
7f:3a:71:79:52:f5:76:59:a5:7b:e9:7a:bb:c5:61:3f:be:77:
84:df:36:a6:cd:5b:43:31:86:93:05:46:90:67:b9:38:33:f8:
19:07:88:e5:52:d6:fb:98:cf:f2:f2:3c:af:0c:a4:7d:f2:e6:
27:1d:98:84:08:3e:b7:d0:1e:12:1b:2b:83:6c:4d:01:4d:48:
8b:f8:49:05:3e:c0:4a:3f:b8:40:3d:36:e8:86:b2:4e:b4:50:
12:95:9f:c4:30:3a:98:79:42:77:2d:7d:eb:a8:5f:5b:b1:c4:
22:2d:41:70:5e:20:96:01:22:75:de:d2:51:2a:d0:33:40:c1:
ba:0f:09:f0:f0:90:d2:97:9c:fc:c2:aa:07:b5:82:85:43:cb:
0c:81:bd:81:bb:48:e5:19:47:00:ae:3d:e5:ef:51:d5:5e:db:
2b:68:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:08:31 2026 by rpki-client