Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/wpcyO7qcQ5u1YrNPobhPdo0frDE.roa
File: wpcyO7qcQ5u1YrNPobhPdo0frDE.roa (raw, json)
Hash identifier: aOrrVXBWdbroo2kYtbAcmWjmWyF0bYtT9B5VTGiJ5yo=
Subject key identifier: C2:97:32:3B:BA:9C:43:9B:B5:62:B3:4F:A1:B8:4F:76:8D:1F:AC:31
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F4D9EC308A38776A5DE0447CD0D8D26CB
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/wpcyO7qcQ5u1YrNPobhPdo0frDE.roa
Signing time: Fri 10 Jul 2026 20:01:18 +0000
ROA not before: Fri 10 Jul 2026 20:01:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209735
IP address blocks: 2a06:9801:741::/48 maxlen: 48
2a06:9801:7f6::/48 maxlen: 48
2a06:9807::/48 maxlen: 48
2a06:9807:1::/48 maxlen: 48
2a06:9807:10::/44 maxlen: 44
2a06:9807:100::/40 maxlen: 44
2a06:9807:100::/44 maxlen: 44
2a06:9807:100::/46 maxlen: 46
2a06:9807:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:9e:c3:08:a3:87:76:a5:de:04:47:cd:0d:8d:26:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 10 20:01:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c297323bba9c439bb562b34fa1b84f768d1fac31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:a6:58:18:dd:63:2f:5a:75:85:b0:26:d5:
f3:17:26:22:ad:59:6a:e8:e2:51:23:93:b7:5b:cf:
03:fc:14:6b:cf:f7:7d:24:6d:ce:b8:69:02:7e:39:
fb:b1:f3:44:52:2e:dd:9c:b3:9d:d1:19:2b:cd:e7:
94:0e:57:7b:fa:22:5e:f5:f5:2f:af:5c:be:f3:6d:
d5:c3:7d:e9:7b:2a:f5:22:d6:72:99:17:ae:d8:dc:
3d:6b:44:73:12:a9:c2:50:7c:83:d6:3c:c6:0a:1a:
88:f1:b5:04:ca:49:31:a5:b7:ab:e7:9c:da:67:69:
3d:eb:6e:18:ad:9d:9e:93:cd:37:49:b1:ef:9f:6d:
72:d2:53:f8:14:5f:bb:52:7a:e2:d4:7d:a5:78:4b:
43:ec:ed:07:da:cb:05:e2:06:e3:69:1f:66:6e:4b:
9c:1e:0e:9e:0f:90:03:0c:bd:49:be:d7:ef:b3:30:
31:05:b0:08:19:93:40:92:69:ff:99:c3:37:51:60:
39:b2:c6:82:bd:89:47:f9:1c:a5:1a:a9:ec:a9:97:
01:14:e4:ed:4e:26:8b:5a:b3:53:a6:d7:13:b3:99:
8a:b5:b5:6b:7d:b1:38:48:31:a3:cf:58:d7:4f:08:
68:f8:90:c5:06:8d:72:bc:eb:83:6d:c4:67:0e:e6:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:97:32:3B:BA:9C:43:9B:B5:62:B3:4F:A1:B8:4F:76:8D:1F:AC:31
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/wpcyO7qcQ5u1YrNPobhPdo0frDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:741::/48
2a06:9801:7f6::/48
2a06:9807::/47
2a06:9807:10::/44
2a06:9807:100::/40
Signature Algorithm: sha256WithRSAEncryption
a1:16:66:d0:fa:67:26:9c:7b:16:b8:08:cd:f2:41:99:93:43:
8d:85:79:2e:c3:e0:29:76:d6:0d:b9:52:4c:69:29:48:6d:7d:
c3:7f:c8:1b:da:2b:28:3b:51:25:9b:11:00:8a:31:88:a8:36:
b3:71:c5:69:07:ed:4a:14:05:05:6a:ae:aa:e6:d4:6d:4a:53:
ea:9d:83:83:f5:b6:38:47:cb:c3:1b:23:92:92:47:e1:6a:51:
5d:8c:c4:4c:c6:4f:db:c4:2b:05:43:24:7b:48:5b:d6:2f:a1:
01:d7:0e:6b:95:a2:de:36:30:e1:6a:3c:ca:b9:66:e5:49:f4:
50:73:7e:a1:83:a0:7f:9b:24:4f:d8:59:1e:c1:c5:49:c4:bc:
20:cb:b0:c2:d5:04:ee:35:26:c8:c9:e8:90:d8:b9:31:fc:52:
44:3c:a1:e9:1f:8f:59:68:0e:6c:68:67:8d:a8:b1:f1:c2:77:
30:bb:14:bb:18:43:65:6b:1c:9d:ea:f2:be:e8:46:08:b7:86:
2f:b1:57:a5:a4:16:55:db:0a:25:1d:0a:21:60:b7:37:89:36:
eb:5b:29:64:3f:57:1b:11:8d:f8:29:b7:44:28:b6:b1:32:0d:
03:81:b1:67:4b:19:d0:4c:e5:4d:25:1d:9f:33:b5:04:16:d7:
ea:a9:66:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:37 2026 by rpki-client