Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/WgMy8RPl49vgB--mDn-Eq1inbPo.roa
File: WgMy8RPl49vgB--mDn-Eq1inbPo.roa (raw, json)
Hash identifier: NbrZpHlbGY0qW9chBObDbfWMbCJRPGbKCe4BCUMcS10=
Subject key identifier: 5A:03:32:F1:13:E5:E3:DB:E0:07:EF:A6:0E:7F:84:AB:58:A7:6C:FA
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A0F69732519443987A0BECECE20F52A401
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/WgMy8RPl49vgB--mDn-Eq1inbPo.roa
Signing time: Thu 01 Oct 2026 08:31:38 +0000
ROA not before: Thu 01 Oct 2026 08:31:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 194.67.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:97:32:51:94:43:98:7a:0b:ec:ec:e2:0f:52:a4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Oct 1 08:31:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a0332f113e5e3dbe007efa60e7f84ab58a76cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:04:b1:da:bb:98:73:8f:18:d3:61:1e:4b:f7:
eb:32:a3:7c:8b:e9:c7:4e:01:63:5a:92:86:81:97:
89:93:6b:4e:d8:99:02:bd:a6:75:22:b6:37:70:bd:
4a:84:d2:69:56:fe:a4:a2:22:40:f5:4b:b8:1e:89:
4e:45:18:5c:b6:4f:6e:ff:7d:78:2c:b6:dc:63:05:
10:bf:87:df:dd:e8:43:02:e7:01:d2:7e:f3:a2:8a:
53:2c:4f:29:41:03:8f:c3:7d:1e:ca:54:cf:7e:c0:
a2:44:0a:74:76:eb:0b:87:8d:fe:19:f7:36:fa:ab:
0f:17:ef:49:3b:6e:b6:d2:59:c1:0b:34:e8:4f:1f:
89:21:93:d0:7c:88:19:a9:f3:7c:c2:cc:61:4e:f2:
4c:eb:af:d7:ba:c2:6a:dd:ee:e5:db:bd:c9:2d:06:
90:a6:96:30:72:15:e5:23:9c:f6:be:f5:5b:a9:0a:
f4:a6:09:e9:d6:ec:49:b9:c5:3a:be:43:ba:9d:0b:
d6:15:40:74:41:8c:5f:37:b4:ec:c2:b1:a8:77:fe:
ad:d9:af:2f:64:b9:4f:90:9b:1d:ae:80:f7:8f:0e:
5a:9e:6e:92:53:95:b7:b1:9a:a3:d0:b4:91:ee:1e:
80:0a:72:84:ee:d9:ce:77:cf:34:3a:2f:c2:af:8a:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:32:F1:13:E5:E3:DB:E0:07:EF:A6:0E:7F:84:AB:58:A7:6C:FA
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/WgMy8RPl49vgB--mDn-Eq1inbPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.192.0/24
Signature Algorithm: sha256WithRSAEncryption
81:95:3b:d3:2d:bd:7a:f4:5c:55:d4:ec:33:88:bb:cd:79:cf:
73:03:f6:7d:f0:ea:80:ae:0b:cd:e6:4a:cc:a8:fc:3f:a0:78:
ef:46:ca:9b:9f:3b:34:06:bf:39:e6:87:f6:42:3e:65:ee:00:
19:68:d1:66:3c:7a:19:e5:3c:08:ee:57:53:00:bb:e2:41:37:
71:2f:49:6a:8d:64:b8:5a:be:22:c5:14:89:b0:68:c5:cc:c2:
65:f0:f1:ee:b6:3c:a8:a7:8e:61:7f:2b:9c:74:21:d8:93:96:
9f:bc:bf:c0:d4:b3:61:ce:67:cc:90:7a:20:16:c1:ed:53:eb:
ed:21:ee:79:f6:d7:86:cc:b7:dc:02:cd:9b:e9:d8:dd:46:eb:
f4:43:7c:26:cd:d4:cf:ff:e3:2c:ee:5c:37:35:aa:01:e1:9e:
3b:09:c7:3f:9e:1c:74:d6:91:3d:04:81:4d:bb:7e:95:43:95:
c2:96:91:f5:a0:09:19:04:8a:be:13:e3:70:6e:07:cb:99:b4:
c0:8e:7a:07:c8:b9:b5:9d:9d:33:3e:ce:66:a6:75:60:c7:23:
55:08:e4:71:48:d4:c2:c2:8a:2b:20:b8:e5:49:11:78:db:a0:
0f:49:b1:76:7f:cd:44:f9:ed:04:2c:8c:8b:81:7a:27:2b:b3:
10:89:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:57 2026 by rpki-client