Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/WgQuMuWG6iqKymtrS7RKG4E8Phc.roa
File: WgQuMuWG6iqKymtrS7RKG4E8Phc.roa (raw, json)
Hash identifier: 78zxzl+OYIQ0w8bGR6z2jgwELspOuErm4/++owpQ92k=
Subject key identifier: 5A:04:2E:32:E5:86:EA:2A:8A:CA:6B:6B:4B:B4:4A:1B:81:3C:3E:17
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019FD1772C692A72B9EB027A32DCED21C007
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/WgQuMuWG6iqKymtrS7RKG4E8Phc.roa
Signing time: Wed 05 Aug 2026 10:27:55 +0000
ROA not before: Wed 05 Aug 2026 10:27:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 81.29.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:77:2c:69:2a:72:b9:eb:02:7a:32:dc:ed:21:c0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 5 10:27:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a042e32e586ea2a8aca6b6b4bb44a1b813c3e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:db:6e:1a:4c:6b:65:00:51:47:55:80:0f:
43:58:63:c5:e7:49:0e:49:21:97:24:7c:ca:96:e0:
f6:af:d0:e4:a8:b5:f9:62:12:70:b1:37:a6:ec:6d:
9c:ed:db:86:c6:e5:15:37:6a:51:da:e1:37:f0:ac:
fd:a8:d9:25:46:e8:62:88:2e:04:b9:4b:67:29:bf:
b7:04:40:c6:87:23:a6:74:38:c6:b4:a9:02:3f:bc:
57:09:6d:08:2d:bc:4e:dd:be:7a:04:15:59:e5:ec:
90:01:20:56:ae:d5:1c:23:34:8e:f4:48:e0:ad:b3:
7e:c9:fb:78:f9:2c:fd:83:7a:fe:01:33:8b:95:05:
aa:e3:f2:2c:84:a1:c5:dd:d6:75:15:02:0d:1c:f8:
09:1e:a2:14:1f:8f:2b:2a:fa:84:f9:8e:9f:2a:29:
8d:65:2f:8f:3e:64:ed:a7:32:63:64:5f:51:0c:b0:
67:07:22:8a:33:8c:10:4c:0a:56:e4:34:f1:c0:90:
1b:1c:16:1c:24:6a:d6:0f:e2:2a:da:da:09:57:99:
e7:a0:eb:5b:5e:f6:fd:42:ab:8f:81:31:f3:3d:96:
91:d9:ae:fb:9d:af:39:d4:de:a2:2e:34:6e:ea:c2:
f8:c7:c5:15:1e:5f:d6:db:70:35:bf:c1:65:de:93:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:04:2E:32:E5:86:EA:2A:8A:CA:6B:6B:4B:B4:4A:1B:81:3C:3E:17
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/WgQuMuWG6iqKymtrS7RKG4E8Phc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.38.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9f:7b:b6:20:27:2c:62:d9:32:1f:16:e7:88:74:a4:2c:ed:
c9:b1:69:5d:9f:30:97:b9:f5:c8:4b:ef:14:86:b4:f2:63:94:
e5:f8:4f:a8:46:09:18:f0:e8:51:65:a0:33:0c:e4:e6:77:e2:
13:2b:16:f0:ec:18:5d:d9:db:ef:ab:ad:b3:a6:77:89:5c:20:
72:55:f3:b6:bc:2a:a1:69:73:c6:59:b0:86:d7:3c:5d:f2:54:
79:b0:1c:cc:40:8e:af:29:4d:49:93:14:9f:14:7b:27:83:e9:
59:de:36:32:64:9f:72:fc:7f:d2:67:5f:d0:c6:07:52:52:06:
25:61:f9:08:7b:e5:c7:98:6a:9a:be:ec:d0:4c:5b:2f:10:a1:
9b:b6:4e:1e:6b:2c:c4:72:3c:27:b6:36:de:10:65:14:73:b1:
06:26:2c:0f:67:9a:c6:6f:94:65:60:84:b9:cb:8b:46:6b:d5:
df:ae:69:7f:3c:6e:37:13:a6:90:b2:3e:c6:d7:9d:26:55:f5:
bd:7c:b8:4d:4f:86:75:4d:79:a2:31:7e:c8:cc:ac:73:eb:0b:
39:33:f9:14:27:c9:48:5b:96:5c:cd:74:c3:4c:54:53:4d:a8:
1f:5d:3c:94:66:dc:43:98:63:12:bf:14:02:aa:01:0a:6b:6b:
b1:07:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:54 2026 by rpki-client