Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WFhkMUSeUZ-E-j4Abw-XEdLSE3I.roa
File: WFhkMUSeUZ-E-j4Abw-XEdLSE3I.roa (raw, json)
Hash identifier: aqoes+8bvs9X/Bpiri1vTFw/AWaC0KyFhI+vVOJgWig=
Subject key identifier: 58:58:64:31:44:9E:51:9F:84:FA:3E:00:6F:0F:97:11:D2:D2:13:72
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F21A8960300957C80E81293432A81CA66
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WFhkMUSeUZ-E-j4Abw-XEdLSE3I.roa
Signing time: Thu 02 Jul 2026 07:08:44 +0000
ROA not before: Thu 02 Jul 2026 07:08:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402644
IP address blocks: 147.90.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:a8:96:03:00:95:7c:80:e8:12:93:43:2a:81:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 2 07:08:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58586431449e519f84fa3e006f0f9711d2d21372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:b9:cf:a0:e9:a0:1b:be:39:9d:65:f9:7c:
32:67:91:83:d1:cf:7c:41:a3:38:96:09:07:9f:24:
c6:ac:49:ba:14:9a:db:e4:1b:42:64:cb:31:9e:c9:
83:84:61:e6:97:a0:b0:2d:af:37:26:6e:e6:ee:a5:
ad:6a:60:19:fd:a5:c3:79:9c:64:f6:ec:c4:2f:1d:
7d:b7:92:13:36:6b:eb:32:69:81:b2:92:a7:56:45:
68:5d:87:6e:e3:70:5d:ec:3c:c0:3f:8f:c2:e5:44:
81:24:65:ec:a1:65:7e:0c:f6:e5:19:dc:86:7a:36:
04:d4:1c:3c:f6:ea:eb:cf:d9:31:8c:42:b0:7b:5b:
7b:08:87:41:77:f4:8d:d9:ee:c5:75:3b:b2:c8:f1:
36:f2:f4:f6:7f:e1:09:61:09:0b:4c:c2:9b:2c:83:
9e:03:86:05:94:65:67:4e:88:67:60:5e:bd:53:d2:
06:9e:41:fb:9e:0d:e1:19:38:16:75:3e:70:19:94:
4d:bf:86:a6:c2:8a:21:97:83:1e:a7:cd:47:42:22:
22:89:0a:42:ce:48:b7:97:10:18:c7:8f:0e:5d:3a:
4e:68:0b:7d:4d:ee:93:14:3a:aa:4e:84:30:df:af:
58:95:4b:2d:cf:fd:27:22:e4:62:78:2d:48:52:1e:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:64:31:44:9E:51:9F:84:FA:3E:00:6F:0F:97:11:D2:D2:13:72
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WFhkMUSeUZ-E-j4Abw-XEdLSE3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.20.0/24
Signature Algorithm: sha256WithRSAEncryption
80:dd:43:b2:f2:19:c5:a2:79:12:6c:d4:02:1a:32:0b:3b:28:
3b:98:03:cf:29:50:35:ea:d6:72:b5:6d:33:0e:eb:84:2d:cb:
79:28:a2:86:09:e5:20:1f:05:0b:34:70:a2:c9:30:77:44:df:
db:12:ba:84:58:d0:24:f3:f7:fe:78:fc:6a:c0:cf:15:47:cf:
49:0e:bd:26:6e:88:09:71:88:1c:5b:55:69:70:b7:d3:9b:dd:
7e:54:20:3a:a7:2b:58:ca:4f:4b:60:f3:8f:0d:75:0a:70:0e:
4d:f3:06:cc:9f:02:43:80:5d:d8:ba:52:29:c0:27:32:4b:ad:
2d:13:79:5e:cf:02:63:d4:99:6a:2e:d1:62:7c:b7:a6:38:6b:
4b:28:12:77:8b:f2:69:f2:52:c5:d3:51:1a:2c:94:79:ff:ac:
d8:e1:30:e6:07:30:f1:e2:7f:cb:cf:c5:dd:4a:51:63:7b:ca:
1a:de:8b:e2:b8:68:5d:6c:e8:99:23:bf:fc:37:46:0d:1d:d8:
6a:43:b4:dc:b8:26:5c:51:20:d1:32:65:81:6f:01:5d:a6:34:
f1:1a:b2:d1:d1:6b:7a:1c:5f:26:d7:7b:b8:89:3b:55:07:e9:
7b:75:4e:24:80:31:12:89:8e:c4:ab:98:4a:9a:5c:57:31:c1:
3b:c6:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:50 2026 by rpki-client