Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/WPejSeWRFVn2HdPgDF6QSPFq6yg.roa
File: WPejSeWRFVn2HdPgDF6QSPFq6yg.roa (raw, json)
Hash identifier: n5ccdv/1u91AJTgm4qJqHv4fPAaIhORbR5ZXpWV1iIo=
Subject key identifier: 58:F7:A3:49:E5:91:15:59:F6:1D:D3:E0:0C:5E:90:48:F1:6A:EB:28
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A00148426BE3497329A1E3208B46D75593
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/WPejSeWRFVn2HdPgDF6QSPFq6yg.roa
Signing time: Fri 14 Aug 2026 17:18:27 +0000
ROA not before: Fri 14 Aug 2026 17:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218995
IP address blocks: 201.3.122.0/24 maxlen: 24
201.3.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 19:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:48:42:6b:e3:49:73:29:a1:e3:20:8b:46:d7:55:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 14 17:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58f7a349e5911559f61dd3e00c5e9048f16aeb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:b0:b4:27:79:97:ec:c4:5d:e4:fd:37:45:
3e:cc:4a:6f:c5:9e:0b:ba:a0:d0:e4:56:d6:e2:56:
07:a6:08:46:0c:9b:65:1f:98:30:d2:99:79:36:53:
f7:c7:d9:ac:a2:c9:fd:16:a8:71:36:e9:b8:c7:c2:
d6:c9:91:0f:ed:ca:b9:ce:e9:88:88:44:e0:72:17:
6e:27:b0:4c:ae:af:b3:36:ea:ca:8b:69:51:64:14:
35:e8:58:5e:48:dc:f3:fa:76:aa:7f:e4:33:22:ce:
30:39:48:f3:6f:a9:d4:99:91:53:8f:54:2e:fd:36:
7a:8a:51:e8:5c:a0:de:48:49:8c:78:ad:1b:5c:90:
e8:30:98:71:56:0e:db:e7:aa:16:c6:dc:da:5e:55:
e3:0d:48:73:ed:d1:bb:da:0b:ad:3c:94:ad:88:1f:
98:8a:82:55:13:c2:c2:e6:78:4d:2e:93:70:d0:85:
e1:6f:f4:85:94:22:da:fd:ca:80:4d:ea:7a:b9:2c:
5f:3e:38:dc:6f:2e:b1:40:25:90:4a:c2:b9:a1:b4:
a2:f0:e9:8b:24:71:15:08:d0:e9:6e:8c:1a:6f:bf:
8b:22:7c:61:39:7c:6f:b3:6f:c7:6b:ad:2c:32:14:
c8:97:0e:da:6c:43:6d:8e:93:15:fd:6b:5f:41:47:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:A3:49:E5:91:15:59:F6:1D:D3:E0:0C:5E:90:48:F1:6A:EB:28
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/WPejSeWRFVn2HdPgDF6QSPFq6yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.122.0/24
201.3.235.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:64:97:4f:33:a8:ad:e2:2e:65:50:d3:e3:e4:b7:52:15:86:
29:d3:f2:7b:ac:28:58:8e:5a:63:ff:f6:08:f5:26:fe:68:1e:
a8:6a:bf:ba:4a:d1:5e:bf:b2:0e:10:e0:eb:df:5d:c1:94:69:
c8:52:4e:9e:18:ad:a3:10:5c:0a:9c:84:c1:38:ee:43:5e:f4:
71:eb:59:9d:dd:75:04:8e:68:fb:3b:f5:60:de:37:4a:d2:cd:
69:7b:c5:0c:ad:2d:d3:90:f0:2c:67:74:aa:e2:6a:ed:8f:ef:
3e:ef:95:cb:cb:5d:c2:f5:d8:58:86:b0:bc:04:9b:3d:a1:07:
48:73:cc:5c:e1:c0:79:d7:e2:ab:c9:06:ea:a5:3f:3d:07:cb:
b0:0d:a1:11:ae:5c:9d:bf:01:2c:99:88:da:17:8e:41:f6:94:
3b:7d:6b:60:60:43:74:7f:1e:22:b2:5c:3e:74:7c:08:84:6b:
a7:f4:76:b7:7d:99:21:14:0e:28:1f:23:67:7d:b7:e2:fa:94:
c7:bf:b0:55:60:ce:bc:66:04:a1:c1:dc:37:e3:1d:30:ec:46:
31:59:0a:de:ca:82:52:69:19:74:c9:b6:f3:ea:f9:e8:3d:7b:
0f:88:33:87:6a:ad:04:5d:0e:d3:b7:bb:ee:a5:14:65:da:6d:
c8:9c:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 03:35:08 2026 by rpki-client