Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/WeNyINJSgLqa7bXHQ48PX9cARjM.roa
File: WeNyINJSgLqa7bXHQ48PX9cARjM.roa (raw, json)
Hash identifier: KFFp3j/LsQG/Pk/dtQsAuP/dNWWqSi0a89m2WwK1TEs=
Subject key identifier: 59:E3:72:20:D2:52:80:BA:9A:ED:B5:C7:43:8F:0F:5F:D7:00:46:33
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A046F7D59CEC16A374B4F515789737BA77
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/WeNyINJSgLqa7bXHQ48PX9cARjM.roa
Signing time: Fri 28 Aug 2026 06:04:02 +0000
ROA not before: Fri 28 Aug 2026 06:04:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218956
IP address blocks: 201.3.234.0/24 maxlen: 24
201.3.236.0/24 maxlen: 24
201.7.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:46:f7:d5:9c:ec:16:a3:74:b4:f5:15:78:97:37:ba:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 28 06:04:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59e37220d25280ba9aedb5c7438f0f5fd7004633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:02:25:2d:9f:b1:d2:43:79:df:cc:d8:ff:
af:8a:41:c7:1e:83:94:97:b3:0c:68:0d:08:44:f3:
63:72:cc:e7:08:c4:c0:9c:3a:eb:0f:19:12:3e:63:
fe:d5:60:ce:ac:5b:4b:9c:61:4b:e6:02:9d:e4:2a:
6d:3c:27:23:6b:cc:c4:25:e2:a2:2c:7f:61:d0:3e:
dc:3b:0c:9b:0a:5b:8b:9e:2e:0d:b6:4f:32:e8:76:
ab:1c:f3:00:2b:8d:39:70:7f:1d:a7:22:fc:22:4e:
09:0c:3f:3a:2d:0d:9d:ce:b7:cb:ab:02:7c:21:88:
28:4a:e1:f1:c5:84:a8:33:09:ee:71:72:a5:48:27:
bd:07:fe:2c:85:88:86:10:d5:40:ea:da:13:42:56:
da:77:f3:63:14:80:7c:96:7e:0a:cb:8d:ed:a5:93:
69:b5:d3:78:ab:60:9d:eb:21:2e:48:17:cd:5b:19:
4a:98:75:32:70:50:bb:72:18:bc:c5:95:9d:23:d7:
4a:32:2b:2f:66:e9:9a:b0:55:f9:85:d0:0d:aa:f0:
c9:80:f7:cd:bb:2b:15:b4:28:60:a6:12:de:f9:a1:
75:a7:d3:4e:ae:0d:16:dc:d1:28:4a:2b:5e:47:e9:
50:fb:78:0d:dc:a5:48:02:e4:4e:6f:12:f3:39:14:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:72:20:D2:52:80:BA:9A:ED:B5:C7:43:8F:0F:5F:D7:00:46:33
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/WeNyINJSgLqa7bXHQ48PX9cARjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.234.0/24
201.3.236.0/24
201.7.18.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ca:0d:88:88:1b:bf:90:ce:3d:ac:a5:b5:cb:8c:b8:81:69:
7d:f0:82:9c:1e:90:0b:f8:c8:3c:e3:f3:65:8c:50:ec:7c:14:
1d:77:5b:eb:d5:f3:e6:79:32:88:1f:ea:ad:72:41:60:19:8e:
4d:d8:4f:76:9f:f5:f7:cb:32:93:7a:51:96:3f:ab:ec:08:2e:
57:3f:6e:b7:a5:16:49:97:56:dc:8c:37:44:46:98:b6:79:a8:
71:37:63:40:0f:90:e7:6d:ea:64:0d:cc:16:cb:a8:ea:17:5b:
d4:55:ef:89:69:fe:2d:01:f8:4f:5b:cc:c5:44:2c:3d:e2:1a:
02:36:a6:50:8b:0a:0a:85:47:17:79:e0:ac:8d:df:e2:67:64:
aa:f3:3a:19:fc:f4:b8:38:e7:3f:13:1b:19:de:a4:3c:cf:15:
67:5a:35:7b:e5:73:4a:eb:66:7d:f6:0d:80:9f:5c:fd:66:dd:
4c:c2:51:c2:44:ec:0c:34:40:79:44:95:3a:60:de:8d:fc:f9:
28:ea:66:43:01:1b:34:f6:ff:2f:0e:9b:e6:7e:b2:63:15:3a:
7d:f3:dd:4a:2f:2b:3a:8a:5b:02:f9:44:0f:9c:fb:2a:ea:6e:
d3:a6:71:7f:d1:fd:76:82:bd:e8:98:c7:c7:82:96:9e:b6:46:
65:03:cc:07
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBG99Wc7BajdLT1FXiXN7p3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwODI4MDYwNDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWUzNzIyMGQyNTI4MGJhOWFlZGI1Yzc0MzhmMGY1ZmQ3MDA0NjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBUCJS2fsdJDed/M2P+vikHHHoOU
l7MMaA0IRPNjcsznCMTAnDrrDxkSPmP+1WDOrFtLnGFL5gKd5CptPCcja8zEJeKi
LH9h0D7cOwybCluLni4Ntk8y6HarHPMAK405cH8dpyL8Ik4JDD86LQ2dzrfLqwJ8
IYgoSuHxxYSoMwnucXKlSCe9B/4shYiGENVA6toTQlbad/NjFIB8ln4Ky43tpZNp
tdN4q2Cd6yEuSBfNWxlKmHUycFC7chi8xZWdI9dKMisvZumasFX5hdANqvDJgPfN
uysVtChgphLe+aF1p9NOrg0W3NEoSiteR+lQ+3gN3KVIAuRObxLzORQ89QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFnjciDSUoC6mu21x0OPD1/XAEYzMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvV2VOeUlOSlNnTHFhN2JYSFE0OFBYOWNBUmpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAyQPqAwQA
yQPsAwQAyQcSMA0GCSqGSIb3DQEBCwUAA4IBAQB4yg2IiBu/kM49rKW1y4y4gWl9
8IKcHpAL+Mg84/NljFDsfBQdd1vr1fPmeTKIH+qtckFgGY5N2E92n/X3yzKTelGW
P6vsCC5XP263pRZJl1bcjDdERpi2eahxN2NAD5DnbepkDcwWy6jqF1vUVe+Jaf4t
AfhPW8zFRCw94hoCNqZQiwoKhUcXeeCsjd/iZ2Sq8zoZ/PS4OOc/ExsZ3qQ8zxVn
WjV75XNK62Z99g2An1z9Zt1MwlHCROwMNEB5RJU6YN6N/Pko6mZDARs09v8vDpvm
frJjFTp9891KLys6ilsC+UQPnPsq6m7TpnF/0f12gr3omMfHgpaetkZlA8wH
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:54 2026 by rpki-client