Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/WC4Z_Z8JY7_CbdM-90rFv4GDZcg.roa
File: WC4Z_Z8JY7_CbdM-90rFv4GDZcg.roa (raw, json)
Hash identifier: lu48g8sv/j3NBIfEfl8ZkMIWTwIWz7nL4AvZAMT3cbs=
Subject key identifier: 58:2E:19:FD:9F:09:63:BF:C2:6D:D3:3E:F7:4A:C5:BF:81:83:65:C8
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019F76C2EE3ECA075DF13E8A7CD4FE62992E
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/WC4Z_Z8JY7_CbdM-90rFv4GDZcg.roa
Signing time: Sat 18 Jul 2026 19:45:14 +0000
ROA not before: Sat 18 Jul 2026 19:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 194.62.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:c2:ee:3e:ca:07:5d:f1:3e:8a:7c:d4:fe:62:99:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jul 18 19:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=582e19fd9f0963bfc26dd33ef74ac5bf818365c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:6c:19:bc:c1:5d:1d:f3:95:78:ff:74:4e:
53:ad:df:ae:61:7b:4c:f0:d3:a4:49:19:1b:4b:65:
7a:f1:6b:bb:4c:5a:e0:68:d0:0c:4f:be:6b:cb:71:
2f:81:46:57:53:67:6c:2d:11:bf:fb:9d:b4:ed:27:
f7:b6:25:f7:f7:98:c3:71:d3:18:da:99:ec:48:c1:
74:17:b4:42:c9:31:d3:ad:0b:b8:24:50:51:8c:f9:
57:96:4f:db:08:42:7b:27:2f:36:bf:cb:ab:92:1f:
bf:bd:0a:91:06:f4:a9:1d:a9:44:ab:db:9b:b2:1f:
63:0b:c9:a3:20:f9:ea:56:68:4f:2b:39:e2:75:fd:
14:2d:55:7e:19:23:04:45:ce:d3:56:09:ec:a6:7f:
ae:c5:47:11:0b:df:ac:b9:af:61:30:37:e6:7e:b5:
67:d6:60:94:a3:4d:3c:5b:6b:09:b3:26:91:60:47:
65:02:f7:00:23:df:4e:d9:38:95:8a:16:1a:04:2c:
75:f6:be:55:a1:9f:9b:2f:fd:23:72:3a:87:90:f1:
78:6f:f2:4b:4f:94:69:4a:7a:42:b1:dd:06:88:cb:
6b:ce:48:f8:ad:c6:fc:bc:06:5b:18:09:17:2c:10:
08:48:87:4f:f8:05:d8:e0:be:29:ac:2c:e5:bd:ff:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:19:FD:9F:09:63:BF:C2:6D:D3:3E:F7:4A:C5:BF:81:83:65:C8
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/WC4Z_Z8JY7_CbdM-90rFv4GDZcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8a:22:0c:38:33:43:58:1f:a3:73:58:de:7a:6a:69:3c:12:
e7:9d:b6:02:05:3f:78:df:e4:27:54:67:b3:c4:7b:0f:f6:ee:
8a:44:e9:b1:26:b8:f9:59:94:f4:3d:d7:a9:f4:01:47:ae:73:
7d:e4:25:b5:e4:25:eb:ec:8e:fd:7e:c8:ad:7d:0f:8f:1a:01:
6a:ed:33:cd:2e:d3:7d:17:29:8c:56:e2:e3:48:10:a3:93:05:
20:01:51:b4:19:5a:b6:36:8b:53:7b:e9:c1:50:31:3b:0a:35:
66:06:c7:46:bb:ec:48:b8:ab:39:68:bf:bb:9f:3f:09:d1:26:
ed:98:0e:27:57:36:6f:75:f4:fc:c1:8b:be:54:1f:69:52:67:
7a:51:6a:db:18:34:e5:bc:16:1c:ba:3a:1f:87:31:f3:92:77:
0f:e3:48:cb:30:9f:2b:79:0a:03:d7:03:43:d0:ee:79:fc:b5:
4d:9d:9f:7e:2b:b5:3a:a0:60:13:03:70:2f:bc:68:9c:b1:62:
a6:e4:29:63:cd:51:37:6e:08:15:53:70:70:67:7d:2d:b3:26:
1d:ca:85:5d:7e:d2:33:94:3f:5e:09:49:6a:2e:e5:2b:33:6a:
be:ca:13:02:3c:d5:94:94:3f:18:0b:b4:5e:62:54:72:ce:d0:
4f:9c:f1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:37 2026 by rpki-client