Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/WObWrh1qxqjAIJFdbbp4MiLgXUI.roa
File: WObWrh1qxqjAIJFdbbp4MiLgXUI.roa (raw, json)
Hash identifier: lVhgHB9c0I13TXQ+I0HDDlPJ2sYG66BAHVl20xtcAlE=
Subject key identifier: 58:E6:D6:AE:1D:6A:C6:A8:C0:20:91:5D:6D:BA:78:32:22:E0:5D:42
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368EA31799F2AAAF539E8DA172EA4DA
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/WObWrh1qxqjAIJFdbbp4MiLgXUI.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35632
IP address blocks: 77.84.0.0/16 maxlen: 16
87.100.0.0/17 maxlen: 17
188.141.128.0/17 maxlen: 17
2a00:7180::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ea:31:79:9f:2a:aa:f5:39:e8:da:17:2e:a4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58e6d6ae1d6ac6a8c020915d6dba783222e05d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:c9:65:ac:ac:79:4c:5b:64:5f:30:7d:20:
75:45:a3:df:d5:f1:96:6c:e2:f7:d9:ca:36:cf:cf:
7d:c3:98:4b:0f:28:59:78:5f:d4:25:14:05:9a:63:
d6:8b:ad:f8:53:3e:fd:83:ce:12:27:b6:fe:d6:6a:
e7:fa:8b:41:6d:18:77:5c:d9:de:7d:aa:df:7b:e2:
a1:1a:b3:09:4e:c0:cb:66:c2:04:da:47:aa:64:1a:
af:e5:4f:0d:a5:59:53:d3:13:74:49:e2:e0:56:17:
3e:d0:af:d1:78:fb:d3:dc:d8:a3:8c:a9:db:13:8f:
6c:41:cc:4e:65:f3:4a:27:b1:f2:97:3d:d7:42:bf:
6a:7f:cf:46:64:b0:c2:a4:7b:b6:78:79:2e:44:b2:
63:63:a2:25:dd:cb:78:5f:0f:6e:6b:64:5a:ec:4d:
fe:74:71:65:e8:43:6f:0f:79:53:d5:50:22:ab:28:
1f:d0:15:de:df:86:53:b7:7d:11:2c:b7:e8:bf:ba:
d6:7c:02:1d:64:40:c5:55:25:95:be:ba:61:08:cf:
a1:f8:54:3d:76:ea:ff:81:fe:a2:ea:79:4e:fd:fe:
ec:fc:9a:5a:49:5e:5e:f4:28:46:33:67:0d:79:5f:
2b:40:69:d3:47:d3:b8:12:1d:e8:09:28:e1:ee:bc:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:D6:AE:1D:6A:C6:A8:C0:20:91:5D:6D:BA:78:32:22:E0:5D:42
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/WObWrh1qxqjAIJFdbbp4MiLgXUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.84.0.0/16
87.100.0.0/17
188.141.128.0/17
IPv6:
2a00:7180::/46
Signature Algorithm: sha256WithRSAEncryption
4b:15:7e:5f:ef:90:ed:f3:5c:96:18:95:fa:a0:76:d0:f3:d5:
c7:76:64:a1:bc:c9:4c:8d:09:d0:24:7b:48:a6:e0:a0:e8:8a:
cf:9b:0f:44:12:58:8f:3e:8a:1c:b7:24:1e:ca:4e:72:3e:a8:
03:6f:0b:25:cf:7c:d2:62:14:f3:82:0d:b4:a1:75:7a:6c:a4:
d9:17:9b:ef:e7:40:6a:e2:a1:b4:11:35:09:14:b0:71:e0:ad:
ba:2c:30:d1:dd:4d:3a:93:79:1a:77:0e:cf:6c:6f:ff:ef:d0:
0f:b2:f3:1d:5c:f3:33:e8:82:9d:17:14:a1:53:05:b2:d0:0b:
76:d7:90:71:ea:8f:0a:51:f9:72:7b:7f:50:28:07:60:93:40:
0b:32:0a:94:15:3d:2a:df:5e:45:27:84:87:4e:20:da:08:93:
8a:c6:40:3a:6f:ba:ef:ad:23:6d:e0:9f:6e:b0:ff:70:c2:9e:
b9:38:57:ce:d8:7c:a5:b5:93:df:99:e5:ad:a3:06:db:c9:1f:
4c:fe:10:a1:fc:92:5a:94:77:4f:96:27:11:cd:38:6b:17:99:
11:0e:c7:e0:60:0f:e9:d4:ab:37:5c:cc:8c:1a:ba:91:70:9b:
0e:02:b0:0a:53:0a:2b:dc:52:81:04:8f:c9:f9:c8:8d:80:82:
0d:95:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:39 2026 by rpki-client