Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/WKQd_XI9jasbcvH0YlvhQLMhE5A.roa
File: WKQd_XI9jasbcvH0YlvhQLMhE5A.roa (raw, json)
Hash identifier: MurctqyZkA5732PmSwI/xARByexgnQrnz5ORl5ooO8w=
Subject key identifier: 58:A4:1D:FD:72:3D:8D:AB:1B:72:F1:F4:62:5B:E1:40:B3:21:13:90
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 019EA117C4E85CE4709EB0F56692F2701572
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/WKQd_XI9jasbcvH0YlvhQLMhE5A.roa
Signing time: Sun 07 Jun 2026 07:59:09 +0000
ROA not before: Sun 07 Jun 2026 07:59:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62415
IP address blocks: 77.232.121.0/24 maxlen: 24
82.197.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:17:c4:e8:5c:e4:70:9e:b0:f5:66:92:f2:70:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Jun 7 07:59:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58a41dfd723d8dab1b72f1f4625be140b3211390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:0c:0a:9f:dc:40:9d:6d:98:0e:ff:b7:d3:
79:5f:31:e8:85:0b:e8:48:8a:7e:80:86:6b:62:34:
7b:d3:73:b8:13:e3:21:51:7d:6a:bf:28:dc:1a:1d:
64:13:e9:76:0f:28:ac:9f:3c:5f:ea:67:6d:89:69:
74:03:e4:8c:25:68:ba:35:11:3d:32:8d:b3:19:10:
8c:03:3c:c4:e2:d3:23:f2:2c:d2:cf:3f:f7:2a:e5:
05:02:82:15:69:06:d6:1a:8a:81:91:08:35:f8:f6:
a7:77:3a:ab:ab:04:91:8a:07:13:c6:0b:a2:57:12:
31:5e:44:1f:a1:1f:98:9f:6c:57:82:48:d4:80:8a:
9e:4e:b2:67:1f:cd:64:7f:ca:a8:cc:b6:80:7f:9f:
51:77:26:bb:4c:d9:ca:6e:eb:1e:58:a8:48:e8:ac:
88:ea:ea:fe:47:8e:5e:3c:3a:2f:f0:54:d4:5f:f5:
33:57:a1:df:db:1b:39:30:7a:23:a6:0b:b6:3b:f7:
29:66:a2:0e:e7:5c:f8:17:88:c4:e4:de:8c:16:c6:
45:65:51:40:c2:75:56:cf:f1:f2:3f:54:5f:ec:82:
9a:a7:0e:a7:94:b3:d4:9a:28:aa:fd:47:9b:cb:a7:
18:6f:7e:51:f0:f3:bf:a6:66:52:71:64:b8:8c:b5:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A4:1D:FD:72:3D:8D:AB:1B:72:F1:F4:62:5B:E1:40:B3:21:13:90
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/WKQd_XI9jasbcvH0YlvhQLMhE5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.121.0/24
82.197.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:15:d1:c3:59:fa:56:c2:ae:25:71:60:66:51:16:88:b4:8d:
f4:da:0e:19:37:f8:a3:28:b2:13:56:8b:0f:2e:f9:02:1f:5c:
36:63:9e:87:46:24:db:19:23:03:4c:ad:01:e8:30:f9:7e:9f:
46:db:b6:c5:be:d7:ab:3f:45:75:6c:39:cf:47:a2:a7:45:95:
34:97:e7:53:77:3b:4f:f5:d7:02:56:b3:8a:fc:65:f8:57:10:
bf:64:e2:19:d2:35:09:d3:a8:6b:36:1f:ca:3b:2f:7d:c9:5c:
0c:fd:e7:1a:b3:fd:cc:fc:09:67:c6:e9:8b:a8:61:a2:6f:42:
70:7f:ef:a6:52:18:32:88:05:e7:42:3b:2e:e3:b2:86:ce:a7:
7c:90:5f:b5:0b:01:7d:6f:d0:0a:19:3b:75:3f:26:88:74:6a:
56:8c:0e:c4:58:b0:c5:57:d1:3e:2f:bb:85:61:4a:8b:37:e9:
5f:84:8a:a2:d0:87:94:a9:e1:4a:e4:df:72:58:3a:a3:a8:2d:
91:d8:f9:50:b9:21:ee:73:4c:28:99:49:b7:65:9e:93:44:1d:
96:10:3b:df:35:d2:0f:7d:15:23:3d:fe:05:ba:6d:0f:23:81:
2a:3f:41:ab:b2:05:09:0a:22:1d:e3:5a:38:fb:12:b2:56:8e:
a5:6e:76:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6hF8ToXORwnrD1ZpLycBVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzFiMTQ3ZWI4NzM3YWJjYzMzNWY4MDIwOTUxYjI1ZmYy
NjU2YTYwHhcNMjYwNjA3MDc1OTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGE0MWRmZDcyM2Q4ZGFiMWI3MmYxZjQ2MjViZTE0MGIzMjExMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw4MCp/cQJ1tmA7/t9N5XzHohQvo
SIp+gIZrYjR703O4E+MhUX1qvyjcGh1kE+l2Dyisnzxf6mdtiWl0A+SMJWi6NRE9
Mo2zGRCMAzzE4tMj8izSzz/3KuUFAoIVaQbWGoqBkQg1+PandzqrqwSRigcTxgui
VxIxXkQfoR+Yn2xXgkjUgIqeTrJnH81kf8qozLaAf59Rdya7TNnKbuseWKhI6KyI
6ur+R45ePDov8FTUX/UzV6Hf2xs5MHojpgu2O/cpZqIO51z4F4jE5N6MFsZFZVFA
wnVWz/HyP1Rf7IKapw6nlLPUmiiq/Ueby6cYb35R8PO/pmZScWS4jLUF3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFikHf1yPY2rG3Lx9GJb4UCzIROQMB8GA1UdIwQY
MBaAFExxsUfrhzerzDNfgCCVGyX/JlamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMt
MDcxYjk5MWFmMDFmLzEvV0tRZF9YSTlqYXNiY3ZIMFlsdmhRTE1oRTVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMtMDcxYjk5MWFmMDFm
LzEvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATeh5AwQA
UsU0MA0GCSqGSIb3DQEBCwUAA4IBAQBOFdHDWfpWwq4lcWBmURaItI302g4ZN/ij
KLITVosPLvkCH1w2Y56HRiTbGSMDTK0B6DD5fp9G27bFvterP0V1bDnPR6KnRZU0
l+dTdztP9dcCVrOK/GX4VxC/ZOIZ0jUJ06hrNh/KOy99yVwM/ecas/3M/AlnxumL
qGGib0Jwf++mUhgyiAXnQjsu47KGzqd8kF+1CwF9b9AKGTt1PyaIdGpWjA7EWLDF
V9E+L7uFYUqLN+lfhIqi0IeUqeFK5N9yWDqjqC2R2PlQuSHuc0womUm3ZZ6TRB2W
EDvfNdIPfRUjPf4Fum0PI4EqP0GrsgUJCiId41o4+xKyVo6lbnYA
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:00:26 2026 by rpki-client