Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/WnIgFqDUtt5MOFYPPxGh5mG_FSA.roa
File: WnIgFqDUtt5MOFYPPxGh5mG_FSA.roa (raw, json)
Hash identifier: x54UNNX5k2mt5behlKnqsueUS0vpAx/Jev9aIjgXAdg=
Subject key identifier: 5A:72:20:16:A0:D4:B6:DE:4C:38:56:0F:3F:11:A1:E6:61:BF:15:20
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 019DA20E034713A2BAECA81D8446D4674CCF
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/WnIgFqDUtt5MOFYPPxGh5mG_FSA.roa
Signing time: Sat 18 Apr 2026 19:25:20 +0000
ROA not before: Sat 18 Apr 2026 19:25:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 195.38.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:0e:03:47:13:a2:ba:ec:a8:1d:84:46:d4:67:4c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Apr 18 19:25:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a722016a0d4b6de4c38560f3f11a1e661bf1520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:48:c7:fe:6d:f5:33:13:be:bf:bf:76:6d:01:
f6:4a:be:1f:d3:81:43:0f:e1:a7:17:3f:43:2c:ac:
4b:04:42:1a:6b:26:94:48:2c:ee:4e:e8:5f:5e:1b:
e5:e0:7c:d6:0f:71:bd:2a:d1:b7:13:f9:92:2b:1b:
70:61:5f:d5:10:58:cb:41:b1:b9:31:f3:43:d2:69:
74:b0:fb:55:cd:75:33:fd:b5:25:32:19:cb:32:01:
af:aa:7c:77:80:a2:c8:7e:ed:1a:5c:2c:e1:d1:8c:
94:39:25:99:14:ec:f9:26:db:bf:90:5b:ba:51:84:
5b:dc:58:88:60:e1:78:1a:a2:96:9e:05:9f:8f:a1:
cd:84:a1:34:c2:f5:bb:88:0a:fc:4b:1f:4f:f0:79:
61:8e:35:2f:ea:32:10:93:8c:50:53:c7:7b:3e:f9:
c3:f0:a3:f5:98:1a:75:83:a7:ee:94:27:4c:90:e7:
b1:52:f9:bb:71:cc:63:55:7a:7c:09:f3:8f:40:57:
db:74:dc:54:2c:95:2a:fc:ef:f6:f1:a4:64:24:fe:
d4:57:ed:f6:f5:69:b6:b2:ec:09:c3:96:2f:0e:fb:
6a:7b:6f:3c:34:24:48:18:0d:81:31:f6:2c:ec:e1:
74:ad:7d:24:75:56:ee:8b:3f:cc:18:12:21:88:8f:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:20:16:A0:D4:B6:DE:4C:38:56:0F:3F:11:A1:E6:61:BF:15:20
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/WnIgFqDUtt5MOFYPPxGh5mG_FSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.38.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:28:37:49:30:e6:f4:bd:94:c3:ce:68:6c:da:b9:10:ff:01:
1a:38:b4:b0:3a:64:0e:0b:96:79:61:fd:7c:9f:d1:1e:10:1f:
dd:11:10:7a:eb:3a:b3:00:80:89:56:0e:3d:59:a8:4e:c7:aa:
84:5f:6f:ea:92:3a:27:54:ad:73:03:09:ac:3f:68:50:a9:e0:
6e:9c:6f:14:dc:e3:d1:ce:d1:f8:7e:90:13:83:8d:12:90:a7:
a6:4c:17:fb:bf:af:47:92:e7:6c:ed:19:a0:04:80:53:ec:01:
9c:b0:7f:f1:ff:53:fe:91:77:4a:f9:f9:4b:93:3f:d1:5c:93:
c5:49:d3:ed:c7:c2:c5:e3:13:81:26:f0:f1:c7:01:4e:1e:7e:
e5:35:6d:c8:a2:ee:f1:1f:1f:6c:8a:36:0f:04:3d:e6:f1:12:
14:22:56:38:cd:bf:f0:b3:e1:90:21:c8:32:4f:ec:ce:68:d3:
e5:31:ee:8c:d0:92:07:12:e1:79:91:40:33:e7:65:b0:0c:35:
e1:51:de:ad:4b:46:ee:36:eb:43:48:94:6f:f8:4d:1c:b8:b7:
e2:2f:80:a7:7b:35:b6:8f:06:74:28:58:65:5a:21:16:89:79:
69:50:44:2a:87:51:89:56:be:6c:75:4b:3e:c0:b8:b9:8d:e2:
57:a3:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:44:17 2026 by rpki-client