Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WE8PGp6ZBwbAFXG-hlMZjGC78jo.roa
File: WE8PGp6ZBwbAFXG-hlMZjGC78jo.roa (raw, json)
Hash identifier: FHcHAmGapcBMOOeW16jRFrqzGJlLeTMwb0HppoiJd2U=
Subject key identifier: 58:4F:0F:1A:9E:99:07:06:C0:15:71:BE:86:53:19:8C:60:BB:F2:3A
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F236906A15339993608DA0CD2AF042ACD
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WE8PGp6ZBwbAFXG-hlMZjGC78jo.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 89.187.24.0/24 maxlen: 24
89.187.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:06:a1:53:39:99:36:08:da:0c:d2:af:04:2a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=584f0f1a9e990706c01571be8653198c60bbf23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:91:73:7e:5a:d3:cd:58:18:6a:2e:36:c6:
73:10:c1:f3:66:ad:3d:75:b3:85:70:4b:47:ba:ce:
ba:43:81:68:0b:5c:87:6f:4e:a5:da:65:36:b3:fe:
93:c8:b2:03:0b:75:7f:ea:88:69:2d:53:2a:be:0d:
ae:11:ff:7f:fa:d0:99:0e:48:bb:8b:f0:be:06:75:
a7:6e:64:a2:78:0c:a2:7c:0e:29:3f:aa:6d:25:cc:
de:af:ea:6d:00:b6:9e:6f:9b:4e:65:bf:ba:84:0b:
1b:d7:b3:1b:39:3b:02:d0:9c:df:cb:3f:f3:32:06:
a6:de:70:aa:b0:0d:96:1d:6a:9b:12:2a:37:84:02:
2d:d4:87:9c:cb:3e:40:db:40:32:b7:b0:cb:35:cd:
be:cf:f6:32:3d:dc:08:db:52:ae:52:28:9f:51:97:
9c:d3:3c:54:40:25:83:87:fa:91:68:a1:35:2a:fe:
b6:ab:53:6c:38:d2:b9:58:33:b1:08:7c:05:25:97:
23:ba:b3:c4:47:c2:e4:94:4e:c1:8a:48:f6:a0:57:
e8:04:4b:48:12:15:98:39:02:79:7f:ae:2b:2b:0b:
ae:ec:5a:45:8e:d1:52:d2:82:32:44:f4:f3:3a:1f:
96:a2:36:2f:ce:54:10:4c:cc:99:68:f5:9b:16:d4:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4F:0F:1A:9E:99:07:06:C0:15:71:BE:86:53:19:8C:60:BB:F2:3A
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WE8PGp6ZBwbAFXG-hlMZjGC78jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.24.0/24
89.187.26.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d2:3f:db:78:c3:2f:19:2d:2d:4c:f5:ae:fa:ba:72:f9:c8:
ca:75:7d:b7:1a:d1:1d:18:a8:ef:bf:bc:e4:92:af:10:1e:78:
86:13:54:45:bb:09:76:00:d0:3c:31:5e:fe:8a:3a:3b:69:29:
13:2e:1c:a2:19:5c:cc:d5:b3:c4:37:45:b0:98:06:e9:5b:c3:
10:44:30:9e:88:59:0d:7f:0a:bd:9d:d6:9a:11:48:2e:6c:2d:
c0:90:65:e6:b7:2e:69:df:c0:08:1c:5e:2b:7d:14:d9:80:b2:
15:90:18:5f:a6:46:d2:bf:30:3b:09:a7:96:1d:eb:f4:9c:d4:
e2:87:de:d6:45:d9:95:33:8f:16:fe:c5:91:3e:89:84:99:27:
7b:fe:3a:77:c4:79:4b:a1:08:95:36:80:cf:9c:f4:e9:cf:f8:
81:d4:6b:fd:6f:0e:7b:78:7c:9d:10:34:f1:8e:08:a4:2b:21:
39:dc:08:2b:7e:9c:b3:fb:9b:b2:b3:02:7a:f2:20:1b:79:be:
34:77:e0:22:c6:d4:48:26:e7:7f:7d:9f:a4:2a:27:d9:a5:51:
d1:9d:6f:d9:11:83:50:37:47:35:95:97:4d:fe:a6:92:63:62:
4d:f8:70:e8:e5:ba:a6:3a:90:b2:06:82:11:5b:7e:8f:cb:bc:
cd:fe:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:04 2026 by rpki-client