Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/wxk2FgEPJ0jZfOUls2MWpfNImps.roa
File: wxk2FgEPJ0jZfOUls2MWpfNImps.roa (raw, json)
Hash identifier: ptyXUO1VJhjpBrDL2DO7uhyR61NHmpTYUD74M/Acgp0=
Subject key identifier: C3:19:36:16:01:0F:27:48:D9:7C:E5:25:B3:63:16:A5:F3:48:9A:9B
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019E2BE743B4421ECB4FEE72CC52865743CE
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/wxk2FgEPJ0jZfOUls2MWpfNImps.roa
Signing time: Fri 15 May 2026 13:50:36 +0000
ROA not before: Fri 15 May 2026 13:50:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 93.89.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:e7:43:b4:42:1e:cb:4f:ee:72:cc:52:86:57:43:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 15 13:50:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3193616010f2748d97ce525b36316a5f3489a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:15:ca:7e:9c:5c:52:2e:0c:3f:f7:94:05:
37:b3:7d:1e:d3:fb:a1:94:bf:75:a9:ac:0b:15:b2:
c1:ed:c5:6c:53:e4:cf:79:f9:79:8e:d3:7d:e1:07:
9e:85:a6:5f:5c:d6:66:d6:b3:4c:d7:de:4e:2d:ef:
5f:2c:9d:fc:7d:ba:a3:8b:d6:e3:de:67:5c:4f:b4:
d1:b0:60:a5:df:5a:24:09:68:b7:71:85:75:bb:a3:
07:54:43:0d:03:12:40:31:8a:97:b7:c7:fb:77:38:
55:3b:61:1c:40:1b:94:e4:cb:76:0c:be:1c:25:07:
8d:1a:4c:e2:f4:93:d4:bd:ef:cf:82:ea:9e:23:2e:
35:cc:1e:9b:c3:dc:64:59:3a:c4:92:22:c0:cf:93:
60:4e:19:78:82:50:32:24:d9:49:89:af:b3:f7:69:
42:af:9d:47:b9:f3:20:01:c5:58:e7:d4:b3:2b:23:
11:ad:3e:a9:88:b7:b9:d7:e4:97:3b:0d:87:d2:cb:
2e:02:2a:c6:fe:ca:d4:a6:70:f7:44:a0:b7:95:63:
0c:50:76:05:4a:dc:4b:e9:0d:bd:a2:21:b9:54:cb:
92:64:e7:6f:25:aa:3e:b2:43:d9:85:6e:b2:43:ad:
99:17:17:d0:fb:6b:39:b1:b7:51:4e:79:07:4d:82:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:36:16:01:0F:27:48:D9:7C:E5:25:B3:63:16:A5:F3:48:9A:9B
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/wxk2FgEPJ0jZfOUls2MWpfNImps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.211.0/24
Signature Algorithm: sha256WithRSAEncryption
85:60:28:1a:5b:7a:2e:82:43:b8:1d:54:c1:49:47:35:80:50:
f6:4a:4c:f2:af:2d:e5:87:f7:a4:c2:ac:3f:d8:ec:44:f7:ef:
f3:02:67:4e:1b:bf:2e:fa:96:66:1c:32:27:51:61:76:1e:c6:
7f:51:f0:56:71:4d:59:c8:68:30:84:6d:85:96:cf:78:b0:01:
80:58:eb:52:2f:ba:40:e2:9a:7b:e1:3f:10:bd:5c:c4:d2:8d:
30:fe:0f:c6:93:04:a5:aa:63:b5:6c:37:38:7c:06:3a:40:0d:
c6:be:1c:d7:33:c1:ca:2c:ae:d6:64:a8:aa:02:85:6e:0c:07:
e2:13:20:c6:3c:07:6f:45:17:a4:b7:62:00:b6:c9:3b:39:0c:
a3:fe:32:72:6f:83:73:88:f4:c1:e4:84:b5:d5:88:24:7b:e2:
df:81:95:cc:0f:89:9e:93:d7:51:fe:c2:44:2d:7c:ea:cf:91:
5f:fb:17:30:bc:5a:54:60:ca:d4:04:cd:c9:b8:26:26:2e:af:
64:78:0d:48:1e:cb:bc:a0:4c:17:bc:49:c2:f1:35:19:d7:6e:
d1:36:a3:a0:43:23:e5:5a:47:b2:bf:6d:cb:0b:3e:d6:8d:18:
9a:7b:85:e0:33:10:8c:92:73:4b:5a:f5:00:20:e3:84:55:29:
39:f0:94:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4r50O0Qh7LT+5yzFKGV0POMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjYwNTE1MTM1MDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzE5MzYxNjAxMGYyNzQ4ZDk3Y2U1MjViMzYzMTZhNWYzNDg5YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArikVyn6cXFIuDD/3lAU3s30e0/uh
lL91qawLFbLB7cVsU+TPefl5jtN94QeehaZfXNZm1rNM195OLe9fLJ38fbqji9bj
3mdcT7TRsGCl31okCWi3cYV1u6MHVEMNAxJAMYqXt8f7dzhVO2EcQBuU5Mt2DL4c
JQeNGkzi9JPUve/PguqeIy41zB6bw9xkWTrEkiLAz5NgThl4glAyJNlJia+z92lC
r51HufMgAcVY59SzKyMRrT6piLe51+SXOw2H0ssuAirG/srUpnD3RKC3lWMMUHYF
StxL6Q29oiG5VMuSZOdvJao+skPZhW6yQ62ZFxfQ+2s5sbdRTnkHTYK1gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMMZNhYBDydI2XzlJbNjFqXzSJqbMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvd3hrMkZnRVBKMGpaZk9VbHMyTVdwZk5JbXBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVnTMA0G
CSqGSIb3DQEBCwUAA4IBAQCFYCgaW3ougkO4HVTBSUc1gFD2Skzyry3lh/ekwqw/
2OxE9+/zAmdOG78u+pZmHDInUWF2HsZ/UfBWcU1ZyGgwhG2Fls94sAGAWOtSL7pA
4pp74T8QvVzE0o0w/g/GkwSlqmO1bDc4fAY6QA3GvhzXM8HKLK7WZKiqAoVuDAfi
EyDGPAdvRRekt2IAtsk7OQyj/jJyb4NziPTB5IS11Ygke+LfgZXMD4mek9dR/sJE
LXzqz5Ff+xcwvFpUYMrUBM3JuCYmLq9keA1IHsu8oEwXvEnC8TUZ127RNqOgQyPl
Wkeyv23LCz7WjRiae4XgMxCMknNLWvUAIOOEVSk58JT7
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:49 2026 by rpki-client