Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/W4KN4SDNmRYOwyhHxjuSolYafls.roa
File: W4KN4SDNmRYOwyhHxjuSolYafls.roa (raw, json)
Hash identifier: BQApeMUmBw8ONYahKVhEqtOAad+aaUlEyEzjh8Jh3Ok=
Subject key identifier: 5B:82:8D:E1:20:CD:99:16:0E:C3:28:47:C6:3B:92:A2:56:1A:7E:5B
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F28204ED1A376ED95FE61F4733A2A3136
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/W4KN4SDNmRYOwyhHxjuSolYafls.roa
Signing time: Fri 03 Jul 2026 13:17:13 +0000
ROA not before: Fri 03 Jul 2026 13:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50265
IP address blocks: 91.233.88.0/24 maxlen: 24
193.106.68.0/22 maxlen: 24
217.12.32.0/22 maxlen: 24
217.12.36.0/24 maxlen: 24
217.12.39.0/24 maxlen: 24
217.12.42.0/23 maxlen: 24
217.12.44.0/22 maxlen: 24
217.172.16.0/21 maxlen: 24
2a00:46e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:20:4e:d1:a3:76:ed:95:fe:61:f4:73:3a:2a:31:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 3 13:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b828de120cd99160ec32847c63b92a2561a7e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:2f:f0:c3:2d:54:d2:0e:94:f2:59:e7:39:
9b:d6:d8:9c:b2:16:2b:30:12:54:33:59:1a:05:9c:
fd:e6:87:a9:94:80:57:45:00:9a:4e:1d:bb:96:94:
09:0d:82:bd:3f:03:75:04:64:fc:4d:ca:6e:90:33:
0b:e0:f0:29:1f:7d:86:46:5c:7b:9e:ad:a3:07:6a:
fa:c4:34:57:92:8c:a6:24:f7:6b:7c:d5:51:e7:24:
d7:42:fb:57:e2:8b:c8:75:0f:67:0f:25:fb:aa:7b:
1c:72:cd:ef:27:4c:86:89:e8:37:46:6c:6b:9a:0d:
92:ea:39:6e:a1:15:a7:2b:6b:d8:3b:4f:2d:9f:68:
1c:6b:79:74:a5:77:94:ef:b8:f1:11:33:b7:10:75:
74:43:19:91:9a:2d:7a:9b:40:d4:0a:cc:96:9a:6d:
78:3e:5c:86:7d:ab:51:3b:72:e2:1d:3b:41:bf:1b:
f2:f5:ab:cf:f0:97:7f:c7:bf:b5:d2:12:c2:4a:dc:
d7:c8:a3:ce:34:01:af:21:f1:3c:f5:d9:71:5d:0a:
fa:4e:87:75:86:3e:76:58:01:9f:99:6f:9c:e5:d9:
c5:66:d2:5d:95:cb:71:cd:44:5d:2f:69:21:2c:d2:
14:38:c7:4f:9c:06:0c:38:fe:85:70:d9:cd:8f:9e:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:82:8D:E1:20:CD:99:16:0E:C3:28:47:C6:3B:92:A2:56:1A:7E:5B
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/W4KN4SDNmRYOwyhHxjuSolYafls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.88.0/24
193.106.68.0/22
217.12.32.0-217.12.36.255
217.12.39.0/24
217.12.42.0-217.12.47.255
217.172.16.0/21
IPv6:
2a00:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
4e:9f:ac:44:bd:9e:7c:06:a5:dd:2d:1d:93:71:3f:d3:16:66:
0d:fa:cb:aa:2e:49:ae:fc:de:d3:f6:17:7a:e7:25:ac:05:53:
5e:56:fa:a3:e8:89:f3:24:cb:f4:99:3e:3a:97:30:a9:11:d3:
af:b6:fc:cc:e8:d3:cd:9a:c4:ae:bd:1c:92:99:14:a5:a8:21:
dc:cb:ac:33:63:12:71:5f:20:c3:58:d3:d6:88:5d:9f:b5:6e:
c4:15:1f:43:52:69:9c:ce:69:25:a0:8a:d6:46:68:50:31:e9:
2b:2d:23:bc:09:ee:47:f4:34:bd:99:b9:73:d9:14:6d:e5:13:
5f:54:14:e8:e3:f3:29:3d:70:6e:8e:dc:48:1b:23:2d:5b:53:
14:ef:6d:6f:2b:c9:47:54:75:24:7c:52:e3:45:55:a2:6f:9e:
0a:02:29:c3:5e:42:5a:c9:5c:cf:6d:52:26:a0:47:b6:ef:a2:
42:88:5d:37:81:f6:87:0f:c2:53:00:e2:be:19:6d:c9:c7:13:
19:8d:d7:e0:64:9e:00:7e:c9:1d:47:b9:57:7a:28:98:69:64:
89:86:e4:62:27:d8:94:4e:18:e2:5e:2a:0e:d1:c5:73:1e:90:
fd:4d:0a:7b:8d:37:78:3b:7a:e5:f1:c2:87:01:eb:1f:7b:ba:
84:17:2c:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:52 2026 by rpki-client