Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WhCUbEzBMb72aD0dmrNLBsb3NUs.roa
File: WhCUbEzBMb72aD0dmrNLBsb3NUs.roa (raw, json)
Hash identifier: vN/Wd46XYmVU3G69IUX6jMRt2leJBzsm/8nSgA141dY=
Subject key identifier: 5A:10:94:6C:4C:C1:31:BE:F6:68:3D:1D:9A:B3:4B:06:C6:F7:35:4B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0208826383BCDB44C7BB551AFF5787B36
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WhCUbEzBMb72aD0dmrNLBsb3NUs.roa
Signing time: Thu 20 Aug 2026 18:56:28 +0000
ROA not before: Thu 20 Aug 2026 18:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 87.84.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 07:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:88:26:38:3b:cd:b4:4c:7b:b5:51:af:f5:78:7b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 20 18:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a10946c4cc131bef6683d1d9ab34b06c6f7354b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:48:64:ce:85:be:0f:38:52:51:97:ad:dc:
4f:ef:6a:3a:45:fb:f3:21:01:e3:ec:11:4f:d2:b2:
30:d8:d3:4f:28:e8:31:65:59:29:36:fc:4c:9c:ce:
d6:cc:d8:76:1e:58:74:fb:82:63:1a:39:74:1c:d5:
ea:d2:d1:b4:b0:25:84:7b:63:de:04:96:f0:5a:ac:
4b:2a:c5:67:21:1c:49:83:ab:ef:69:6e:6b:16:8f:
b9:27:b1:f8:01:6d:a4:80:51:6b:82:ca:30:32:57:
3d:32:fa:a7:60:17:48:d4:f6:86:a5:a4:24:bf:fd:
ec:78:b1:2c:1b:66:76:e8:06:88:10:36:fe:f8:80:
3d:25:98:66:8d:8a:c7:9c:34:38:76:59:29:91:00:
bb:61:41:e7:b6:33:e2:22:74:21:17:b1:47:67:27:
2d:f5:89:48:0c:fd:3f:97:c4:a2:96:d8:13:bf:8f:
19:66:94:e6:3a:d5:0e:e7:fd:5b:b4:4a:eb:5c:22:
2c:40:83:b0:0a:9b:f9:16:f7:53:9b:14:fe:ce:6b:
13:9b:1f:3b:9c:05:77:44:30:9d:15:ea:13:d0:87:
5d:35:b6:42:78:ba:c5:f7:44:2a:05:33:1c:d5:51:
92:3f:46:06:87:d6:12:c6:5a:0a:9b:39:87:c0:48:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:10:94:6C:4C:C1:31:BE:F6:68:3D:1D:9A:B3:4B:06:C6:F7:35:4B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WhCUbEzBMb72aD0dmrNLBsb3NUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.76.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b4:85:e4:e4:48:4b:cd:c7:62:81:d7:ce:d9:cd:ce:48:44:
a0:d3:d7:cf:5f:59:ab:02:ff:18:79:8b:4e:43:24:87:0f:8d:
bc:c4:1a:ff:20:53:04:54:14:f3:cf:4a:07:19:ac:e2:43:ec:
55:7a:77:f3:bd:38:2a:72:09:8e:c6:1f:b4:81:26:a1:4a:21:
8e:ea:85:c2:10:f5:cd:d5:a1:86:63:ab:36:9d:6f:63:2a:1b:
c4:09:21:1e:b9:62:93:36:a3:4f:0e:10:e5:74:b1:84:4c:3d:
1e:c4:ec:38:c6:eb:cd:28:e4:b4:3d:df:16:75:51:d9:63:38:
d2:9c:73:13:24:d8:a5:57:55:0e:cf:7e:93:12:d0:fa:92:f1:
1e:4d:68:a1:13:b7:dc:77:4d:c6:18:97:f0:b2:ef:4b:4c:ef:
d9:9c:12:f5:a3:fc:a3:39:9e:b2:cb:21:98:ed:41:94:f8:af:
25:f1:e9:3f:a9:82:54:9a:bf:02:15:db:05:8e:76:d8:65:33:
03:a2:fe:ae:22:3e:2b:ea:0a:5f:07:ee:36:fb:5b:22:c6:b4:
76:1c:f3:08:4b:c6:4d:fc:6a:1e:d5:0a:21:c8:87:00:12:9c:
cd:d7:b9:3e:05:c0:60:41:4f:51:6e:b2:05:37:03:a6:60:87:
a6:44:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:05:59 2026 by rpki-client