Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/WJj--uUsyJ2fD-tKkZGxI2CpudE.roa
File: WJj--uUsyJ2fD-tKkZGxI2CpudE.roa (raw, json)
Hash identifier: ziovVpwCj3diZ+dRt6j83E+wDrmoF//JhY0BGWJR1Rc=
Subject key identifier: 58:98:FE:FA:E5:2C:C8:9D:9F:0F:EB:4A:91:91:B1:23:60:A9:B9:D1
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23689335A9F0045C0A417443DE345C99
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/WJj--uUsyJ2fD-tKkZGxI2CpudE.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202636
IP address blocks: 91.246.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:93:35:a9:f0:04:5c:0a:41:74:43:de:34:5c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5898fefae52cc89d9f0feb4a9191b12360a9b9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:f4:a3:67:b9:1e:5c:44:8a:76:16:e4:a8:
4b:a1:45:4a:f0:d5:95:16:47:b2:44:de:49:52:b7:
23:b5:c8:21:98:43:02:0b:a6:4a:5e:05:ce:1b:b3:
04:1d:f7:36:f1:9c:69:d5:ba:9f:a4:78:90:cc:59:
50:bf:18:ab:48:9c:58:50:4b:26:16:bb:38:ad:f4:
f6:d1:ce:ea:66:32:f1:9b:70:d9:a8:9a:f2:fa:3a:
6d:2c:9c:6b:32:e2:ab:98:8b:97:17:fc:c4:7c:12:
d2:04:93:c2:21:0e:5c:32:42:73:e1:b9:92:7c:01:
eb:65:1b:ee:2d:98:95:0e:e2:e2:b1:55:09:c8:73:
dd:4d:21:36:91:7f:af:ce:f0:24:75:9a:63:af:17:
77:70:eb:00:fc:e6:a2:81:7e:bd:12:e6:c1:ed:6a:
12:65:7b:d5:24:ef:0d:f0:c9:dd:3d:1e:a5:17:20:
0c:c5:f1:1b:ad:bc:25:c1:e1:8d:fd:22:2f:ad:2a:
e2:59:3c:e6:e6:71:d8:9d:87:98:d4:bd:22:fc:53:
1e:77:25:ea:81:97:d5:76:a7:b6:7a:60:bb:6e:98:
11:2c:5b:ad:da:e1:03:83:5b:ab:8b:26:a5:23:e4:
e3:13:5a:51:d1:f3:5a:43:92:e9:c9:db:0e:36:ca:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:98:FE:FA:E5:2C:C8:9D:9F:0F:EB:4A:91:91:B1:23:60:A9:B9:D1
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/WJj--uUsyJ2fD-tKkZGxI2CpudE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.52.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a2:e4:34:d1:17:a9:2a:df:78:62:90:68:f6:94:3f:33:06:
a4:f8:3d:0f:78:bf:4e:11:15:c1:d2:b0:d0:b3:fd:58:6a:64:
c9:bc:3a:8e:f3:b2:a6:ae:84:6c:e5:98:3c:4c:40:0d:d5:21:
36:f9:83:3c:bf:2a:2b:11:ef:5b:b3:4e:f2:67:e6:f2:ac:53:
62:34:9e:d1:41:d5:a0:1a:ad:12:c5:d1:8c:2e:cf:26:3b:4d:
de:e3:06:53:43:d6:cf:8d:0f:82:a8:c5:a4:4e:e2:41:09:c6:
d8:90:84:f3:e1:be:fc:e5:b2:32:ed:20:f2:75:5a:41:d7:5b:
d1:58:44:99:93:26:87:c2:ac:f2:24:22:80:00:72:d5:dc:c8:
57:13:16:78:11:36:fa:5a:60:1e:09:3a:e2:ca:38:9f:8a:4e:
07:78:31:46:36:52:9f:02:1f:c9:e2:88:af:34:3c:a6:ec:7f:
64:f7:19:10:9b:62:58:8b:ed:34:9e:83:54:65:6f:e3:57:b3:
41:b9:a6:14:de:78:31:68:fd:8b:1b:76:c6:31:81:6b:eb:ee:
b0:5a:21:1d:ad:eb:8b:07:27:7c:4a:a8:93:5c:7b:ac:fd:2b:
57:63:45:88:ef:4f:da:1d:e6:af:c7:9f:d2:02:dd:49:cd:0b:
84:eb:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:47:23 2026 by rpki-client