Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/WPaZhl6XXIow8KpBQq30c_pnuKQ.roa
File: WPaZhl6XXIow8KpBQq30c_pnuKQ.roa (raw, json)
Hash identifier: jK4oaru6RUj8Cr+5G0opAlkdwn/4CJ6cO7grrwnx9Wk=
Subject key identifier: 58:F6:99:86:5E:97:5C:8A:30:F0:AA:41:42:AD:F4:73:FA:67:B8:A4
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019EA61C41EF02AEF668B2736B7C4CF5F2A7
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/WPaZhl6XXIow8KpBQq30c_pnuKQ.roa
Signing time: Mon 08 Jun 2026 07:22:10 +0000
ROA not before: Mon 08 Jun 2026 07:22:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61992
IP address blocks: 62.76.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:1c:41:ef:02:ae:f6:68:b2:73:6b:7c:4c:f5:f2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 8 07:22:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58f699865e975c8a30f0aa4142adf473fa67b8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:d2:8e:ec:b5:d7:6b:14:a7:68:f6:ba:dd:
fc:5c:e4:92:33:a6:45:2f:48:bb:0e:bf:37:01:f0:
08:d8:e0:c2:92:7e:c8:dd:45:9c:43:30:90:75:6a:
ca:e2:b5:bd:65:7d:5f:66:4b:52:ce:4c:1f:a6:11:
f4:0a:e7:99:59:7b:fe:41:bd:e5:29:dc:e8:51:93:
9a:1e:13:da:98:7e:49:8e:11:57:80:3e:41:47:02:
09:2a:60:d3:0e:49:18:df:d4:b8:84:18:17:18:2f:
60:ba:4c:8e:3e:bd:a0:ef:6c:07:07:06:4c:28:64:
d0:16:a5:20:d8:4c:c3:54:e2:a7:cb:a7:8c:18:f2:
af:5a:2c:25:af:b1:61:72:6e:da:44:c3:06:60:aa:
6c:b5:9a:9b:ff:97:da:2e:0a:1b:4e:8b:b9:7b:47:
5c:a9:31:3c:35:d8:ab:a4:0b:0c:99:58:86:43:7c:
1e:93:37:a6:e6:8a:ee:a1:f4:6b:65:a7:96:36:c1:
67:ba:a9:5c:16:ae:ac:74:d4:7e:29:2f:62:a4:da:
e3:6a:ce:72:6a:5a:a0:ab:fb:9b:b4:7c:c2:b3:33:
e1:48:91:2f:3d:ee:1f:9c:b1:88:79:e3:87:a1:83:
a2:e2:21:68:af:db:7b:34:d2:df:d5:97:6f:62:24:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F6:99:86:5E:97:5C:8A:30:F0:AA:41:42:AD:F4:73:FA:67:B8:A4
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/WPaZhl6XXIow8KpBQq30c_pnuKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5b:5b:28:9f:28:25:55:39:a0:25:30:e7:cf:11:d1:d6:8e:
26:b4:c4:c0:09:fb:f3:31:77:e3:97:97:b5:3f:f7:95:1f:a1:
8b:a6:8d:57:ca:36:6e:bc:d8:79:46:47:37:34:eb:5c:56:47:
48:db:b2:21:8a:c7:10:53:37:8f:46:3f:2e:96:52:94:71:0a:
78:bd:87:53:48:80:14:0d:d4:19:ad:ec:dc:2a:2e:8d:e6:37:
a1:da:64:9a:d4:1d:38:ab:18:b8:92:1c:57:58:15:aa:a5:c5:
40:0a:ba:1f:c4:73:bf:17:bb:7c:42:54:6d:f4:09:cc:86:68:
8b:e9:5a:da:33:7f:d5:ab:c4:b8:75:d1:a8:10:a6:02:03:0d:
0c:03:e8:c3:d3:5e:8d:44:39:89:df:96:9b:de:cb:f7:fa:fd:
6a:d6:cf:0a:dc:32:36:bf:f5:88:2f:7c:28:0f:66:3d:45:be:
ca:0a:f7:c1:98:fe:a9:b0:9e:83:cf:e9:13:aa:7e:46:6f:5c:
96:12:a3:c8:c2:a5:87:60:8e:9f:35:67:46:61:3e:17:ec:43:
3f:bb:b2:0b:77:3c:78:9e:72:50:b5:87:27:27:44:18:09:75:
a7:e0:29:34:e0:81:5e:8d:a9:a4:ea:09:1d:80:b9:bd:9a:f9:
f4:bb:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:40 2026 by rpki-client