Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WbQuOqKp699fYeiVl4TGHhq_TyA.roa
File: WbQuOqKp699fYeiVl4TGHhq_TyA.roa (raw, json)
Hash identifier: wJLS3x52g/UglR73ca3zXfo/DDBONJssOPJugqejZQc=
Subject key identifier: 59:B4:2E:3A:A2:A9:EB:DF:5F:61:E8:95:97:84:C6:1E:1A:BF:4F:20
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E4F163A5DF5C29A390136968939732C32
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WbQuOqKp699fYeiVl4TGHhq_TyA.roa
Signing time: Fri 22 May 2026 09:48:37 +0000
ROA not before: Fri 22 May 2026 09:48:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201724
IP address blocks: 82.163.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:16:3a:5d:f5:c2:9a:39:01:36:96:89:39:73:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 22 09:48:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59b42e3aa2a9ebdf5f61e8959784c61e1abf4f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:73:1a:90:4e:9a:00:8b:0c:b0:60:a6:42:
11:9f:12:77:c6:a6:76:e2:48:e6:18:0b:bf:dd:46:
82:be:8e:cb:49:7e:f2:53:e3:a9:af:ad:0c:0c:4d:
8f:10:3a:d3:a4:be:b2:ff:0e:0d:ab:d9:4d:fe:1f:
9a:bc:28:f5:94:8d:cb:87:11:5c:f7:e4:8c:35:42:
2b:4f:f9:4b:0f:85:43:2a:c4:39:29:68:be:62:a3:
aa:a6:65:0e:a5:be:0e:db:13:27:d7:7e:54:66:7b:
b5:c1:fe:11:15:7c:b9:58:43:2d:25:f9:07:5e:b3:
b7:6b:0b:07:c3:6b:43:9c:4a:eb:28:28:30:b9:39:
1d:65:10:06:5b:e6:16:2f:c5:4c:e3:a7:c1:25:61:
4f:ed:13:3c:d8:0c:e6:f9:8d:ff:12:4c:df:5c:04:
3d:f5:4d:13:9b:65:1e:33:a3:49:08:76:c1:a2:9d:
57:34:d6:5b:01:66:07:64:f0:cd:f1:e6:c7:00:ca:
5c:fc:6a:97:34:a0:73:da:d0:00:33:20:45:98:c9:
3d:80:be:31:eb:21:36:03:df:fe:61:73:ee:e3:13:
7d:35:cb:89:2d:46:e4:62:c6:09:81:54:5e:3d:ea:
52:b5:0c:2c:51:eb:cb:27:1b:ba:0d:bd:d9:90:89:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:2E:3A:A2:A9:EB:DF:5F:61:E8:95:97:84:C6:1E:1A:BF:4F:20
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WbQuOqKp699fYeiVl4TGHhq_TyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:39:fd:fe:20:44:37:25:e4:1e:31:fd:d4:77:3c:99:78:23:
83:e3:37:f5:d7:a7:13:93:a6:cf:49:42:d5:56:5a:8a:56:96:
bf:6f:fc:bd:34:32:e0:f6:67:49:76:e9:76:77:72:57:b1:ea:
16:c5:27:38:76:4f:29:f6:4c:ae:90:5a:70:f5:e0:32:ac:71:
e5:5a:fb:9d:89:f9:1c:28:28:fc:5d:fe:3d:6d:4b:0a:40:7b:
7d:e8:b1:d7:82:bc:1a:72:be:01:92:d9:9f:dc:64:f5:ed:88:
1c:32:23:d2:68:22:65:87:a3:4f:76:67:06:0a:93:6e:a9:55:
90:32:3b:65:43:81:2f:97:66:c6:12:73:05:fd:79:50:45:24:
95:00:0e:60:67:14:03:47:19:16:2d:b8:11:72:dd:94:80:fb:
33:11:dc:23:42:fa:24:37:c6:d6:ca:6f:14:5a:c3:59:a2:7e:
88:a2:df:30:77:f9:85:db:03:41:bd:a0:95:57:ea:72:a9:5b:
bf:c9:1c:c8:2b:5d:4e:fc:f4:f7:68:50:09:50:50:95:d4:f3:
81:d9:97:3d:20:d5:0e:55:a4:56:40:65:0b:1a:89:5b:a9:ba:
e7:f2:a5:e3:47:90:ac:af:01:02:30:a4:34:63:eb:c8:ed:c9:
00:af:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:36:55 2026 by rpki-client