Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/WP1pAPn1gT-3pBILANNDcC6Hht0.roa
File: WP1pAPn1gT-3pBILANNDcC6Hht0.roa (raw, json)
Hash identifier: 4KjNR2kyaEteKZKlG9S1UesNiA2a4f31T3kLjP3m3Dg=
Subject key identifier: 58:FD:69:00:F9:F5:81:3F:B7:A4:12:0B:00:D3:43:70:2E:87:86:DD
Certificate issuer: /CN=69c03b0bea87408661f0b738e7d0b9d68bbd4e46
Certificate serial: 019FF5455BD6A200CC0BFF5DF3704DA12F51
Authority key identifier: 69:C0:3B:0B:EA:87:40:86:61:F0:B7:38:E7:D0:B9:D6:8B:BD:4E:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/WP1pAPn1gT-3pBILANNDcC6Hht0.roa
Signing time: Wed 12 Aug 2026 09:19:51 +0000
ROA not before: Wed 12 Aug 2026 09:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198433
IP address blocks: 2a0b:4200:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:45:5b:d6:a2:00:cc:0b:ff:5d:f3:70:4d:a1:2f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c03b0bea87408661f0b738e7d0b9d68bbd4e46
Validity
Not Before: Aug 12 09:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58fd6900f9f5813fb7a4120b00d343702e8786dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:58:43:70:79:00:00:4c:c9:ce:1c:a7:b8:
18:6c:fe:aa:45:43:bb:83:7f:0b:d8:da:d8:e5:82:
6f:91:92:40:98:64:8b:54:1e:2c:0c:bb:11:ef:79:
c1:11:3a:8a:17:b3:e4:77:ba:b6:76:f6:c7:a8:7d:
5c:15:a6:ab:ec:d3:c4:18:13:38:55:92:41:99:94:
d9:ad:65:07:7a:42:23:fc:71:ff:c5:f3:17:df:9e:
0e:ac:49:7a:93:51:fa:37:43:0a:18:2f:dd:d3:e5:
08:0d:0b:a4:a3:93:09:4d:70:02:aa:af:b7:28:68:
c7:8b:39:76:02:c7:8e:8c:10:5d:2c:52:dc:97:78:
c7:24:6a:a2:08:a9:8f:de:10:ca:5c:f0:d8:b5:69:
e7:a0:2a:4d:86:ee:f3:31:c2:5d:ba:a1:64:2b:82:
68:08:1f:f4:e1:af:7a:75:55:88:70:9b:10:30:4e:
e0:99:ce:bc:97:f4:e0:b8:61:8c:7b:3f:7c:b9:9f:
0d:4c:95:d5:d0:c9:0d:d3:4a:d4:1f:e7:3c:10:03:
65:06:01:12:b9:12:3f:da:63:61:fb:8a:b2:0b:f7:
cf:a7:62:87:03:70:90:e7:9b:fc:da:3b:97:36:cd:
a4:07:8e:cb:d7:86:71:7c:13:e0:43:7f:3a:66:0d:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FD:69:00:F9:F5:81:3F:B7:A4:12:0B:00:D3:43:70:2E:87:86:DD
X509v3 Authority Key Identifier:
keyid:69:C0:3B:0B:EA:87:40:86:61:F0:B7:38:E7:D0:B9:D6:8B:BD:4E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/WP1pAPn1gT-3pBILANNDcC6Hht0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4200:2001::/48
Signature Algorithm: sha256WithRSAEncryption
0f:ca:8a:8e:7d:9e:54:83:17:1a:07:60:cb:7a:e0:95:92:73:
dd:11:00:3c:37:37:de:ae:96:fc:cf:43:cf:e1:f4:13:ac:46:
19:78:c0:81:a2:52:85:f8:aa:1f:ff:85:ba:07:a4:20:71:68:
a0:f5:e9:12:3e:2b:72:8f:9e:55:15:91:29:6b:26:b7:0b:68:
c7:5d:b4:f2:ba:72:59:fc:5d:29:9d:35:12:a6:07:37:a5:05:
37:8b:42:ee:74:b2:59:e3:d4:c2:96:05:05:e3:cf:f6:6a:9a:
94:40:b4:de:5b:da:e9:62:c2:84:8a:d2:98:fc:31:5c:c0:a9:
90:23:da:f7:ca:dd:84:0d:32:52:ec:5d:f2:75:09:31:6f:20:
c3:76:4b:95:c8:11:3b:3b:23:b9:87:c4:5f:2a:55:0e:c7:0d:
d6:d1:1e:fb:fd:c6:12:f6:4a:9e:3a:7b:cc:dc:fd:30:8c:79:
da:29:ca:0f:44:e1:aa:2e:c5:d0:da:63:63:8f:ec:1d:7d:33:
65:19:b1:16:51:37:9f:0b:2d:71:7e:30:68:70:7c:2d:6c:28:
66:25:ef:7c:b5:fa:ff:70:3c:02:70:0f:49:39:05:d8:8f:28:
1e:51:06:57:dc:18:6e:e5:5a:7a:99:c4:47:cd:4d:72:ca:07:
68:d5:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:39:16 2026 by rpki-client