Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WWi9y6YzaLnIEzCIOFkDqfz-vzk.roa
File: WWi9y6YzaLnIEzCIOFkDqfz-vzk.roa (raw, json)
Hash identifier: WUPXdQpzTwhg9HRLGjvrtyv9v4JW8i4qQ6ex5FgHxJA=
Subject key identifier: 59:68:BD:CB:A6:33:68:B9:C8:13:30:88:38:59:03:A9:FC:FE:BF:39
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E93E0010636D9218BA2FD99E1B67DABD8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WWi9y6YzaLnIEzCIOFkDqfz-vzk.roa
Signing time: Thu 04 Jun 2026 18:23:11 +0000
ROA not before: Thu 04 Jun 2026 18:23:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214657
IP address blocks: 151.243.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:e0:01:06:36:d9:21:8b:a2:fd:99:e1:b6:7d:ab:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 18:23:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5968bdcba63368b9c8133088385903a9fcfebf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:af:26:c3:02:fd:95:62:09:d9:c8:01:8a:
d6:8d:8c:70:df:0d:fe:b8:ff:27:05:84:2a:c5:8d:
83:6b:65:e3:34:70:18:e9:14:ee:69:0c:79:7a:e0:
69:5d:c1:f7:36:1f:23:c6:32:4b:50:42:43:3c:41:
c9:40:7e:64:32:94:f6:e9:07:a0:a4:8f:22:98:64:
87:7a:62:cb:07:7b:0f:42:58:f9:73:f4:a8:67:a4:
92:ac:04:b2:f8:a8:08:95:5e:ca:fc:aa:88:ab:94:
72:4b:8e:ff:d6:8b:68:21:90:9f:a4:2e:70:dd:ac:
a9:cc:0b:a0:84:b3:ca:75:7e:cc:9e:77:85:6a:9e:
fa:a3:1a:8d:12:3c:3e:0c:db:bf:e0:75:3f:d3:80:
6f:91:62:a8:e1:35:8d:ff:df:4c:e1:2f:40:77:61:
9b:72:c6:4d:de:0b:81:e0:42:93:e8:00:8a:8e:b1:
18:4d:c7:d9:ac:d5:27:3e:2f:f0:75:9e:f0:1b:73:
0a:bc:a6:6c:32:d2:72:2c:a0:b0:9a:ef:62:d9:f7:
3e:7e:e8:17:42:b7:c2:46:bf:ca:8e:eb:1a:98:82:
1c:a9:36:b3:ca:fc:95:18:bf:66:e3:6e:9f:b3:e9:
b6:f1:7c:66:a9:39:4c:6d:91:af:b7:b4:67:e8:f7:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:BD:CB:A6:33:68:B9:C8:13:30:88:38:59:03:A9:FC:FE:BF:39
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WWi9y6YzaLnIEzCIOFkDqfz-vzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3c:7e:f7:4b:34:8a:77:91:83:a0:b2:7f:a8:0f:17:15:75:
74:96:78:87:fd:0e:b8:c0:6f:91:1b:2c:5e:65:bd:65:ff:27:
62:6e:c6:1d:ae:ab:0c:60:4e:e3:76:29:e9:ff:5a:4b:4f:78:
60:7c:23:96:97:ae:d5:4e:c0:f8:3d:ce:4b:2b:52:bd:dd:62:
2d:dd:0f:3a:31:59:9a:5b:0b:10:a2:51:1e:10:43:3b:9a:aa:
16:86:6c:42:ce:d3:7c:ac:ee:b3:67:72:32:39:13:69:b3:d5:
23:b9:81:07:ad:2b:54:be:cf:49:88:d1:ac:46:ea:ee:7b:ab:
ef:3c:31:c9:25:1e:43:ca:fd:c5:b5:0d:69:8b:5f:47:15:d6:
0a:66:8b:bb:5c:78:ba:82:8b:34:42:44:c7:fd:5b:af:7a:5a:
05:71:ef:e1:19:e2:12:cf:dd:54:1f:0d:c6:02:19:9f:55:c4:
ac:c8:b3:85:6a:e3:d5:06:8d:d2:a6:95:85:a6:80:5a:9d:f1:
a8:51:ac:44:66:1a:9b:40:41:5a:06:df:57:b7:7a:d7:cd:0d:
b1:72:1d:39:72:86:f5:65:83:4d:cf:5a:7a:6c:a0:aa:6b:76:
a1:fd:de:8b:09:61:cc:5d:86:d9:bc:b9:34:cb:57:d4:43:89:
a8:a9:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:31:36 2026 by rpki-client