Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WnKMk21D3OSdhh1Eotn9hVndbHU.roa
File: WnKMk21D3OSdhh1Eotn9hVndbHU.roa (raw, json)
Hash identifier: NOObNLCK82JlbDeBZtGnKvGq002a4kaSeWtZDQDu5QY=
Subject key identifier: 5A:72:8C:93:6D:43:DC:E4:9D:86:1D:44:A2:D9:FD:85:59:DD:6C:75
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A144504B6CAC26BB5BCCDBB54AF68B6AE7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WnKMk21D3OSdhh1Eotn9hVndbHU.roa
Signing time: Fri 16 Oct 2026 10:44:35 +0000
ROA not before: Fri 16 Oct 2026 10:44:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216382
IP address blocks: 151.247.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:50:4b:6c:ac:26:bb:5b:cc:db:b5:4a:f6:8b:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 16 10:44:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a728c936d43dce49d861d44a2d9fd8559dd6c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:dd:86:ce:2e:83:65:09:04:b2:eb:e4:3b:
03:60:99:b6:64:43:3f:f0:a8:68:9f:5d:91:e3:b0:
a5:04:d7:b9:55:1a:b1:10:ba:ac:63:7b:64:09:bc:
54:be:e1:97:da:18:69:75:87:1d:6d:fe:9e:58:0c:
e7:0b:8b:53:04:0f:d5:ac:c5:03:06:64:36:82:2e:
cc:8a:b6:78:c0:13:47:67:39:fa:b7:b9:ab:6e:6d:
8a:a8:d0:45:27:df:c4:b7:4c:27:7b:6a:85:2f:a0:
74:73:7c:05:1f:c6:9a:65:7f:38:90:b1:8c:3c:67:
53:be:26:cd:49:fe:a5:f6:23:8f:8a:fe:48:bd:c7:
16:bb:14:10:a3:e0:66:6d:c8:8c:cd:7a:24:cc:df:
a7:a9:ff:0d:a7:53:7b:f3:5a:33:b7:c1:8d:5e:b7:
df:3c:38:d1:e4:57:55:0c:cd:7e:45:0a:8c:54:b9:
9b:a9:74:34:bc:fe:02:3c:53:d3:bc:52:02:a9:1e:
5d:6d:94:f8:65:9f:09:5b:fe:0a:d5:4b:66:47:b6:
62:3a:1c:57:b3:05:0a:4b:a8:a1:1a:ec:2f:7f:fc:
b7:7d:19:4b:07:14:b4:87:45:cd:06:64:33:75:42:
35:42:55:bd:7a:35:12:cf:8e:73:e0:9f:84:dd:8b:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:8C:93:6D:43:DC:E4:9D:86:1D:44:A2:D9:FD:85:59:DD:6C:75
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WnKMk21D3OSdhh1Eotn9hVndbHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.8.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c7:1e:2c:52:75:6a:1b:26:9f:df:5b:fc:51:72:81:40:e0:
92:56:58:d3:40:3d:4f:48:e6:00:9e:00:fa:ee:35:f5:85:26:
1d:dd:41:41:9c:27:d7:c2:50:45:5c:03:13:84:26:be:10:94:
de:13:67:e3:74:9b:ca:11:4e:b8:40:26:6a:70:33:3b:1e:0b:
35:e2:22:a1:d5:cd:65:6e:4f:1e:56:8f:4f:45:99:70:09:32:
8a:0d:c1:67:68:a8:d2:d0:41:1d:d5:8d:1e:fc:ac:8c:3b:a2:
d7:58:60:19:47:cc:2b:68:00:9b:8c:f4:8e:21:a6:e8:ea:72:
49:7a:64:47:fd:08:f6:2a:57:c2:77:26:db:23:6a:38:6c:dc:
85:82:da:a7:e5:fd:cb:0e:4f:c0:a2:bd:f8:5a:5f:5b:aa:b9:
d5:89:e8:24:47:c9:a0:e2:d3:05:35:32:4a:95:e6:b5:d2:9d:
fe:b5:f2:ba:6f:11:fd:fe:e7:a8:ca:3b:b5:f2:1f:fb:fe:98:
75:b9:39:91:fd:eb:72:ef:3c:02:8d:9e:7c:b0:0e:cd:e7:bb:
c4:14:f7:93:1f:0d:25:f5:f6:0d:6c:b3:de:b8:97:52:d2:39:
d9:c4:fb:e8:02:5f:f7:e8:25:81:8a:59:94:88:76:86:97:6d:
87:aa:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:07 2026 by rpki-client