Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/wZfLh5WSFAXKinsiyS1145pWxAk.roa
File: wZfLh5WSFAXKinsiyS1145pWxAk.roa (raw, json)
Hash identifier: t/km2qU0O3WotdafAm5WAIJsGqYsS42YCnAubnFGkjY=
Subject key identifier: C1:97:CB:87:95:92:14:05:CA:8A:7B:22:C9:2D:75:E3:9A:56:C4:09
Certificate issuer: /CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Certificate serial: 01A0488294C0B41B0CC0F3243858A2B1DB1E
Authority key identifier: 5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/wZfLh5WSFAXKinsiyS1145pWxAk.roa
Signing time: Fri 28 Aug 2026 13:15:12 +0000
ROA not before: Fri 28 Aug 2026 13:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38930
IP address blocks: 217.194.16.0/24 maxlen: 24
217.194.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:82:94:c0:b4:1b:0c:c0:f3:24:38:58:a2:b1:db:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Validity
Not Before: Aug 28 13:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c197cb8795921405ca8a7b22c92d75e39a56c409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:3e:97:83:f5:85:93:30:7a:9a:70:2c:65:
70:58:73:ff:de:6c:a2:94:7b:9c:d0:1d:a3:d3:0d:
fb:00:ed:6f:58:4b:2b:df:fb:8f:f0:df:30:7a:c6:
12:34:8e:a0:c4:e2:0b:7b:8c:e0:cf:77:08:ac:40:
ed:21:12:2a:fb:38:9b:4d:ac:b5:a7:38:cc:da:e7:
ec:78:96:ae:57:22:a6:98:b9:d3:75:e9:01:45:e1:
36:4d:ae:04:ad:6a:76:42:cf:fb:ba:3e:36:46:e1:
2f:80:42:2f:62:a5:cf:93:b9:73:73:f1:72:6f:b3:
5c:58:18:c4:98:7c:a9:ba:30:c2:81:0c:a0:01:af:
0e:f0:7d:19:9b:46:16:bf:b2:85:3b:93:d8:a9:37:
74:fc:4b:b7:68:12:ac:5a:a5:9b:26:82:11:34:77:
ec:ac:76:c7:40:45:53:17:61:4a:f3:93:a0:99:8f:
08:16:ff:16:68:2d:2e:7e:dd:b9:a4:96:3b:f7:99:
d1:ee:42:9e:94:35:0b:32:12:7c:32:1a:ea:a9:03:
f9:bd:3b:f4:22:f4:79:3c:1f:8a:03:4b:0c:38:ad:
4e:ea:6e:e7:1d:d3:1f:1a:34:c0:97:4c:2a:77:73:
72:5e:97:68:81:5f:d9:c3:d1:da:96:a2:a0:a9:52:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:CB:87:95:92:14:05:CA:8A:7B:22:C9:2D:75:E3:9A:56:C4:09
X509v3 Authority Key Identifier:
keyid:5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/wZfLh5WSFAXKinsiyS1145pWxAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.16.0/24
217.194.20.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d3:10:73:13:f2:c0:12:f0:36:7d:c2:e0:74:ca:ab:77:50:
74:8d:29:2a:f2:83:5a:15:52:b0:26:1a:b7:ae:60:32:05:fc:
53:89:c9:9a:34:0d:48:62:0c:ce:4a:df:04:4e:33:75:d0:60:
30:ab:ce:44:00:ad:a2:70:67:f2:f9:48:3e:b5:eb:57:04:ae:
8f:02:e3:fd:71:ba:48:e0:64:a7:5a:93:ff:fc:0c:f6:62:27:
c1:38:9c:eb:d7:a7:41:dd:4b:47:3a:97:7c:87:96:66:a4:34:
05:26:53:d0:cc:ad:ed:2f:6e:e3:29:5e:86:fd:03:7e:9d:7c:
78:ca:53:1a:58:9d:8f:25:9b:34:6c:a1:d6:93:dc:ed:6e:98:
ab:1a:fa:0e:f1:44:d9:25:5d:6a:ae:de:fe:0c:da:72:b8:96:
30:aa:27:fc:02:ef:56:0e:ca:72:e1:f9:ba:7b:97:4b:5c:d9:
b9:35:8d:c3:ae:b6:b4:86:a4:03:56:17:a9:db:7a:79:85:99:
fd:bc:71:48:44:e2:4e:1e:a7:eb:2e:c4:bf:5d:20:3d:06:31:
07:39:2f:24:3b:11:17:04:f0:42:ff:19:52:fb:30:91:c8:25:
bd:81:40:de:60:5a:20:36:01:82:cc:60:3b:ec:26:88:4b:47:
f9:bd:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:19 2026 by rpki-client