Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wVfnVTPj8pV5Z3TbCcM-949QSCE.roa
File: wVfnVTPj8pV5Z3TbCcM-949QSCE.roa (raw, json)
Hash identifier: FjFJ6wZR9ows4vuP9uT5hb42jQi8qbvzPKM9OZkpW6o=
Subject key identifier: C1:57:E7:55:33:E3:F2:95:79:67:74:DB:09:C3:3E:F7:8F:50:48:21
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019E64BDBD5A3C9D93B1CAF14D26499E662B
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wVfnVTPj8pV5Z3TbCcM-949QSCE.roa
Signing time: Tue 26 May 2026 14:43:36 +0000
ROA not before: Tue 26 May 2026 14:43:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.50.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 23:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:bd:bd:5a:3c:9d:93:b1:ca:f1:4d:26:49:9e:66:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 26 14:43:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c157e75533e3f295796774db09c33ef78f504821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:c4:a6:b1:51:59:6a:61:bb:c9:d5:f2:b6:
74:c0:87:08:02:84:b0:06:2d:21:ac:44:2b:00:8a:
85:80:60:54:7d:2b:14:54:5d:02:65:fe:c0:13:6e:
02:41:97:bc:eb:3c:fd:9f:52:a4:ce:2f:28:ad:f3:
04:fd:a0:f0:d0:9b:ef:d6:fd:32:64:ca:72:5a:99:
7d:8c:1f:bf:65:b5:d9:cb:f2:fc:70:5e:e4:45:2e:
f4:9e:3e:0b:38:33:22:52:fc:02:54:fe:0f:73:52:
22:19:4d:af:7f:dd:26:c1:a9:6a:31:e3:10:51:fc:
f6:e6:fd:49:ac:0a:d2:5f:de:07:39:05:76:da:79:
95:b9:be:5a:f2:df:35:1d:67:c2:48:d6:1d:e0:d4:
b8:07:3a:b2:8e:b6:ec:e5:8a:35:88:70:3e:5c:10:
55:51:ad:5b:69:60:82:e1:03:86:cd:81:b5:be:03:
97:78:5d:c6:86:67:60:db:17:45:eb:09:ab:50:ab:
a0:6e:74:9c:49:66:1b:14:03:7f:f1:b6:f4:f5:b7:
b1:2a:4d:45:bc:4f:30:f5:e4:1b:28:d3:01:74:3c:
66:c2:68:0f:d0:0a:c3:65:ea:a4:25:fa:95:a7:25:
24:04:64:69:69:24:4f:9a:47:ad:e5:ab:a0:f9:6d:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:57:E7:55:33:E3:F2:95:79:67:74:DB:09:C3:3E:F7:8F:50:48:21
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wVfnVTPj8pV5Z3TbCcM-949QSCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.50.0/24
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
5e:4a:40:61:bb:ae:f3:87:1e:a1:94:46:c3:fb:78:aa:be:48:
65:f9:4a:94:69:94:21:41:ed:07:82:eb:ef:a5:c8:b9:19:d5:
2e:df:dd:20:0a:75:a6:ff:a3:d0:cb:c5:e2:0f:57:7e:d0:68:
75:99:b7:38:c9:a6:76:ec:82:02:99:9c:01:f1:1c:15:15:59:
fb:2e:e3:8c:a1:ab:c0:25:3a:6a:09:59:9b:4f:4a:ca:e7:60:
cd:4e:5e:eb:38:ec:07:16:c7:f4:41:03:da:35:45:3e:fb:98:
c2:a7:59:fd:b9:98:aa:7e:58:56:d2:b5:a1:b1:23:ef:ca:8b:
03:77:d0:2a:2d:65:96:93:85:4e:43:59:82:06:a1:80:a2:29:
33:1a:f9:ed:33:13:75:9a:f1:51:b2:1f:da:27:1e:d1:31:51:
1d:11:c7:51:03:3a:e0:3e:ad:59:bd:5b:93:dd:5a:ca:29:48:
43:84:3e:90:00:6d:e6:1e:9f:a8:7e:0f:2f:90:f7:de:3c:23:
e6:2e:ec:9c:0d:fd:f7:a1:0d:8f:60:38:4d:bb:d1:c5:9c:d8:
83:26:4a:d4:fb:51:da:42:11:e8:c7:ef:ec:dd:08:25:09:47:
77:0a:79:e9:02:4e:61:b4:ed:d4:d2:14:69:ea:5c:ad:be:cc:
b9:87:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 03:51:23 2026 by rpki-client