Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa
File: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (raw, json)
Hash identifier: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=
Subject key identifier: 5A:F0:26:40:90:6E:58:D2:BE:03:57:60:14:1F:66:17:0B:FC:E8:69
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F23694145D74BAD9457596518AF24C3AD
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10557
IP address blocks: 85.209.86.0/24 maxlen: 24
185.191.230.0/24 maxlen: 24
185.215.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:41:45:d7:4b:ad:94:57:59:65:18:af:24:c3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5af02640906e58d2be035760141f66170bfce869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:02:b2:ce:96:0e:18:ca:2c:56:2e:37:4c:
94:6f:0f:bd:ad:2e:24:14:13:8d:de:6c:ea:1b:ee:
49:c3:b4:70:7a:96:86:e2:e6:91:3c:22:87:7c:4e:
29:22:0d:f2:ba:27:36:17:a1:aa:52:49:90:88:9d:
28:40:57:96:ca:52:4f:3d:86:39:7a:32:fb:c1:2c:
42:54:1c:fc:1b:72:d1:ea:a8:7d:2c:74:5a:f7:05:
00:f0:ae:f2:18:1a:21:c2:d1:7f:2f:2c:53:11:6d:
32:3c:9d:3c:f0:5e:4e:58:dd:70:00:61:39:04:bd:
f0:63:88:66:47:f6:80:07:7b:f2:1f:4f:74:6e:8d:
8a:c7:38:13:15:2d:9c:fc:02:1b:de:25:fb:0d:ec:
6e:ea:5e:da:bc:70:ee:ca:a0:db:65:7b:42:56:73:
86:40:3b:81:3e:3c:cb:a8:8e:b6:a4:f5:00:96:0f:
fb:95:ac:c4:d8:53:c7:3e:b5:e2:2d:62:eb:5d:3d:
8a:cc:3c:99:9d:fa:fa:76:65:9e:4d:34:d7:29:9f:
bf:df:78:3b:93:d9:2a:89:c8:0f:1d:20:c6:6b:1d:
f7:57:f7:da:d5:12:b1:90:ba:ad:41:05:3f:5d:f4:
ed:44:cd:aa:f5:bb:8d:83:2b:51:43:58:af:59:44:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:26:40:90:6E:58:D2:BE:03:57:60:14:1F:66:17:0B:FC:E8:69
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.86.0/24
185.191.230.0/24
185.215.149.0/24
Signature Algorithm: sha256WithRSAEncryption
05:af:ec:fc:fb:91:7b:9d:bd:22:ff:de:1d:5d:a8:ec:d6:ea:
1d:f3:71:e3:8e:c4:6c:4b:e1:23:71:39:c8:f0:fc:02:79:0c:
32:c8:17:66:28:ad:49:a1:4e:43:19:22:03:43:93:fa:86:e7:
46:dd:57:76:88:38:f3:15:7b:11:47:81:52:15:24:53:42:c7:
4b:15:41:78:29:5d:3a:64:d9:6e:54:94:81:37:6f:40:d6:f6:
e9:f0:4f:e2:32:a8:e5:9c:5a:0b:b8:78:47:94:44:60:ac:b0:
8c:09:87:c9:5d:50:ce:39:e4:bc:4e:36:aa:22:b8:b3:15:f3:
1a:42:d3:c3:33:b6:a5:1e:38:50:9b:ab:42:ba:78:e3:8c:81:
29:eb:cb:15:3d:6c:28:f0:95:f6:4a:64:30:a4:5f:61:ca:f7:
c5:6a:57:2c:e0:b8:67:b8:65:cc:21:00:14:43:4d:17:09:27:
f4:23:44:19:ca:88:42:e9:b2:5b:ba:2d:05:ee:51:78:09:35:
98:4b:a9:7f:9d:19:97:9f:1f:76:3a:ef:8e:1b:69:a9:ad:e0:
93:46:e9:23:55:06:91:49:a1:8c:fb:e9:a8:8d:52:34:09:62:
f0:d2:4f:0a:f4:41:9d:6a:db:3c:09:aa:b4:a1:78:4f:2a:67:
f3:83:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:57:37 2026 by rpki-client