Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/WS27Vcn_P-JjEnA1VAgcUUebIxo.roa
File: WS27Vcn_P-JjEnA1VAgcUUebIxo.roa (raw, json)
Hash identifier: q42P5hZCz6I8ZhvA8n9BJnQ0QoqITWfeNIwOtuEADkw=
Subject key identifier: 59:2D:BB:55:C9:FF:3F:E2:63:12:70:35:54:08:1C:51:47:9B:23:1A
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019F47F5DF9EB96675A8B3E65E895BBA194F
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/WS27Vcn_P-JjEnA1VAgcUUebIxo.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a11:9f80::/29 maxlen: 29
2a12:7500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:df:9e:b9:66:75:a8:b3:e6:5e:89:5b:ba:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=592dbb55c9ff3fe26312703554081c51479b231a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:7f:c9:ce:76:bc:2d:7c:74:3e:85:1a:cc:
be:52:fb:6e:58:f8:78:45:2b:b6:60:20:8c:66:08:
c9:df:28:e1:31:fe:c3:1d:22:c5:08:fa:a9:79:4a:
03:e7:e7:52:37:3d:9a:f3:da:13:89:87:6c:ce:5a:
70:93:fa:db:d8:40:d1:b4:00:ea:25:18:6f:e1:08:
d9:a5:ec:f8:6f:1a:6b:79:78:e8:a3:5c:92:19:3c:
cd:65:ec:91:31:8d:83:61:e5:cd:e2:36:ce:9d:b8:
db:d6:f2:23:dd:a6:00:8d:6f:0e:65:cb:e9:06:18:
1e:66:96:2e:11:e0:9b:46:06:e5:fa:8d:2a:d5:61:
2b:b8:15:5e:89:34:ec:36:26:71:6d:2e:60:58:58:
a4:d7:45:bd:2a:56:ea:05:09:2e:f1:10:22:57:b0:
b6:a8:a4:ac:aa:01:4e:4b:d8:42:b9:43:59:74:1f:
aa:d0:89:8e:ee:02:0d:96:37:f9:fc:00:24:f4:29:
56:00:6b:5d:60:a0:bb:79:80:02:b7:fd:a4:1f:8b:
92:3a:9c:e1:8d:a5:4a:e4:96:69:81:0b:22:28:24:
66:d0:f6:df:4d:a2:ca:f2:c1:a3:60:89:ef:bb:0c:
e4:92:59:67:b0:ab:80:a4:8e:eb:ee:08:3d:06:c6:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:BB:55:C9:FF:3F:E2:63:12:70:35:54:08:1C:51:47:9B:23:1A
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/WS27Vcn_P-JjEnA1VAgcUUebIxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9f80::/29
2a12:7500::/29
Signature Algorithm: sha256WithRSAEncryption
68:97:33:b0:f6:61:18:25:f2:f9:75:f9:5e:39:1e:31:60:6b:
00:ef:0b:59:44:b7:26:c4:73:fc:9e:aa:bf:22:af:96:db:dc:
b7:4e:6a:38:bb:86:9a:fe:af:9d:47:b4:f1:b2:42:7d:3d:4b:
58:de:f0:04:df:d9:e2:f9:73:cb:47:4f:4b:b3:97:85:e7:21:
f9:67:34:9b:73:c8:4d:46:71:a1:d8:fe:8e:30:ea:e6:2a:9a:
8a:2d:1d:7a:f7:f9:bc:3f:46:cd:0a:89:83:df:8b:22:58:2c:
b7:e8:b4:d0:91:8a:40:f1:b0:a4:86:e1:68:22:65:14:c0:c1:
d1:d1:32:43:c8:fb:a5:cb:22:db:76:18:f1:f1:ca:ca:35:64:
9d:56:29:4f:b2:a3:cb:81:24:6f:46:0e:af:57:b4:35:49:1a:
73:45:34:fd:00:3a:f0:50:e6:36:09:e8:b0:96:12:89:6e:b2:
98:c7:1d:96:54:4d:2b:ea:83:63:bd:ce:45:ae:f1:35:b5:76:
5e:86:ed:19:4a:38:74:0d:76:ce:07:74:e1:4c:84:68:a4:b2:
cd:66:95:2f:c6:5d:39:38:3d:50:ec:d5:39:2b:26:06:95:82:
83:54:fe:20:4b:3b:6a:73:36:2c:34:49:db:ea:98:f2:8d:cd:
94:cd:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:44 2026 by rpki-client