Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/WY06-fQH1sr9LbxJ2fzSyQGVf2A.roa
File: WY06-fQH1sr9LbxJ2fzSyQGVf2A.roa (raw, json)
Hash identifier: Jj0ifAVA2VOVU8XuAJ0EEBKW9/5TWme2xuNmmdIM59g=
Subject key identifier: 59:8D:3A:F9:F4:07:D6:CA:FD:2D:BC:49:D9:FC:D2:C9:01:95:7F:60
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 019E4F5E8BD0E1C7C931769DDB27B69A1551
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/WY06-fQH1sr9LbxJ2fzSyQGVf2A.roa
Signing time: Fri 22 May 2026 11:07:36 +0000
ROA not before: Fri 22 May 2026 11:07:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199734
IP address blocks: 193.148.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:5e:8b:d0:e1:c7:c9:31:76:9d:db:27:b6:9a:15:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: May 22 11:07:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=598d3af9f407d6cafd2dbc49d9fcd2c901957f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:27:d1:fd:3d:06:f3:8f:e8:55:06:ad:06:
25:35:bc:e5:ac:75:9c:53:fa:2c:3b:0d:6f:6e:a4:
43:b4:d6:eb:24:75:db:d6:74:d3:b2:71:9d:55:72:
d5:c6:3a:3e:dc:d5:ef:e6:70:98:94:6c:66:24:ce:
9b:70:dd:1c:be:ea:c0:75:6f:e0:b7:4b:79:dc:7f:
a0:f0:d6:8b:52:3c:71:8e:5f:6f:01:e3:fc:4f:df:
ec:15:05:63:db:4c:84:98:53:83:06:f7:1e:74:da:
3c:d9:ff:e2:99:85:07:94:77:92:1d:8e:2a:b3:90:
a1:16:8c:29:34:84:52:6f:76:c5:f7:5a:34:14:91:
83:b5:b2:c4:64:1e:7a:2d:ae:7e:5b:21:d4:be:82:
5c:ec:ce:4d:e9:1e:a0:01:a7:88:63:be:71:c6:01:
0e:92:94:d3:7a:e3:12:d8:d7:ee:8d:f6:23:62:ee:
47:44:c2:90:af:2f:9b:23:66:49:a8:7f:65:28:f2:
7b:44:c1:ee:1a:e9:40:e9:90:d8:08:b7:b6:4f:c4:
ff:2f:50:ae:56:a0:8b:f8:68:dc:73:29:b2:75:40:
ff:81:0f:df:a8:72:ec:ec:b2:e4:78:90:1a:36:36:
5f:89:5d:e6:26:d2:8a:b0:d2:53:d0:1b:f1:db:ad:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:3A:F9:F4:07:D6:CA:FD:2D:BC:49:D9:FC:D2:C9:01:95:7F:60
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/WY06-fQH1sr9LbxJ2fzSyQGVf2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.47.0/24
Signature Algorithm: sha256WithRSAEncryption
66:70:5c:2d:a7:89:04:5c:7f:23:e5:3b:ab:7e:f9:0e:68:2b:
92:43:b6:35:87:85:f9:0c:52:e0:83:9f:ce:55:2c:d7:d6:eb:
e5:c8:f0:0e:9b:d8:37:4a:fa:97:2c:a6:5e:d9:94:08:ba:79:
38:4d:55:d5:27:0b:35:6d:43:1a:4b:30:80:08:67:61:3b:a1:
60:3b:2c:8a:dd:0b:9f:06:1b:2c:63:45:79:5b:54:4c:c7:83:
87:8e:8e:31:79:79:8b:52:60:25:a2:ba:0c:a5:ee:91:cc:2e:
29:29:d4:9e:be:c1:a4:ba:56:d5:44:e3:f4:5a:c0:51:10:59:
13:46:97:73:44:a4:74:e1:c9:6b:fb:c0:c4:d9:51:5e:f5:8f:
86:e3:1a:e5:3e:50:53:e2:10:98:72:a5:58:60:b3:2f:3a:9a:
04:35:57:05:a5:7c:99:7c:17:89:6b:3f:af:fb:f6:3b:d9:9f:
f3:08:c7:0b:81:3d:f6:01:97:a3:d2:17:c4:f2:21:08:ed:b1:
35:dd:0e:b4:9a:59:bf:da:1e:c8:1a:72:73:80:06:94:3c:77:
3d:b4:d2:b2:ca:c7:6e:e5:7e:43:18:14:27:b8:35:28:6e:39:
c3:25:23:1e:92:18:f3:74:25:b1:1a:8c:99:51:ef:20:1c:62:
b4:25:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:44:23 2026 by rpki-client