Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/WFxFSkyv1EDPlFRdN4txSTBcfZo.roa
File: WFxFSkyv1EDPlFRdN4txSTBcfZo.roa (raw, json)
Hash identifier: 4yAjoNxUhhTojXa45rED5hdcuqKaCUoV/FYe0yrnlTY=
Subject key identifier: 58:5C:45:4A:4C:AF:D4:40:CF:94:54:5D:37:8B:71:49:30:5C:7D:9A
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A182B3BDD51E3D4A3C3D6859529F9BE083
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/WFxFSkyv1EDPlFRdN4txSTBcfZo.roa
Signing time: Wed 28 Oct 2026 13:29:39 +0000
ROA not before: Wed 28 Oct 2026 13:29:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 37.235.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:b3:bd:d5:1e:3d:4a:3c:3d:68:59:52:9f:9b:e0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 28 13:29:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=585c454a4cafd440cf94545d378b7149305c7d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:e5:ad:57:2d:62:bd:08:64:f0:b5:63:8a:
13:22:74:48:3e:ac:49:2e:f7:90:27:bc:43:ba:a0:
85:dd:bf:fc:bb:3f:dc:46:3f:44:97:32:5f:95:c7:
3b:22:89:8e:16:18:14:be:49:2f:7b:70:c0:0d:23:
b7:e8:ef:43:df:61:c5:d4:01:75:44:a3:83:24:ef:
e9:b1:5e:44:3f:04:5e:2a:e7:23:09:84:d4:cf:c2:
25:ef:68:a4:b0:90:0f:a6:08:db:b9:e5:95:82:02:
f3:10:25:40:5b:fe:56:fb:78:ea:e4:e5:2c:cf:8b:
39:02:02:ae:85:c6:d7:52:e5:aa:fc:4b:d8:cd:35:
68:11:87:29:bc:4f:35:2c:01:a4:5e:e0:c5:15:91:
23:91:3f:b5:7e:d3:f3:a4:66:15:cc:24:eb:95:fb:
93:4f:11:51:6a:ac:59:2e:50:b3:71:cc:de:b9:16:
c8:72:39:ba:40:c0:b5:76:2a:db:25:e3:3b:68:fa:
b5:6f:ec:53:a7:98:e6:2f:5f:a3:4c:18:a9:ac:58:
a5:40:95:b8:80:01:95:72:1d:34:dc:39:77:e1:26:
ea:02:2b:a6:e3:9a:56:cb:5a:8b:00:83:92:99:f6:
bc:09:be:df:9e:b1:ab:fa:d6:e5:d3:7e:0d:b7:20:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:45:4A:4C:AF:D4:40:CF:94:54:5D:37:8B:71:49:30:5C:7D:9A
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/WFxFSkyv1EDPlFRdN4txSTBcfZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3a:99:1c:07:70:5f:76:20:cd:66:1c:dd:d0:e8:29:e8:b5:
e7:55:cc:27:8f:80:ef:e5:cf:6d:3f:fa:0f:a4:b0:c0:6e:18:
df:3a:b4:51:d9:10:b2:aa:2c:4c:d8:e1:d1:73:cd:5a:52:f7:
55:80:d9:ab:90:20:24:62:85:6c:02:57:08:eb:cf:f2:02:e1:
e1:51:44:e9:b8:30:6b:b4:8a:8a:57:87:28:03:c7:22:b1:95:
0e:06:61:1c:9c:85:00:31:fd:b6:b3:7e:25:be:0c:d3:81:e1:
e2:c1:eb:70:05:44:5d:75:89:89:a2:04:0c:2c:ed:3d:3a:06:
c4:06:ae:6d:48:42:ce:d2:56:44:96:55:6a:cf:78:a1:7e:04:
9c:c8:f5:85:7b:73:2d:13:49:d5:20:f4:7d:a7:4b:18:06:f2:
26:02:50:3e:00:18:e3:4b:ce:cf:47:d7:c7:4b:1d:1d:53:a2:
f5:7f:84:08:28:49:bb:87:3d:43:68:d2:93:ed:80:49:2d:57:
61:f0:70:07:6b:27:b8:2f:56:b4:e5:dc:9e:65:36:ab:ce:d2:
e1:cf:27:46:71:ab:96:b4:ee:b3:2d:27:4b:a5:43:f7:8d:35:
ec:bb:14:b0:9d:9e:6a:9e:ed:17:cd:aa:eb:da:1d:c8:3f:fd:
3f:f3:77:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGCs73VHj1KPD1oWVKfm+CDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNTJiZmIyZDYyZGJlYjc2ODczMzQ4NzQ4N2NiNjA0Y2Fl
ZmMzOTQwHhcNMjYxMDI4MTMyOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODVjNDU0YTRjYWZkNDQwY2Y5NDU0NWQzNzhiNzE0OTMwNWM3ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsblrVctYr0IZPC1Y4oTInRIPqxJ
LveQJ7xDuqCF3b/8uz/cRj9ElzJflcc7IomOFhgUvkkve3DADSO36O9D32HF1AF1
RKODJO/psV5EPwReKucjCYTUz8Il72iksJAPpgjbueWVggLzECVAW/5W+3jq5OUs
z4s5AgKuhcbXUuWq/EvYzTVoEYcpvE81LAGkXuDFFZEjkT+1ftPzpGYVzCTrlfuT
TxFRaqxZLlCzcczeuRbIcjm6QMC1dirbJeM7aPq1b+xTp5jmL1+jTBiprFilQJW4
gAGVch003Dl34SbqAium45pWy1qLAIOSmfa8Cb7fnrGr+tbl034NtyAGlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhcRUpMr9RAz5RUXTeLcUkwXH2aMB8GA1UdIwQY
MBaAFGJSv7LWLb63aHM0h0h8tgTK78OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWxLX3N0WXR2cmRvY3pTSFNIeTJCTXJ2dzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9jMWFiMGUtZjFkYy00M2YyLTg4Njgt
NzMyNTIzODNlOWU2LzEvV0Z4RlNreXYxRURQbEZSZE40dHhTVEJjZlpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9jMWFiMGUtZjFkYy00M2YyLTg4NjgtNzMyNTIzODNlOWU2
LzEvWWxLX3N0WXR2cmRvY3pTSFNIeTJCTXJ2dzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJevxMA0G
CSqGSIb3DQEBCwUAA4IBAQAfOpkcB3BfdiDNZhzd0Ogp6LXnVcwnj4Dv5c9tP/oP
pLDAbhjfOrRR2RCyqixM2OHRc81aUvdVgNmrkCAkYoVsAlcI68/yAuHhUUTpuDBr
tIqKV4coA8cisZUOBmEcnIUAMf22s34lvgzTgeHiwetwBURddYmJogQMLO09OgbE
Bq5tSELO0lZEllVqz3ihfgScyPWFe3MtE0nVIPR9p0sYBvImAlA+ABjjS87PR9fH
Sx0dU6L1f4QIKEm7hz1DaNKT7YBJLVdh8HAHaye4L1a05dyeZTarztLhzydGcauW
tO6zLSdLpUP3jTXsuxSwnZ5qnu0Xzarr2h3IP/0/83cQ
-----END CERTIFICATE-----
Generated at Thu Nov 5 01:42:49 2026 by rpki-client