Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/WxS3BSajLMECWFMvbBGsAj_629A.roa
File: WxS3BSajLMECWFMvbBGsAj_629A.roa (raw, json)
Hash identifier: +48WTi7sTwICFjnEXgX2rN030U9GZbYMwpeYzONzC9w=
Subject key identifier: 5B:14:B7:05:26:A3:2C:C1:02:58:53:2F:6C:11:AC:02:3F:FA:DB:D0
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01A121F5BD1B8628B212E0017618B775B5DA
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/WxS3BSajLMECWFMvbBGsAj_629A.roa
Signing time: Fri 09 Oct 2026 18:38:35 +0000
ROA not before: Fri 09 Oct 2026 18:38:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49127
IP address blocks: 162.217.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:f5:bd:1b:86:28:b2:12:e0:01:76:18:b7:75:b5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Oct 9 18:38:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b14b70526a32cc10258532f6c11ac023ffadbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:14:e8:f6:21:9f:6a:9e:07:cc:3a:ad:dc:
64:1f:79:7f:3a:6f:fa:7e:6a:52:c0:c2:c9:c3:40:
82:9c:c1:ac:a2:23:80:bc:7a:de:bf:a0:b8:a2:4f:
df:a8:0b:87:d0:f2:b9:83:64:52:bd:57:49:7c:15:
12:71:5f:7c:83:b2:a7:b2:26:50:53:7c:39:79:d0:
83:6a:fb:7b:10:52:84:cf:81:06:54:53:f4:28:cb:
09:86:5d:ab:63:d7:c2:58:96:16:be:4e:26:27:d0:
2c:ba:b0:1b:be:d8:12:ab:bf:4d:a7:05:21:e6:46:
7c:f3:32:63:03:a7:39:f5:97:0b:5e:fb:f6:d3:9a:
80:83:6c:11:a9:c2:cc:df:d8:4b:94:d1:ab:d3:a4:
98:26:82:d7:f3:69:0e:1a:f0:62:9e:db:d2:1a:08:
a9:05:24:43:1d:20:fd:e4:11:98:92:79:88:f1:f3:
93:c4:2e:a8:ef:b3:1a:61:9a:77:37:16:21:8c:ab:
59:84:12:41:95:37:d2:3c:ac:05:03:80:de:5b:cc:
b3:e5:93:4c:24:88:87:aa:45:d8:30:a9:e7:a0:bc:
85:90:12:85:1f:40:81:61:c8:a2:e0:9a:7f:71:37:
0b:46:0a:34:e7:5c:a5:8b:b2:69:98:58:4d:d0:19:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:14:B7:05:26:A3:2C:C1:02:58:53:2F:6C:11:AC:02:3F:FA:DB:D0
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/WxS3BSajLMECWFMvbBGsAj_629A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.217.249.0/24
Signature Algorithm: sha256WithRSAEncryption
50:96:c9:99:10:5f:7b:e4:45:95:51:7b:7b:98:de:18:2c:cc:
00:79:bc:58:79:9d:4d:d3:1b:98:86:00:c6:c6:9e:51:be:0b:
1e:22:f2:2a:d3:04:76:45:09:53:d3:ee:36:1d:56:91:59:16:
97:61:61:a4:b8:3a:73:de:43:90:a9:ff:b1:f4:86:68:31:99:
e7:b4:f5:5e:21:34:be:4a:7b:72:de:22:70:65:2f:fd:ac:2b:
0a:07:8d:94:f8:83:b7:e3:4d:e6:54:3e:3a:da:dc:9d:f4:a0:
f5:d0:d8:b8:50:0d:bc:c7:80:23:7e:3f:28:40:74:a7:3c:bb:
fa:8f:6f:51:5b:14:86:cf:6b:7a:0a:57:30:3b:19:e9:3e:88:
43:65:7a:76:cb:ab:5f:ac:07:e6:14:07:07:e1:d3:e2:03:b2:
57:3b:1a:9d:72:1d:28:95:a1:63:3a:4c:bf:84:20:6c:68:9d:
6c:fa:c2:9f:92:a2:7d:e8:14:22:6e:ec:9e:5f:54:f9:ce:aa:
2c:78:40:0a:b7:9c:dc:5a:c0:89:55:1b:a7:7b:42:8e:7a:f5:
25:a9:9d:4f:d1:db:a7:40:b1:69:1c:3e:fc:ff:b7:5c:25:c1:
25:e8:18:21:f8:de:a4:cc:4f:a8:bd:f2:b0:c7:0f:1f:9d:8d:
78:f2:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:56 2026 by rpki-client