Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/W3_DRcLLlYo99poHm90MnV-gCbM.roa
File: W3_DRcLLlYo99poHm90MnV-gCbM.roa (raw, json)
Hash identifier: Y4JwWU1Z1/t83uctAvCDcPQavmMxmbdjUMfqa1rqbhg=
Subject key identifier: 5B:7F:C3:45:C2:CB:95:8A:3D:F6:9A:07:9B:DD:0C:9D:5F:A0:09:B3
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019E89737CD474307F9585AA6D3E1666F64D
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/W3_DRcLLlYo99poHm90MnV-gCbM.roa
Signing time: Tue 02 Jun 2026 17:48:27 +0000
ROA not before: Tue 02 Jun 2026 17:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0f:e3c0::/29 maxlen: 29
2a10:a9c0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:bd40::/29 maxlen: 29
2a13:be40::/29 maxlen: 29
2a13:bec0::/29 maxlen: 29
2a13:d0c0::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:73:7c:d4:74:30:7f:95:85:aa:6d:3e:16:66:f6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jun 2 17:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b7fc345c2cb958a3df69a079bdd0c9d5fa009b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:64:62:b2:90:39:f9:26:5a:41:8b:7e:bd:
dc:4a:d9:bd:db:8d:98:e8:cc:77:6f:24:46:b3:f7:
72:7c:f7:8c:cd:70:72:fb:e8:14:1f:30:3d:ee:7d:
c4:77:e9:60:50:ad:ee:fc:73:97:81:db:19:c8:ed:
e9:cf:75:69:00:fc:95:0b:aa:66:49:ef:0f:7e:07:
32:2a:c9:d7:6b:45:d9:e8:7e:a6:f6:4a:26:6d:4c:
b7:72:02:a6:72:c6:10:1f:91:16:2f:ed:aa:9a:c9:
43:44:e3:8e:6f:29:d8:04:2a:a0:fb:89:36:ca:02:
ae:08:cd:f0:89:6b:d0:c1:d7:d5:84:00:5f:d0:be:
be:26:9b:a4:3d:f9:39:0d:a2:fa:2a:47:00:80:05:
e7:dd:2d:3e:40:13:86:fe:88:ad:cb:6d:9a:50:da:
d6:f3:65:46:15:ce:b4:74:07:dc:3f:5d:8b:d1:27:
4d:71:91:cd:9f:96:77:6f:69:96:62:33:c2:6f:e3:
dd:e6:6d:ec:0a:87:02:f6:79:9e:76:82:ed:0d:86:
25:ae:ae:7a:76:1a:54:b7:2c:69:fd:1d:a3:59:98:
4b:7e:5a:7b:9e:86:81:59:4d:10:c5:c5:b7:14:2a:
fb:11:68:7d:75:21:5f:15:2a:63:c0:38:48:c1:00:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:C3:45:C2:CB:95:8A:3D:F6:9A:07:9B:DD:0C:9D:5F:A0:09:B3
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/W3_DRcLLlYo99poHm90MnV-gCbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e3c0::/29
2a10:a9c0::/29
2a13:b740::/29
2a13:bd40::/29
2a13:be40::/29
2a13:bec0::/29
2a13:d0c0::/29
2a13:d1c0::/29
2a13:dd40::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
75:1f:d8:45:9c:e6:28:6b:0a:97:0e:76:8b:db:e3:3d:cb:91:
80:33:a9:f4:58:9a:9d:0d:ff:62:81:46:6f:95:37:1b:95:c2:
d5:c7:45:db:b0:5d:33:8d:0a:dd:03:7a:6e:5f:52:3a:e4:48:
73:17:f5:b8:29:38:27:e9:8b:e8:fe:39:ce:dd:24:4e:4a:77:
fc:1e:8d:97:af:62:56:1f:f0:12:aa:c1:4b:0c:d5:5f:82:b0:
7f:07:cf:9c:b7:27:34:77:cf:92:49:42:45:66:1e:1c:56:23:
10:46:b9:69:de:e5:1e:3a:27:3d:48:57:d3:11:4c:c7:80:84:
ac:65:f7:57:76:59:e9:c7:d4:9d:24:62:aa:7c:2c:b6:36:93:
ce:4b:9e:9c:76:b3:f1:4d:15:f1:73:14:35:e3:f4:cb:12:d0:
73:57:05:25:11:72:ff:6e:cd:4a:86:db:3c:65:d8:ee:24:b5:
d9:d6:39:b8:db:a9:54:87:0f:60:28:32:6b:55:dd:76:42:fa:
f9:d2:61:c3:22:e2:8b:4c:a7:c9:7c:b3:b8:b8:96:d5:bb:cc:
33:27:ac:4d:1a:e2:ca:80:8e:37:1a:77:9e:0c:10:53:6c:23:
43:0d:92:23:2f:d2:97:7e:0f:1a:e4:cb:e8:de:da:93:f0:6c:
94:89:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:27 2026 by rpki-client