Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/WpnuLvnippB8tVyEsrRUR3ewk_U.roa
File: WpnuLvnippB8tVyEsrRUR3ewk_U.roa (raw, json)
Hash identifier: BHza+2duMNR9nIMzQqoFfpCBTh9mkWoaMy7myW/tl3E=
Subject key identifier: 5A:99:EE:2E:F9:E2:A6:90:7C:B5:5C:84:B2:B4:54:47:77:B0:93:F5
Certificate issuer: /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial: 019F2368AC8A751B47C993EB94308FE0D4B6
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/WpnuLvnippB8tVyEsrRUR3ewk_U.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134926
IP address blocks: 89.47.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ac:8a:75:1b:47:c9:93:eb:94:30:8f:e0:d4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a99ee2ef9e2a6907cb55c84b2b4544777b093f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:62:a4:ef:f1:12:a9:b0:bb:c8:2d:1a:74:
a6:75:6c:82:80:3b:7f:89:1b:3e:49:af:b0:34:b7:
2c:ed:d1:b8:a9:2f:fb:9b:67:63:c0:26:5f:29:04:
50:1e:65:3c:a8:08:aa:4e:44:d1:22:aa:88:b9:fc:
6f:6c:95:32:6c:a0:2d:ff:7d:f3:a9:23:e1:1c:f6:
8b:8b:1d:db:36:2f:11:19:ed:3b:73:23:9e:fb:ab:
3b:e5:4a:78:d1:d3:db:1e:1d:dc:0a:81:3e:9a:82:
37:b6:10:23:90:78:2d:1e:df:ef:bf:23:be:7e:9f:
d3:72:4c:a3:d3:49:a3:2b:0f:1d:64:fa:aa:17:79:
d4:b6:aa:9f:24:62:13:67:5b:fe:d6:5e:3f:13:86:
91:29:16:49:56:3d:6c:19:91:d7:2f:2f:1c:ce:7c:
08:2c:83:c9:7e:f5:6f:e6:aa:6d:dc:98:de:61:8e:
6c:36:55:a6:12:a7:c2:77:69:1c:4b:02:ca:93:7b:
8c:ed:48:be:92:63:1d:2e:9e:74:56:6e:b0:3c:65:
19:ae:87:ae:49:6f:0b:00:d1:f7:fa:a4:6c:91:ec:
35:23:c5:d3:44:31:fa:f0:8c:37:3d:b4:96:5b:dd:
48:13:f3:b3:81:19:63:de:42:ed:53:77:4d:a8:d7:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:EE:2E:F9:E2:A6:90:7C:B5:5C:84:B2:B4:54:47:77:B0:93:F5
X509v3 Authority Key Identifier:
keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/WpnuLvnippB8tVyEsrRUR3ewk_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8f:09:1d:83:5a:8d:e7:1b:97:1d:aa:ca:6d:64:81:4a:bb:
9b:cd:95:c0:36:ee:e8:da:0a:68:a4:89:a4:15:91:c4:67:fc:
f8:57:dc:37:85:9d:17:c4:da:9f:3a:03:2a:5b:9d:6e:87:7c:
33:d3:b7:a0:66:32:14:b9:a4:75:f0:86:5f:60:d6:1c:2d:21:
ed:23:a5:2d:8c:97:ed:8b:27:6a:78:e4:a8:0c:15:6e:e1:e5:
24:ba:26:d0:c1:db:e6:00:5c:e9:7d:78:bf:f9:5c:eb:28:3f:
33:28:2a:f1:42:7d:c9:33:90:e3:22:6d:ef:20:69:a3:be:f8:
ce:95:c7:ce:4e:ba:c0:74:16:82:c8:d6:8e:97:be:f1:1f:81:
d0:e3:e5:d8:14:3b:0c:6f:f9:51:78:c8:70:b4:f8:37:c7:24:
a7:04:57:f8:f5:46:fe:e5:24:f7:bf:d9:8b:64:5c:b8:f8:9f:
37:6a:d4:12:77:41:3a:79:40:b9:3f:3c:02:13:18:2f:92:6c:
42:a0:d6:3f:cd:76:8c:1d:87:1c:34:41:81:a6:1f:80:99:df:
5e:bf:08:c5:69:65:f2:19:56:dc:f6:ae:3d:21:18:bd:9a:6d:
d3:ae:93:55:9d:e5:55:89:1e:d0:fd:38:2e:6d:00:f1:a1:67:
05:1e:04:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:24 2026 by rpki-client