Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WOc_GicT2zv_V2wc2MqT10LuFpw.roa
File: WOc_GicT2zv_V2wc2MqT10LuFpw.roa (raw, json)
Hash identifier: l+OlT0fpER6K1DlzhvcbOhv3QI9VUJNw1daZ6B8ocNM=
Subject key identifier: 58:E7:3F:1A:27:13:DB:3B:FF:57:6C:1C:D8:CA:93:D7:42:EE:16:9C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A02C71C54DE815C37CB175C009076CDA3E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WOc_GicT2zv_V2wc2MqT10LuFpw.roa
Signing time: Sun 23 Aug 2026 02:27:28 +0000
ROA not before: Sun 23 Aug 2026 02:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213323
IP address blocks: 2.26.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2c:71:c5:4d:e8:15:c3:7c:b1:75:c0:09:07:6c:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 23 02:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58e73f1a2713db3bff576c1cd8ca93d742ee169c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:ab:18:48:8b:c9:13:fc:e7:16:5a:54:7d:
2d:97:cf:fc:05:55:6d:9b:be:aa:eb:8c:37:0f:76:
e3:f2:e0:c4:53:4e:8d:d1:17:ee:99:19:5a:ba:ee:
1d:71:42:cd:e5:a4:37:ad:80:31:5d:52:2b:ec:a3:
1f:50:d3:a8:67:3f:0f:e8:98:5b:98:77:6e:ea:5d:
fd:58:e2:2b:40:9d:3a:2d:ec:48:2c:2f:01:6e:68:
8e:9c:4a:4d:b3:d7:fe:2d:a9:d2:0f:5d:c7:7b:f6:
d6:1d:6e:b9:66:5d:f8:94:51:a3:83:fd:dd:46:57:
30:5c:c6:00:fa:bd:07:80:cc:7f:f4:6e:7b:a1:ab:
6f:ee:01:ac:58:12:4a:68:5f:96:4f:5c:03:7e:71:
97:eb:f6:25:87:a7:60:43:da:19:5a:8f:ea:21:68:
3a:18:dc:ea:ee:a5:26:fe:6e:e0:ec:45:c1:ce:8e:
49:3a:97:e7:c9:12:5a:31:db:52:43:af:a0:06:a8:
66:9a:d8:bd:68:48:cc:95:59:74:b7:40:2f:33:30:
eb:64:4f:82:1a:63:72:14:ec:b8:7b:18:b0:ef:20:
db:02:6f:8c:c0:0b:43:be:61:fe:a6:45:44:f9:47:
a4:5d:d8:bd:dc:5f:92:98:9f:a6:2e:fc:a2:c1:3e:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E7:3F:1A:27:13:DB:3B:FF:57:6C:1C:D8:CA:93:D7:42:EE:16:9C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WOc_GicT2zv_V2wc2MqT10LuFpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:10:76:65:bd:15:cb:ab:45:c3:33:00:ec:8c:ca:0d:14:35:
fd:55:d9:63:4d:35:d1:41:4c:4d:9c:71:06:f9:aa:2a:81:bd:
dc:08:ae:73:d9:59:b4:c2:ef:c1:f5:31:ef:0e:05:b2:1a:35:
a0:14:e4:dc:bb:ae:87:70:c9:44:10:d5:3e:bc:0c:93:64:43:
82:c2:d2:4b:70:ab:89:dd:7c:40:78:2b:9d:f5:47:f3:8c:64:
35:ab:c7:72:b2:05:23:08:c9:3b:2a:f9:06:47:e3:ad:4b:5d:
8e:ae:4f:66:44:e1:74:ad:81:bc:ce:f4:2c:dd:04:48:48:da:
39:93:bd:cb:7f:54:64:a6:2d:cc:55:94:0e:2d:84:6c:5b:3a:
9b:8d:98:29:58:da:76:1b:ff:d7:3d:25:de:e3:90:4d:89:48:
a5:00:5a:fc:80:8e:46:84:37:eb:40:2e:55:fb:6d:fc:11:b2:
cf:60:da:a4:5e:09:87:11:dd:d8:0b:d2:54:18:66:6d:5f:e1:
8f:ea:08:02:11:01:63:95:be:8c:c2:e5:97:91:97:3b:8b:a0:
27:e6:cc:78:90:ad:1f:ed:20:81:d3:3e:28:bd:e2:4a:6c:21:
77:e8:f1:0d:8f:a3:1e:ad:47:e2:10:43:7b:87:ef:af:d2:e0:
56:d6:0f:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAsccVN6BXDfLF1wAkHbNo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODIzMDIyNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGU3M2YxYTI3MTNkYjNiZmY1NzZjMWNkOGNhOTNkNzQyZWUxNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthKrGEiLyRP85xZaVH0tl8/8BVVt
m76q64w3D3bj8uDEU06N0RfumRlauu4dcULN5aQ3rYAxXVIr7KMfUNOoZz8P6Jhb
mHdu6l39WOIrQJ06LexILC8BbmiOnEpNs9f+LanSD13He/bWHW65Zl34lFGjg/3d
RlcwXMYA+r0HgMx/9G57oatv7gGsWBJKaF+WT1wDfnGX6/Ylh6dgQ9oZWo/qIWg6
GNzq7qUm/m7g7EXBzo5JOpfnyRJaMdtSQ6+gBqhmmti9aEjMlVl0t0AvMzDrZE+C
GmNyFOy4exiw7yDbAm+MwAtDvmH+pkVE+UekXdi93F+SmJ+mLvyiwT5CYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFjnPxonE9s7/1dsHNjKk9dC7hacMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvV09jX0dpY1QyenZfVjJ3YzJNcVQxMEx1RnB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhqqMA0G
CSqGSIb3DQEBCwUAA4IBAQANEHZlvRXLq0XDMwDsjMoNFDX9VdljTTXRQUxNnHEG
+aoqgb3cCK5z2Vm0wu/B9THvDgWyGjWgFOTcu66HcMlEENU+vAyTZEOCwtJLcKuJ
3XxAeCud9UfzjGQ1q8dysgUjCMk7KvkGR+OtS12Ork9mROF0rYG8zvQs3QRISNo5
k73Lf1Rkpi3MVZQOLYRsWzqbjZgpWNp2G//XPSXe45BNiUilAFr8gI5GhDfrQC5V
+238EbLPYNqkXgmHEd3YC9JUGGZtX+GP6ggCEQFjlb6MwuWXkZc7i6An5sx4kK0f
7SCB0z4oveJKbCF36PENj6MerUfiEEN7h++v0uBW1g9X
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:37 2026 by rpki-client