Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/WosjHObpSZ8Ehhslkr2rU7t5GH4.roa
File: WosjHObpSZ8Ehhslkr2rU7t5GH4.roa (raw, json)
Hash identifier: KzCinsBNi7eihM3nBQPuyjUCIy5zaqd0d8R2ZQgG9wI=
Subject key identifier: 5A:8B:23:1C:E6:E9:49:9F:04:86:1B:25:92:BD:AB:53:BB:79:18:7E
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019FF6FAFB59D18D17B5D536A3ACE0231883
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/WosjHObpSZ8Ehhslkr2rU7t5GH4.roa
Signing time: Wed 12 Aug 2026 17:17:51 +0000
ROA not before: Wed 12 Aug 2026 17:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6206
IP address blocks: 87.58.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:fa:fb:59:d1:8d:17:b5:d5:36:a3:ac:e0:23:18:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Aug 12 17:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a8b231ce6e9499f04861b2592bdab53bb79187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:74:c4:49:4e:8d:b8:1f:f2:ab:98:25:65:
6f:48:c7:60:d0:f5:5f:d1:3b:f2:a2:c0:6c:9e:7f:
70:71:32:64:f9:7e:ab:df:48:82:6f:d2:2a:0e:21:
cc:08:5b:42:7a:93:b9:4a:90:63:8a:8a:c4:d1:d9:
8f:57:12:8f:08:bb:64:f8:63:c2:a7:a3:d7:f4:e2:
e3:14:91:3c:89:0a:f3:0a:4b:3f:7c:d8:54:98:02:
3c:9c:37:26:13:05:3f:bd:00:42:1e:c4:af:2b:fc:
8e:05:d7:e4:43:9f:99:18:81:15:b7:3d:cf:56:ea:
08:18:9e:26:8f:04:ac:23:bd:ca:76:24:cb:0f:f0:
3d:78:97:0a:ac:5b:4c:0c:e6:1f:8b:75:cc:ba:5c:
d0:fa:e0:d4:17:f0:bf:5f:95:5a:3a:d3:38:4a:8e:
0b:d8:05:1c:20:e7:9e:18:34:18:be:c7:44:22:43:
d0:e8:54:f5:58:9a:73:36:c5:d9:7d:73:92:9f:68:
e5:c1:8d:7d:d7:0e:5d:01:55:9f:a7:bd:39:9b:80:
2b:d2:ba:b2:71:64:4e:f2:6b:3d:d3:f3:9a:83:37:
15:12:c4:0c:50:58:c2:ae:7b:f7:08:4a:43:1e:84:
26:c6:10:35:44:4d:c3:34:2e:a9:e6:0a:f9:ba:4f:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:23:1C:E6:E9:49:9F:04:86:1B:25:92:BD:AB:53:BB:79:18:7E
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/WosjHObpSZ8Ehhslkr2rU7t5GH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.129.0/24
Signature Algorithm: sha256WithRSAEncryption
50:80:d5:7e:4d:9a:4d:ee:98:af:a1:3b:32:8f:cc:89:eb:da:
a9:91:f4:95:79:03:c6:0e:74:0e:2f:4c:bd:28:ea:cf:bd:81:
bc:a3:ed:cb:47:63:5b:a4:5b:d3:7c:66:bb:bc:e5:1a:99:6d:
98:e4:63:3b:2b:2a:44:a9:c3:59:24:92:ef:6b:0c:51:4a:b1:
cd:00:e7:22:13:53:d4:f7:a0:33:6b:c9:f4:5d:f0:37:66:cc:
64:62:46:6a:8b:59:50:08:59:14:e7:e1:37:fd:cb:fc:60:5a:
e2:48:66:99:da:19:4b:54:5c:71:3d:80:d9:96:f8:e4:41:51:
90:96:67:a0:28:18:68:ef:42:7b:94:71:7e:cc:32:b1:59:cf:
12:10:0b:c5:90:77:fd:be:d6:d1:aa:5a:81:a2:79:ea:b3:ef:
76:ea:5b:ea:35:a3:ba:97:a0:f3:70:31:6a:15:2a:94:ae:1a:
ea:a6:31:af:c7:04:91:6a:0e:58:87:fd:96:e7:c7:97:01:d4:
4a:1e:f8:b9:29:10:43:49:33:88:34:d1:17:3d:aa:72:78:e8:
46:23:4e:e5:36:36:bb:87:ed:a3:b7:79:62:08:75:8d:7b:65:
50:c9:8f:36:f5:67:c0:4f:7d:9a:12:87:bd:60:d4:7e:ca:fb:
6f:c1:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:56:00 2026 by rpki-client