Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/wt2r6Yzd8Hwx_GZYha_gsGeRDHM.roa
File: wt2r6Yzd8Hwx_GZYha_gsGeRDHM.roa (raw, json)
Hash identifier: 668Gqe0Yb3WWkOx8z4hLgB7Db8Qd1jcbGhi1id4FSxY=
Subject key identifier: C2:DD:AB:E9:8C:DD:F0:7C:31:FC:66:58:85:AF:E0:B0:67:91:0C:73
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019FEF9695E1C01C17378C14C4FA2BF0825F
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/wt2r6Yzd8Hwx_GZYha_gsGeRDHM.roa
Signing time: Tue 11 Aug 2026 06:50:51 +0000
ROA not before: Tue 11 Aug 2026 06:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219004
IP address blocks: 87.58.129.0/24 maxlen: 24
2a14:ae00:112::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:96:95:e1:c0:1c:17:37:8c:14:c4:fa:2b:f0:82:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Aug 11 06:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2ddabe98cddf07c31fc665885afe0b067910c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:85:71:07:c2:df:2e:e9:3f:6e:0c:8b:f4:
b5:dc:7f:45:2d:18:0d:26:28:81:eb:45:bc:96:08:
83:b4:83:42:3d:6f:ed:e4:79:6a:85:01:32:8e:66:
3a:44:52:b8:ca:87:4e:63:ef:89:55:4f:c0:28:f3:
24:e9:ac:d0:0a:03:b5:a3:47:da:0a:6f:bd:66:65:
bf:79:74:79:26:79:b1:80:6f:58:e5:f2:d0:35:18:
72:c0:fb:fd:3e:25:6b:7c:08:f1:ee:44:52:fa:05:
76:d3:d0:49:73:71:e2:02:fe:b7:4d:47:15:7a:5e:
eb:16:3e:e6:23:60:7e:c1:dd:01:0c:f5:db:6c:09:
d4:75:81:9e:55:8b:ce:b7:8a:31:ba:ce:8a:38:fe:
c7:70:40:84:16:74:93:59:91:c1:9f:78:43:dd:51:
5e:b2:b2:63:62:17:17:e9:b0:c7:10:c8:18:f5:be:
5f:17:7f:7f:4f:14:bd:da:dd:bc:2f:3a:dd:e9:e5:
19:f3:e9:94:32:ed:dd:4f:99:18:30:1d:a5:d7:ae:
06:67:09:18:4e:7d:1b:54:4f:cd:83:ed:13:8b:08:
24:15:49:73:3e:f8:bf:50:29:bd:4e:0e:25:45:b0:
83:cf:05:9f:30:ba:48:97:90:86:cd:b9:6c:fa:a7:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:AB:E9:8C:DD:F0:7C:31:FC:66:58:85:AF:E0:B0:67:91:0C:73
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/wt2r6Yzd8Hwx_GZYha_gsGeRDHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.129.0/24
IPv6:
2a14:ae00:112::/48
Signature Algorithm: sha256WithRSAEncryption
0c:2e:ff:0b:99:ea:1b:e3:c1:09:93:db:a4:d8:6a:8c:47:af:
be:df:5d:57:cf:ee:ed:37:4b:9a:aa:55:b4:a9:59:c6:d2:8d:
7e:29:d9:cb:78:66:74:e7:55:5b:60:7f:37:3c:8a:0f:6c:35:
22:39:06:dd:b2:97:a3:6a:97:e4:48:c0:e5:d2:25:b9:e3:06:
3a:c2:80:97:2d:49:76:7c:65:6f:e3:4c:0c:8e:36:00:f8:45:
7e:f1:89:b7:01:c4:56:6e:60:d0:1b:b1:dd:fb:f3:7b:fc:b1:
ed:a2:f1:ff:83:ac:05:02:fe:9b:2c:02:e4:2b:d2:62:c5:5c:
29:ac:21:cd:39:50:a4:7e:a6:10:c0:54:bf:08:77:a4:e4:84:
bd:89:b8:b8:6c:51:ad:e5:b0:10:38:1c:32:a8:fd:78:a1:6b:
e9:f6:1d:15:62:6d:99:0d:9a:f7:d5:f7:13:af:3c:04:04:e1:
ea:87:72:23:b3:6d:d6:02:ee:7e:c6:c4:96:6a:1b:32:62:59:
a4:fc:51:d8:44:e5:26:6d:d2:ce:1d:f8:bc:fa:87:d5:c0:c5:
c1:5b:18:89:45:ef:1f:5c:37:15:cf:88:fc:03:57:08:77:79:
95:59:31:9f:18:24:37:1a:b7:ef:bb:53:84:4b:38:c4:a5:f2:
43:33:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:22:35 2026 by rpki-client