Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa
File: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (raw, json)
Hash identifier: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=
Subject key identifier: 58:EA:A8:26:EE:6D:D3:D4:77:09:E9:20:C7:FD:8E:D2:C6:BA:F8:77
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A03E383ED962B0F2F9F52C50977F3504F2
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa
Signing time: Wed 26 Aug 2026 13:17:48 +0000
ROA not before: Wed 26 Aug 2026 13:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 87.236.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:38:3e:d9:62:b0:f2:f9:f5:2c:50:97:7f:35:04:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 26 13:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58eaa826ee6dd3d47709e920c7fd8ed2c6baf877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:6c:e3:8c:ac:fd:8a:55:51:10:1c:4e:df:
df:f3:77:b7:c3:86:06:94:00:18:e6:ff:94:ad:f8:
e1:52:5a:e7:c8:07:25:f6:71:8e:d4:11:92:a2:b7:
c4:eb:c9:8d:05:d4:f8:73:a9:7d:ad:0a:0f:e5:15:
42:1e:d4:ce:87:42:f3:4b:6c:7d:bc:85:c7:4a:34:
b7:57:c6:2c:b3:6e:a6:60:6d:f8:ff:05:b5:ef:3c:
76:64:3c:57:25:1e:43:0f:7d:5d:bb:78:57:b3:69:
c7:d6:61:16:fd:17:25:25:66:79:c2:df:17:93:0b:
72:3f:32:1b:59:7c:8e:28:86:af:61:06:f6:f1:c6:
da:7e:d8:f2:ce:70:36:de:36:26:5a:7f:2b:dd:1f:
be:e3:df:7d:e8:84:4c:26:91:f0:f1:c3:26:a2:db:
66:e6:ea:2c:c9:46:be:f9:b7:01:f9:93:b2:3f:b6:
e8:ed:56:b7:e5:61:da:c0:55:d4:52:15:0f:3e:06:
6b:ed:1a:53:5f:f4:4f:d2:03:b1:63:34:91:b7:da:
9b:4d:d8:8f:a4:c3:07:db:58:22:d2:9b:68:01:8f:
08:53:cf:3d:63:08:b4:da:e7:ff:ef:91:0b:05:95:
fd:a5:50:95:f1:4c:82:7a:fb:d8:84:2c:db:46:e6:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EA:A8:26:EE:6D:D3:D4:77:09:E9:20:C7:FD:8E:D2:C6:BA:F8:77
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.38.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3e:6d:cb:b0:5c:9d:ea:45:b4:da:53:74:d4:3a:72:a5:4f:
b1:76:de:a4:84:c6:4d:ae:3a:e1:0b:61:0a:fb:ba:94:06:98:
a1:db:96:35:5b:60:cf:d2:5b:71:d2:71:65:2c:2c:df:7a:9e:
5d:8c:ed:f7:40:cc:9e:11:62:7d:6a:ab:49:99:73:1e:f2:58:
b5:80:f2:7c:bf:35:46:8a:5f:55:ef:6b:b4:67:24:74:03:12:
0e:79:d3:ff:e5:b8:8a:a2:c4:b6:0a:34:ac:43:cd:f7:3b:e8:
a1:36:69:03:26:4c:01:ae:bf:08:e5:c9:ab:bf:62:1e:69:82:
62:81:40:4c:3a:24:09:ce:a5:eb:4b:cf:1d:da:15:4a:93:16:
40:93:5b:94:3b:36:5b:0c:0b:a3:71:71:af:1f:db:7e:a4:63:
a6:2a:b0:a4:4c:45:96:3c:28:0a:01:1d:1e:b0:1b:b8:35:fb:
66:c9:85:88:b2:4d:2c:e3:c4:21:7d:b1:c2:07:f6:05:58:51:
c0:2c:87:4d:31:e8:1b:34:97:e4:7b:bc:72:5b:fa:46:f5:6b:
31:c5:dc:f7:65:ca:2c:ad:f1:a3:8f:da:e8:5c:de:ff:a3:07:
5f:43:82:7d:c5:93:72:69:2e:48:1d:d9:83:91:63:cd:72:c0:
66:fb:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 11:15:32 2026 by rpki-client