Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/WbdWkBmU1v3RupxurBj9x05pMHo.roa
File: WbdWkBmU1v3RupxurBj9x05pMHo.roa (raw, json)
Hash identifier: R9jfiRZyTl1tiVQ4+yD+BgH5RpUwxYDYh/xfQEicvB0=
Subject key identifier: 59:B7:56:90:19:94:D6:FD:D1:BA:9C:6E:AC:18:FD:C7:4E:69:30:7A
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 01A14798BCA614A73ABE261F9883969DC689
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/WbdWkBmU1v3RupxurBj9x05pMHo.roa
Signing time: Sat 17 Oct 2026 02:02:34 +0000
ROA not before: Sat 17 Oct 2026 02:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.25.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:98:bc:a6:14:a7:3a:be:26:1f:98:83:96:9d:c6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Oct 17 02:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59b756901994d6fdd1ba9c6eac18fdc74e69307a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:21:2b:29:50:68:ad:92:9c:ac:2a:18:dd:
6c:ab:f5:7a:5a:ca:a1:a1:3d:a0:ef:d9:6c:da:a5:
45:e5:4d:ea:12:96:c6:89:83:da:2c:9d:16:9d:8f:
90:f3:1c:f0:5f:65:c7:4a:57:38:77:f0:a7:a2:98:
0a:c4:5d:fc:ca:57:ae:43:f4:5d:04:f8:62:05:a6:
b0:7b:ee:2e:67:9e:08:fa:ff:2e:ab:99:86:38:28:
09:08:0c:83:81:f5:6f:15:54:b8:91:ee:6c:0b:19:
6e:7c:2e:6f:63:aa:c0:d1:ef:ad:ee:8c:3b:9e:17:
25:f8:d8:fe:86:e5:c0:cd:77:b6:7c:b7:fe:e9:6e:
66:f2:84:54:df:fb:3f:97:16:87:ab:68:60:ca:34:
c2:0c:eb:f3:c1:73:40:41:53:ee:13:70:45:b0:dc:
aa:d3:ba:63:a8:59:33:92:d7:7a:3f:43:73:cf:d4:
e4:89:60:4e:d8:a5:f9:a3:94:b0:11:92:40:31:b2:
2d:59:e6:29:6d:97:fd:d0:8d:5c:d9:85:67:45:ce:
f1:21:90:d5:54:fd:96:31:f6:1c:49:cc:b0:a3:ec:
38:95:a8:3e:bd:dd:22:fd:1f:36:3c:31:3c:62:77:
8d:a6:c2:f8:c7:3f:a2:37:bd:94:d3:06:3c:37:58:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B7:56:90:19:94:D6:FD:D1:BA:9C:6E:AC:18:FD:C7:4E:69:30:7A
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/WbdWkBmU1v3RupxurBj9x05pMHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.10.0/24
Signature Algorithm: sha256WithRSAEncryption
44:29:59:8b:22:ad:da:fa:92:6e:bf:12:0b:16:9a:d3:d9:46:
0c:c0:60:9f:74:08:4c:29:84:df:ea:0f:44:3c:c3:0e:4c:91:
4e:4e:58:29:39:a8:03:97:d0:b0:36:47:ab:7c:fd:78:c6:ca:
4a:72:57:c6:d6:fb:3a:4e:f3:93:43:be:a2:f9:94:b0:81:50:
ed:fb:66:b7:24:e0:57:3f:6a:d7:9c:51:3b:46:a4:9b:a0:0b:
32:10:9f:c5:f9:59:f3:1a:71:92:ec:fd:22:87:7f:e8:4f:04:
4b:76:0e:c9:f7:99:43:86:1a:51:c2:34:cd:50:ed:21:a3:5e:
fd:98:37:41:a8:00:86:9d:91:12:74:c0:bb:2a:bf:68:a8:18:
59:e2:c6:ef:f7:30:cc:50:5a:6c:fc:30:0b:92:d4:6f:d8:bd:
d4:a9:16:e9:f4:51:bd:27:a0:3e:ef:df:44:07:12:7c:3d:bc:
c0:ee:5c:a3:3b:6b:dc:8d:78:08:08:e1:2f:79:42:56:c2:88:
52:06:46:3a:fb:06:7c:db:04:b2:45:ed:fb:45:f2:71:6a:70:
10:8a:35:d0:68:e6:80:82:f9:61:b6:28:9d:81:68:53:ea:11:
6b:22:e0:3c:37:c2:eb:43:98:a4:f5:4b:02:5d:05:64:a3:cd:
ae:74:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:15:32 2026 by rpki-client