Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wFXMySld0SQGDvYjm8QPsMmxH0o.roa
File: wFXMySld0SQGDvYjm8QPsMmxH0o.roa (raw, json)
Hash identifier: dh285VQW167J+uosYSUr0PO4nnL7HODt9EN6xHE8tLk=
Subject key identifier: C0:55:CC:C9:29:5D:D1:24:06:0E:F6:23:9B:C4:0F:B0:C9:B1:1F:4A
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F236875748952EB3863AAC608072971B8
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wFXMySld0SQGDvYjm8QPsMmxH0o.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 213.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 15:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:75:74:89:52:eb:38:63:aa:c6:08:07:29:71:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c055ccc9295dd124060ef6239bc40fb0c9b11f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:82:05:41:8d:32:5a:e7:df:86:5a:02:28:
89:1a:86:57:e5:24:cd:52:5b:06:d3:0b:48:d1:f9:
11:18:69:22:40:0a:3b:3a:4e:a2:73:32:d2:90:6a:
8c:54:5f:b4:67:26:6f:99:f5:a8:87:6b:11:0b:c0:
1c:70:c3:c4:5a:6f:2f:7b:00:65:2d:2c:ab:b5:2a:
56:c0:10:74:3b:a4:01:80:7a:0b:ea:ea:88:1b:1a:
2a:65:7b:29:f4:7d:ac:29:e7:6e:a1:59:0a:df:f3:
dc:79:48:1c:28:46:89:fa:65:bb:9f:94:29:c5:3d:
18:a2:4c:52:b1:6d:67:c3:28:65:53:27:56:1a:1e:
f2:ef:7a:b1:58:47:3c:09:00:fc:16:cc:cb:bc:66:
28:84:b4:de:68:49:03:d0:ee:40:d1:fe:45:a4:f4:
92:cb:48:89:bb:68:7b:aa:17:a9:75:c0:70:ad:d3:
89:06:f3:8b:f1:1e:d3:6e:c1:ae:be:fb:8c:88:dc:
97:c9:d5:6c:eb:c0:c5:a2:22:e0:6a:87:67:1a:2c:
fc:87:08:24:4c:00:ec:b7:c3:95:d2:fd:57:98:0b:
24:c8:80:0e:af:f7:60:fb:e9:34:0f:0c:52:ce:a7:
f9:e0:7b:e3:0d:ff:3c:91:91:61:35:4e:f5:ef:b9:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:55:CC:C9:29:5D:D1:24:06:0E:F6:23:9B:C4:0F:B0:C9:B1:1F:4A
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wFXMySld0SQGDvYjm8QPsMmxH0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:6a:e6:20:50:26:39:fa:bf:53:69:4f:47:dc:a6:b7:31:50:
64:27:2a:41:54:8b:ec:8e:87:2c:71:a5:06:8b:aa:b6:dc:56:
32:18:d3:90:64:08:ed:1f:ff:3b:53:23:3f:39:7b:df:0f:47:
5b:88:18:e3:dc:93:75:14:99:e3:99:89:bb:e2:f4:56:bf:a9:
33:9f:f7:42:05:93:2e:9e:22:14:2d:f6:69:9f:a4:f9:a3:18:
4f:29:b3:9e:10:aa:f0:e0:b0:16:de:69:34:f3:ea:fe:f5:b6:
3c:42:2f:b7:f7:fc:96:db:19:12:8b:2b:be:49:b2:b9:01:93:
d9:cb:4e:f2:6c:94:f3:b4:1c:ea:a0:49:ad:bb:95:81:7c:bd:
75:54:36:83:a1:a7:6a:e2:34:b0:37:f5:fd:7d:22:3a:f3:e9:
82:95:b4:59:9f:8d:53:a2:16:8b:a7:4e:71:d1:22:be:6d:ed:
55:32:50:bd:e7:03:f1:54:09:22:6e:f1:6c:03:1e:9a:17:98:
0f:df:9b:c1:81:26:f4:6a:2a:93:40:23:8b:b0:ba:ad:1f:f0:
e3:68:f5:3f:0c:73:da:8f:61:a2:dc:0a:f6:57:26:46:f2:c5:
73:f0:cf:5d:9c:14:47:d8:27:33:56:15:72:04:cb:57:65:47:
d7:52:49:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 23:45:40 2026 by rpki-client