Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/WmCGJSo4p4F0oAOClBdRf9l_wn0.roa
File: WmCGJSo4p4F0oAOClBdRf9l_wn0.roa (raw, json)
Hash identifier: DapfUiNMB+YIE4kc/Xje8XHm1u3g1z5a1e2wmMkhxdE=
Subject key identifier: 5A:60:86:25:2A:38:A7:81:74:A0:03:82:94:17:51:7F:D9:7F:C2:7D
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A034850436EFC1F269705A5933EEC1B761
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/WmCGJSo4p4F0oAOClBdRf9l_wn0.roa
Signing time: Mon 24 Aug 2026 16:05:27 +0000
ROA not before: Mon 24 Aug 2026 16:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33659
IP address blocks: 95.164.193.0/24 maxlen: 24
95.164.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:85:04:36:ef:c1:f2:69:70:5a:59:33:ee:c1:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Aug 24 16:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a6086252a38a78174a003829417517fd97fc27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:e5:06:7d:af:38:2a:44:e9:1d:98:f7:73:
d8:5b:db:c9:88:8e:42:c7:ba:23:b2:14:bb:fe:f4:
89:24:bf:a5:5e:34:42:82:27:be:38:06:0d:aa:ba:
36:21:a3:3e:44:c6:61:f3:0f:69:c0:53:e4:ca:96:
91:9c:ee:26:e8:88:6f:81:02:f3:c2:c2:77:7d:71:
c8:2f:03:61:75:2f:a3:22:74:d2:a5:4f:39:32:f4:
d6:6b:8d:fa:f1:89:22:08:fc:09:11:ed:f4:6a:4d:
c9:41:76:da:66:79:ee:26:6a:6b:35:c5:55:c9:b7:
4d:0e:cc:22:4a:8b:aa:97:14:40:08:ff:98:e0:88:
a0:b8:53:65:c8:31:36:57:2e:47:00:45:fa:7b:ee:
4a:65:7c:07:82:58:bf:ea:49:00:f0:bb:17:a0:76:
59:59:a1:3e:2d:06:8e:37:d4:88:5c:24:4b:b4:e9:
b5:ba:e0:e1:f5:e9:5a:51:d0:59:ca:ca:f9:e3:ca:
3e:ae:1c:d7:cf:d5:fa:05:5e:97:8f:85:75:6f:8f:
c8:ed:2d:77:c5:23:0a:2f:4e:e2:93:c8:d0:c4:de:
2b:62:a9:1e:d1:c7:df:c8:d0:25:e5:19:1c:22:24:
f5:78:42:9f:bd:81:26:db:7f:5e:67:7c:d1:7a:67:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:60:86:25:2A:38:A7:81:74:A0:03:82:94:17:51:7F:D9:7F:C2:7D
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/WmCGJSo4p4F0oAOClBdRf9l_wn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.193.0/24
95.164.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:db:bf:f0:41:9c:04:5e:87:0c:31:6a:7a:13:18:c8:c1:05:
01:ac:3c:33:c3:81:13:b1:22:f2:7d:a4:40:f4:39:11:ba:70:
cb:6c:1b:ee:d0:1d:7c:fe:f4:2d:90:60:a1:ab:4b:d7:4e:67:
fc:5c:89:2c:26:97:57:da:2f:68:d2:f5:48:08:93:1a:5d:c1:
01:2c:95:d8:f5:66:fc:26:34:10:d2:84:a7:b1:6f:19:54:c1:
d3:cb:6d:5a:50:a7:8f:a0:9d:60:89:12:0f:ec:48:2a:40:82:
70:40:14:87:92:5f:da:07:d0:99:c9:aa:46:ac:ea:d3:bb:5c:
10:3d:f9:9c:71:2e:55:d1:12:f5:5c:b9:d2:c8:1b:8f:ff:98:
7b:fe:34:4b:af:61:4d:00:89:52:a9:d8:4b:1d:94:74:71:32:
0c:f4:e4:81:ae:30:b5:78:5a:b5:1d:29:3e:6b:27:a6:1f:31:
08:8b:bb:16:3a:9f:72:15:5f:19:2e:40:2a:2e:45:5a:11:dd:
cf:56:f7:b3:11:6a:dc:36:60:b2:b2:8d:57:76:66:69:89:06:
e7:3f:83:55:2c:42:6f:21:bc:83:73:fd:9c:b9:e8:24:ec:89:
87:32:f6:34:bd:5a:6b:8b:8e:d8:b6:6c:27:1f:08:e2:3b:25:
12:63:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:09 2026 by rpki-client