Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/WFdIHW-Ws250whgVTtRrUCqIqBE.roa
File: WFdIHW-Ws250whgVTtRrUCqIqBE.roa (raw, json)
Hash identifier: HRqAJVRbRhkF80Ao7zEatn7LEMVmvy3Uv2sGlTFG/gw=
Subject key identifier: 58:57:48:1D:6F:96:B3:6E:74:C2:18:15:4E:D4:6B:50:2A:88:A8:11
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019FD1D72AE730C093AD2E69DB33A26A136F
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/WFdIHW-Ws250whgVTtRrUCqIqBE.roa
Signing time: Wed 05 Aug 2026 12:12:47 +0000
ROA not before: Wed 05 Aug 2026 12:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.67.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:d7:2a:e7:30:c0:93:ad:2e:69:db:33:a2:6a:13:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Aug 5 12:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5857481d6f96b36e74c218154ed46b502a88a811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:c4:cf:b5:29:bf:dc:49:ff:eb:c7:6b:c8:
20:eb:17:6e:29:51:31:ee:2c:99:a7:d8:c9:eb:1a:
64:5c:db:be:6f:25:59:c3:84:77:ab:df:21:dc:07:
19:7c:80:a8:02:aa:3a:19:ad:98:70:61:54:8a:55:
07:bd:6d:60:4c:c7:fe:88:68:16:97:fe:51:b9:ea:
4d:c0:85:db:da:8e:af:34:39:15:ac:14:c8:7c:47:
9a:f4:14:12:a1:ad:04:3f:da:95:22:7f:b8:4f:9f:
ff:0b:b0:49:7a:93:97:d5:6c:20:0d:2e:da:03:c2:
4a:58:53:67:f9:cf:6a:68:ec:da:a6:71:bc:5c:ec:
10:91:b1:f6:28:65:97:2e:a3:ff:e5:a1:bd:41:4f:
cb:b4:49:5c:2e:12:01:73:08:cd:47:45:59:b4:b1:
a2:69:ab:30:e8:52:90:26:8f:ea:5e:d9:80:d2:97:
67:b3:c7:ec:53:09:e3:d2:b8:bc:b6:61:95:15:4d:
61:4d:e5:5c:61:43:57:72:cf:e5:33:4f:35:92:9a:
6e:8a:18:1f:44:32:95:89:93:9a:a6:9a:eb:a4:1b:
e1:bc:22:e2:5f:9b:24:37:20:36:26:f7:6f:71:7a:
44:9f:78:82:45:56:82:e1:a5:b6:ae:88:ba:61:a4:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:57:48:1D:6F:96:B3:6E:74:C2:18:15:4E:D4:6B:50:2A:88:A8:11
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/WFdIHW-Ws250whgVTtRrUCqIqBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.23.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:02:f4:17:ca:aa:cc:e0:96:69:0c:f4:f9:49:fb:78:5a:ba:
12:2a:b1:f9:51:9f:5d:e0:64:fa:b6:4a:10:07:d4:06:92:7d:
5c:41:89:c7:2d:28:e6:1f:08:72:59:99:92:28:09:e3:19:8a:
2a:38:7f:78:7b:88:c1:7d:21:11:2e:a8:69:b3:61:62:89:f2:
97:f4:40:e2:d0:7c:46:af:aa:a0:81:09:78:0f:18:48:fb:33:
27:e1:b6:ff:a0:3f:a4:95:df:bb:4b:69:af:9c:fd:9f:62:af:
1f:c7:eb:d6:96:41:8e:8d:54:ed:0d:b0:b4:a2:92:18:55:07:
84:c7:9d:8c:e6:95:0a:10:f1:09:18:2e:36:8a:8e:1f:42:b5:
8e:6b:7a:c5:73:6b:11:9c:a0:07:d3:ad:5f:22:17:3e:1c:b3:
e2:19:6f:26:cf:35:2e:ad:3a:84:08:84:7e:8f:3f:73:00:c2:
72:8f:4c:1e:70:b8:1e:7b:ed:15:75:8a:72:18:e8:7b:47:cd:
a3:b4:49:1b:cb:c2:ea:a0:73:59:b6:a1:7b:b9:cb:2b:b7:2d:
d4:2d:ab:7c:37:a6:63:fd:f5:65:e8:c3:8d:05:22:c5:99:9e:
8b:c3:3e:24:2a:8e:ee:e9:f7:f9:bb:43:b3:8e:b5:30:84:d4:
8c:ff:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:26:01 2026 by rpki-client