Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/whxthU7e18COII1Vqng5lPZMmyw.roa
File: whxthU7e18COII1Vqng5lPZMmyw.roa (raw, json)
Hash identifier: 9BCm0lsIDxgiTF16CS8KX2aL15hSdN09wLmV2AWD1Lo=
Subject key identifier: C2:1C:6D:85:4E:DE:D7:C0:8E:20:8D:55:AA:78:39:94:F6:4C:9B:2C
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 019FE3A4B9159ECFEADF46582B3812C95BEB
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/whxthU7e18COII1Vqng5lPZMmyw.roa
Signing time: Sat 08 Aug 2026 23:10:51 +0000
ROA not before: Sat 08 Aug 2026 23:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200184
IP address blocks: 67.63.56.0/24 maxlen: 24
67.63.57.0/24 maxlen: 24
67.63.58.0/24 maxlen: 24
67.63.61.0/24 maxlen: 24
67.63.62.0/24 maxlen: 24
67.63.63.0/24 maxlen: 24
80.75.216.0/24 maxlen: 24
2a13:f800::/29 maxlen: 64
2a13:f800:1001::/48 maxlen: 48
2a13:f800:3101::/48 maxlen: 48
2a13:f800:3102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e3:a4:b9:15:9e:cf:ea:df:46:58:2b:38:12:c9:5b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Aug 8 23:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c21c6d854eded7c08e208d55aa783994f64c9b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:cd:6e:a1:9e:a7:0c:78:ad:81:f8:32:31:
4a:5c:f2:02:df:f8:d1:35:6b:6a:ba:50:5c:d5:03:
ad:e9:2a:dc:04:4c:8c:44:f6:58:ea:cd:d7:67:dc:
20:49:b4:35:15:fd:3d:93:99:f7:c6:76:9a:81:3c:
7d:e4:b1:fe:79:c8:09:33:e1:95:7f:d5:34:af:84:
0d:02:2f:68:d5:aa:45:51:20:d3:9c:b3:c0:94:db:
46:18:cd:a7:6b:4f:ec:dd:3b:17:0a:ed:2f:0f:88:
27:ce:a8:9b:3d:52:39:47:ff:84:a7:90:66:dc:31:
0c:35:18:61:94:0a:aa:18:68:85:57:60:d8:d2:ed:
8b:78:c9:c1:20:82:2d:5e:ef:bc:ad:f5:45:f0:c7:
1a:d3:fc:fa:48:ee:80:19:1c:0f:d7:5a:d0:4d:e1:
52:88:33:36:ce:6e:18:19:45:e6:ee:70:f8:b2:6b:
2c:eb:ff:6a:65:62:47:21:98:f9:a0:fa:76:ea:28:
cd:a5:c1:16:de:03:8d:14:94:4c:ec:bc:2b:57:e3:
5c:50:64:82:cc:d0:b9:21:5b:d6:af:45:c6:28:f7:
02:5f:06:5f:9c:a5:3d:1b:b1:80:6b:6c:93:e4:af:
26:43:1f:13:96:b2:d1:94:a0:bd:18:db:f7:8f:b9:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:6D:85:4E:DE:D7:C0:8E:20:8D:55:AA:78:39:94:F6:4C:9B:2C
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/whxthU7e18COII1Vqng5lPZMmyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.56.0-67.63.58.255
67.63.61.0-67.63.63.255
80.75.216.0/24
IPv6:
2a13:f800::/29
Signature Algorithm: sha256WithRSAEncryption
13:19:05:45:28:7c:2b:d1:e1:0f:c0:0c:11:e7:d7:db:13:fe:
5b:79:39:70:69:e7:47:3f:90:67:b2:a9:e8:c1:c2:79:a4:ec:
99:d7:6f:88:25:9a:1d:3b:16:52:dd:bf:61:64:8e:d3:72:9b:
e8:c7:d2:65:dd:49:95:9f:ea:99:0f:0e:90:7a:c6:e1:20:d4:
a7:70:65:58:8d:15:ac:bb:66:ab:49:16:07:57:82:00:e8:4a:
a0:e4:ac:ed:33:d9:15:2e:8c:c7:0f:b7:11:42:75:30:96:a5:
87:35:76:ca:3c:d6:bf:31:1f:98:12:29:c2:e5:7b:d3:bb:3f:
ad:30:45:28:cd:64:b9:13:c5:19:d3:9d:e6:28:0b:aa:72:e9:
62:fb:0a:22:dd:bd:ee:d4:e6:16:52:a7:57:cc:e9:df:8b:e5:
32:f1:a4:ba:7b:17:cd:cb:9e:2a:b6:4b:dc:7d:66:19:bf:0d:
49:a2:8c:3b:15:ea:93:bc:29:07:6c:dd:69:8d:41:b8:db:c4:
d0:46:8b:24:e1:17:dd:0b:d3:a3:99:ca:27:ca:e4:56:eb:32:
77:56:1c:e9:ad:c5:87:21:c1:a9:87:f3:48:fc:5f:f7:07:a7:
3c:b0:86:79:59:5e:6a:72:06:b4:e9:79:c3:da:ac:3a:f4:24:
4b:ab:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:00:43 2026 by rpki-client