Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/WPTN1Qq7x_RqdVcQNEvPIzif6aA.roa
File: WPTN1Qq7x_RqdVcQNEvPIzif6aA.roa (raw, json)
Hash identifier: +avq0PdtOR9oSirda5avrWksxY2pCBwlBFfwZM2VWyY=
Subject key identifier: 58:F4:CD:D5:0A:BB:C7:F4:6A:75:57:10:34:4B:CF:23:38:9F:E9:A0
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A081CC3C730E103B412D1372C465655E45
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/WPTN1Qq7x_RqdVcQNEvPIzif6aA.roa
Signing time: Tue 08 Sep 2026 16:14:00 +0000
ROA not before: Tue 08 Sep 2026 16:14:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219498
IP address blocks: 79.98.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 13:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:cc:3c:73:0e:10:3b:41:2d:13:72:c4:65:65:5e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Sep 8 16:14:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58f4cdd50abbc7f46a755710344bcf23389fe9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:7d:1a:bf:ac:01:59:57:b5:db:1e:81:18:
40:c6:00:fd:1c:03:bf:3d:b9:52:be:42:9b:3f:31:
41:b2:fd:07:50:0a:19:ca:3a:dc:19:53:9e:b0:89:
ae:eb:df:23:cf:14:f6:5e:84:8c:44:df:b5:36:10:
87:90:93:9d:38:6d:2f:29:d5:8b:74:78:de:50:8d:
e4:85:d5:17:fd:33:72:f5:a8:39:b8:9d:10:ca:31:
62:d0:1e:fc:29:83:f1:9a:82:90:47:d6:fc:a8:c1:
42:51:62:ba:72:c7:ef:15:6d:af:85:35:dc:55:7d:
8a:8a:c0:18:c1:0d:41:1c:46:69:9e:1a:ea:6c:50:
4f:cb:78:7c:2c:d6:7a:a0:92:76:19:fb:ad:98:ec:
5a:94:25:a9:6c:2e:4b:4b:3a:7e:7a:7d:f2:ce:56:
5f:67:95:8f:6f:de:47:d1:3d:2d:66:07:e5:52:5f:
02:8d:70:39:5a:d2:e2:93:59:64:fa:a7:8e:75:4a:
0a:ba:e2:97:5f:a3:73:04:54:1a:20:a6:98:cb:73:
09:62:50:ba:6d:63:63:c7:06:1a:31:cc:3b:21:13:
fa:2f:2a:ab:9b:9c:d1:94:c1:7c:5b:68:df:cd:de:
25:bc:ad:b1:f8:e1:20:96:ce:02:3a:b7:26:22:70:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:CD:D5:0A:BB:C7:F4:6A:75:57:10:34:4B:CF:23:38:9F:E9:A0
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/WPTN1Qq7x_RqdVcQNEvPIzif6aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.36.0/24
Signature Algorithm: sha256WithRSAEncryption
72:02:77:c5:fb:bd:78:0f:04:eb:ad:45:75:5b:5b:0c:dd:b8:
14:e3:d3:db:0d:f3:c6:5f:1c:3e:f9:cb:1d:f4:cf:04:2b:3a:
00:00:bf:17:b4:ee:94:46:fa:11:54:e4:e3:f2:de:8e:a3:86:
c5:ca:1f:09:bc:7f:67:1e:b2:d8:3d:a1:6d:49:48:b3:66:45:
8c:58:49:eb:e7:9a:cd:90:ff:56:15:fa:9d:aa:64:2a:8f:8a:
f2:e4:87:7f:61:52:b1:8a:ba:fe:7f:28:dd:48:71:78:59:60:
b8:a7:d1:21:8c:05:30:8f:b9:73:5f:b2:d2:fa:a1:16:88:1c:
5d:a6:15:22:1d:79:9a:12:b3:48:a8:de:23:23:e4:3b:80:05:
eb:98:e1:11:ad:ef:cf:4f:66:f6:01:72:77:2f:32:2f:99:e0:
05:48:2b:8d:df:5b:b7:51:77:b4:ab:06:2b:86:58:fc:0b:04:
2a:e2:46:b9:26:85:08:ee:fc:a4:18:39:df:8b:2b:70:4d:22:
80:7c:1b:f9:d0:91:e7:c8:11:05:56:53:3f:6d:7a:66:91:28:
37:37:72:c7:93:bb:1b:b4:36:1b:1a:02:ff:07:e9:80:2f:f4:
96:94:04:1b:49:75:7a:4e:f5:27:98:55:93:1e:c4:2e:60:16:
d0:aa:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 22:56:56 2026 by rpki-client