Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/WSJBCh2OsvZcrdAL-2hq6pN9tFg.roa
File: WSJBCh2OsvZcrdAL-2hq6pN9tFg.roa (raw, json)
Hash identifier: PeDCYtSLNPlYm/YRPC7P1Ngc8lvfXH2IT/iFWw8s2T4=
Subject key identifier: 59:22:41:0A:1D:8E:B2:F6:5C:AD:D0:0B:FB:68:6A:EA:93:7D:B4:58
Certificate issuer: /CN=c73e163a37870548d696ef0330646b8425328f28
Certificate serial: 019F236936EB5C1B1CBA4E6BB8920CC37297
Authority key identifier: C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/WSJBCh2OsvZcrdAL-2hq6pN9tFg.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15576
IP address blocks: 195.216.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:36:eb:5c:1b:1c:ba:4e:6b:b8:92:0c:c3:72:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c73e163a37870548d696ef0330646b8425328f28
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5922410a1d8eb2f65cadd00bfb686aea937db458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:72:ac:4d:e2:f5:06:88:8e:bf:0e:45:a3:
db:b9:18:23:07:24:4c:7d:ab:73:57:06:b8:15:a7:
49:ea:75:07:15:59:88:80:90:e9:63:8c:09:c0:a0:
8c:7f:a8:05:55:35:e1:10:97:c3:c2:5c:22:47:0a:
e8:5d:49:32:f7:6a:71:67:11:48:ec:32:f8:01:f2:
39:e6:4c:a2:78:d5:4b:f1:29:de:b2:f9:dd:57:fe:
c0:c7:a0:79:f3:8a:c2:7f:98:1b:cc:26:24:f9:89:
7b:04:04:05:66:c6:0f:94:82:31:c2:b5:f6:18:ed:
de:57:07:26:4a:7a:4b:12:6d:64:ef:1c:53:0c:81:
a5:0f:7d:f1:e8:9d:22:8c:4e:21:22:3f:52:9e:d6:
30:a0:10:97:1b:7c:e8:55:ce:1b:f5:e4:f6:b2:a5:
ab:91:9e:41:b3:8c:d2:5b:e2:1c:a7:e8:ef:0c:af:
a0:86:21:d8:e4:2d:b9:ce:e7:ac:50:95:5d:d2:45:
8f:b7:93:08:2f:1f:39:0b:4f:d3:85:fa:28:e3:13:
99:c8:d7:23:6a:7d:f3:f7:2e:d3:3d:56:95:1b:98:
4f:70:c4:4f:87:ef:ac:4a:af:d2:ae:55:0c:f4:ac:
8d:e4:14:05:94:32:38:8b:e5:16:ba:a9:1a:77:a5:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:22:41:0A:1D:8E:B2:F6:5C:AD:D0:0B:FB:68:6A:EA:93:7D:B4:58
X509v3 Authority Key Identifier:
keyid:C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/WSJBCh2OsvZcrdAL-2hq6pN9tFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e8:4b:3a:11:d3:02:19:d8:39:dc:52:d9:15:0b:73:a6:69:
7e:30:31:0d:41:aa:35:44:59:40:d6:91:74:f2:b6:1f:da:54:
4e:ec:cb:b8:ed:18:09:c2:52:57:d4:45:de:1a:7f:df:2b:a1:
eb:9a:9a:bc:f3:18:7f:bf:d3:2d:0f:ec:d3:0f:60:02:44:fb:
69:ef:5a:04:8e:ca:0e:fe:91:3d:5b:c1:27:86:0f:a2:29:58:
b4:d5:1d:6d:cb:36:89:b3:62:a5:af:8e:17:4c:f6:bc:90:6a:
88:07:a3:0f:3e:15:c4:d7:ed:2a:93:c5:63:91:27:93:54:5f:
e9:ac:1c:77:ef:a7:79:85:0e:47:3a:0b:26:42:7a:8d:9e:2b:
be:0e:af:b6:3a:1a:fb:c5:0b:f1:66:e0:00:bc:1d:9a:17:ca:
f0:2c:79:cd:03:b7:6e:33:f9:44:92:a5:d0:39:27:84:38:cf:
f3:69:95:91:c8:3d:62:ac:4d:03:7c:3b:82:76:98:3b:1c:9d:
cc:0f:58:cd:eb:46:9e:57:b8:9f:8b:ed:70:df:6a:85:d5:29:
81:12:6b:e3:38:65:4a:d6:d7:cd:04:80:3a:03:50:0b:ca:1c:
87:3d:cb:fe:ad:68:08:c0:86:45:e4:03:8b:d4:c2:ce:dd:04:
98:6d:f3:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTbrXBscuk5ruJIMw3KXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3M2UxNjNhMzc4NzA1NDhkNjk2ZWYwMzMwNjQ2Yjg0MjUz
MjhmMjgwHhcNMjYwNzAyMTUxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTIyNDEwYTFkOGViMmY2NWNhZGQwMGJmYjY4NmFlYTkzN2RiNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWJyrE3i9QaIjr8ORaPbuRgjByRM
fatzVwa4FadJ6nUHFVmIgJDpY4wJwKCMf6gFVTXhEJfDwlwiRwroXUky92pxZxFI
7DL4AfI55kyieNVL8SnesvndV/7Ax6B584rCf5gbzCYk+Yl7BAQFZsYPlIIxwrX2
GO3eVwcmSnpLEm1k7xxTDIGlD33x6J0ijE4hIj9SntYwoBCXG3zoVc4b9eT2sqWr
kZ5Bs4zSW+Icp+jvDK+ghiHY5C25zuesUJVd0kWPt5MILx85C0/Thfoo4xOZyNcj
an3z9y7TPVaVG5hPcMRPh++sSq/SrlUM9KyN5BQFlDI4i+UWuqkad6XIFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFkiQQodjrL2XK3QC/toauqTfbRYMB8GA1UdIwQY
MBaAFMc+Fjo3hwVI1pbvAzBka4QlMo8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHo0V09qZUhCVWpXbHU4RE1HUnJoQ1V5anlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3Yjkt
YTdlZGI3ZDNmNTM3LzEvV1NKQkNoMk9zdlpjcmRBTC0yaHE2cE45dEZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3YjktYTdlZGI3ZDNmNTM3
LzEveHo0V09qZUhCVWpXbHU4RE1HUnJoQ1V5anlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9jjMA0G
CSqGSIb3DQEBCwUAA4IBAQA66Es6EdMCGdg53FLZFQtzpml+MDENQao1RFlA1pF0
8rYf2lRO7Mu47RgJwlJX1EXeGn/fK6Hrmpq88xh/v9MtD+zTD2ACRPtp71oEjsoO
/pE9W8Enhg+iKVi01R1tyzaJs2Klr44XTPa8kGqIB6MPPhXE1+0qk8VjkSeTVF/p
rBx376d5hQ5HOgsmQnqNniu+Dq+2Ohr7xQvxZuAAvB2aF8rwLHnNA7duM/lEkqXQ
OSeEOM/zaZWRyD1irE0DfDuCdpg7HJ3MD1jN60aeV7ifi+1w32qF1SmBEmvjOGVK
1tfNBIA6A1ALyhyHPcv+rWgIwIZF5AOL1MLO3QSYbfPp
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:19:42 2026 by rpki-client