Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/WSnucHj436-UXnc-ebuGaIpcr5E.roa
File: WSnucHj436-UXnc-ebuGaIpcr5E.roa (raw, json)
Hash identifier: o0f471E/J4jVmiTLn0Fc4NKkNap3caz1FQzKv3S5vmA=
Subject key identifier: 59:29:EE:70:78:F8:DF:AF:94:5E:77:3E:79:BB:86:68:8A:5C:AF:91
Certificate issuer: /CN=0b4c663e7096e5e0bc4cbde0e4ad81f916c533b5
Certificate serial: 019F42829B68E89BA607AE43C494BAC65BD0
Authority key identifier: 0B:4C:66:3E:70:96:E5:E0:BC:4C:BD:E0:E4:AD:81:F9:16:C5:33:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0xmPnCW5eC8TL3g5K2B-RbFM7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/WSnucHj436-UXnc-ebuGaIpcr5E.roa
Signing time: Wed 08 Jul 2026 16:14:43 +0000
ROA not before: Wed 08 Jul 2026 16:14:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41558
IP address blocks: 91.90.0.0/21 maxlen: 21
185.103.204.0/22 maxlen: 22
185.103.204.0/23 maxlen: 23
185.103.206.0/23 maxlen: 23
195.3.228.0/22 maxlen: 22
195.78.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0xmPnCW5eC8TL3g5K2B-RbFM7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:82:9b:68:e8:9b:a6:07:ae:43:c4:94:ba:c6:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4c663e7096e5e0bc4cbde0e4ad81f916c533b5
Validity
Not Before: Jul 8 16:14:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5929ee7078f8dfaf945e773e79bb86688a5caf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:8b:38:b3:fd:d2:ba:b9:bf:fa:1b:8f:dc:
b3:76:19:93:68:83:ba:72:d3:7a:81:d4:aa:9f:91:
d3:91:ad:bc:bc:ae:bc:ec:70:75:df:9f:16:cd:53:
60:84:97:77:c5:6e:57:a3:0f:cc:cc:fa:60:06:5d:
86:26:b5:b4:93:ff:75:36:05:c0:ea:43:e2:25:83:
06:17:1e:eb:5a:a8:57:83:53:7a:b3:59:9b:58:4f:
3a:99:ac:09:25:cf:f1:29:89:58:a0:e3:6d:6d:04:
99:5a:e5:d7:a9:3c:1a:ef:fe:e8:8c:52:2e:56:eb:
8c:35:69:51:98:a2:b8:2c:b0:24:98:cc:7b:d5:43:
23:e1:a2:56:7e:58:da:16:0d:4e:c4:2d:d2:98:c1:
59:a9:5a:35:ec:3d:58:01:b2:19:90:5d:9e:20:7a:
da:7b:c3:f9:cc:5c:2a:15:78:7e:65:8c:3d:4c:ed:
f9:a6:7d:36:6f:7d:44:20:05:19:bc:20:c6:82:5e:
ca:a3:32:09:1d:0d:75:a8:d2:3c:b9:d3:8d:7a:af:
08:59:93:24:e6:19:02:29:e3:ce:81:ac:d2:46:5a:
45:db:53:08:3c:7f:45:01:e8:ee:22:22:b6:6e:47:
24:2f:e5:ca:16:f3:69:42:dc:24:6d:75:09:74:c0:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:29:EE:70:78:F8:DF:AF:94:5E:77:3E:79:BB:86:68:8A:5C:AF:91
X509v3 Authority Key Identifier:
keyid:0B:4C:66:3E:70:96:E5:E0:BC:4C:BD:E0:E4:AD:81:F9:16:C5:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0xmPnCW5eC8TL3g5K2B-RbFM7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/WSnucHj436-UXnc-ebuGaIpcr5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.0.0/21
185.103.204.0/22
195.3.228.0/22
195.78.78.0/23
Signature Algorithm: sha256WithRSAEncryption
90:eb:20:26:44:c9:4c:09:9b:e3:88:99:f2:9a:85:cf:8b:32:
2c:b5:9a:66:69:54:d4:f6:15:1d:44:0c:af:98:59:c9:2c:bc:
37:e8:04:8d:93:ce:6b:ca:09:ff:2d:dd:ba:56:64:5e:ff:96:
a0:7b:7b:de:e7:25:61:45:8e:e9:07:87:4c:c8:d0:a5:f7:fb:
30:2d:5d:1a:04:26:79:09:02:39:ce:7a:90:17:e4:67:50:42:
81:53:cb:b5:fb:3a:13:56:75:5b:91:9b:31:b7:e4:01:13:b2:
d9:24:06:9c:2a:cd:3e:d6:aa:7b:92:33:85:f3:f7:da:e7:5c:
a5:b2:8b:8f:d1:ea:85:a2:1e:b5:f9:34:a4:83:e3:60:49:77:
71:be:6c:da:3c:4e:92:87:b2:57:90:60:69:76:46:b0:37:08:
93:fd:0b:5f:1d:e2:3e:33:56:f7:bf:c5:93:2d:53:aa:cb:94:
1d:49:39:bd:8f:e3:33:88:41:dc:c7:2a:db:de:9f:74:87:4a:
4e:c1:10:58:22:8a:01:e2:8c:9a:07:7e:04:13:35:9f:ea:f6:
ce:6e:0b:aa:61:39:b2:95:2a:08:ea:df:1f:8d:56:c7:0a:bd:
88:75:4b:4b:c3:d6:a4:cf:81:98:16:06:92:fd:7c:c7:c1:d2:
a4:81:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:19:11 2026 by rpki-client