Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/wQM8PsfLXNDfnBUjBFOp6hyCGrQ.roa
File: wQM8PsfLXNDfnBUjBFOp6hyCGrQ.roa (raw, json)
Hash identifier: d3o4lSseIgZGKcysxDl44ESu+XXxyOc/mIb2gK0UDHg=
Subject key identifier: C1:03:3C:3E:C7:CB:5C:D0:DF:9C:15:23:04:53:A9:EA:1C:82:1A:B4
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 019F8E99D5C756F07E91C1513D0F02D675E8
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/wQM8PsfLXNDfnBUjBFOp6hyCGrQ.roa
Signing time: Thu 23 Jul 2026 10:51:14 +0000
ROA not before: Thu 23 Jul 2026 10:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62342
IP address blocks: 193.202.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:99:d5:c7:56:f0:7e:91:c1:51:3d:0f:02:d6:75:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Jul 23 10:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1033c3ec7cb5cd0df9c15230453a9ea1c821ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:a1:9d:f2:63:5e:1c:21:54:6a:b9:ba:78:
d0:67:0f:2c:98:4b:54:57:62:0a:9f:b4:cd:cf:63:
3a:54:7b:a6:67:dc:aa:4e:80:b2:25:4e:6c:39:8f:
48:11:8b:ea:24:5c:6b:e2:9d:bf:76:2c:05:2a:fa:
ea:86:f8:24:87:ab:2f:1d:bd:0d:c1:8f:d4:1c:50:
9c:cc:ab:7e:3b:76:85:07:70:60:a7:8b:45:cd:37:
e8:14:0b:c7:7c:3f:ca:f7:f8:12:1a:b7:ec:9f:4a:
f1:3f:af:7b:72:08:06:87:ba:dd:b9:ae:be:7a:6c:
96:2b:e5:05:11:e3:62:1d:0a:93:32:40:1f:fb:c7:
bd:74:03:bc:82:1c:2c:a9:6a:c1:b6:96:19:ff:4b:
53:0b:b3:56:33:83:87:1b:43:d0:d0:6d:d1:de:c4:
82:c0:7f:9f:f9:bf:10:87:60:ba:95:d4:97:11:f7:
d7:a1:0d:e9:37:dd:44:0f:dd:ad:a9:b9:a4:09:a2:
db:94:6b:c1:25:ba:c7:86:41:f1:f2:2d:0c:6d:2d:
7e:bc:10:c6:15:90:39:ad:89:26:ea:6a:68:ad:af:
e4:70:41:81:71:cd:90:8a:3f:19:1b:51:7b:6c:3b:
9a:d3:ba:ae:b4:f7:c4:41:90:d4:4f:cc:8d:6a:8c:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:03:3C:3E:C7:CB:5C:D0:DF:9C:15:23:04:53:A9:EA:1C:82:1A:B4
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/wQM8PsfLXNDfnBUjBFOp6hyCGrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.22.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e2:c3:e8:65:71:ec:7e:b7:7d:a5:e9:d7:22:96:76:e5:13:
ad:1e:31:19:2f:dd:40:11:28:bb:4d:5d:f2:6b:1e:28:80:50:
e0:34:cf:1a:7e:af:7e:f9:42:5c:b6:08:73:7e:b6:a1:86:53:
a7:87:e4:50:38:00:af:0a:ae:c6:9e:53:42:5c:ef:cc:6f:24:
5c:09:cc:91:53:ea:f8:ef:67:22:15:3d:d2:ba:e0:f1:c3:c5:
96:95:71:cd:b4:52:c4:c1:a0:3e:0b:2d:ee:08:82:cf:57:e0:
95:48:9c:00:af:71:07:0a:01:fa:47:86:8e:a9:e7:17:48:12:
f3:84:73:91:df:91:e3:f1:c2:7f:69:14:eb:1d:0e:71:73:c0:
da:f8:e1:84:ed:c8:47:86:d6:3c:d7:fc:2c:f1:41:d4:90:74:
d9:96:1e:91:9a:1a:ce:9e:5f:09:2a:89:0e:ac:d4:b3:7b:39:
71:35:6f:19:b4:41:f1:15:e1:a0:0a:6b:ec:0c:a6:c0:bc:e2:
61:9b:67:68:4c:af:01:83:3f:26:83:77:c7:92:f7:70:2f:56:
5a:13:22:db:a1:b6:fd:72:71:0e:d8:c8:16:52:b6:81:33:14:
a3:cf:0d:25:7d:1a:4e:29:80:cb:dd:0c:92:d5:33:12:fd:45:
d6:a0:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:55:53 2026 by rpki-client