Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/wRhyCIvuKiaEK5AlW4LAprlcyto.roa
File: wRhyCIvuKiaEK5AlW4LAprlcyto.roa (raw, json)
Hash identifier: /I8FFaaDLJ/GnVybrc/DmyRULq5DViEzBfBe953Kypo=
Subject key identifier: C1:18:72:08:8B:EE:2A:26:84:2B:90:25:5B:82:C0:A6:B9:5C:CA:DA
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 019DFCE5813BB1DAC6511684FE04988DAE7A
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/wRhyCIvuKiaEK5AlW4LAprlcyto.roa
Signing time: Wed 06 May 2026 10:46:32 +0000
ROA not before: Wed 06 May 2026 10:46:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39741
IP address blocks: 31.25.240.0/21 maxlen: 24
31.25.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:e5:81:3b:b1:da:c6:51:16:84:fe:04:98:8d:ae:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: May 6 10:46:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c11872088bee2a26842b90255b82c0a6b95ccada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:40:5a:ee:16:8f:c9:d2:c6:0e:02:8f:da:
63:3d:17:d2:7a:85:c3:03:2c:e5:81:f1:d8:c7:b0:
c2:ff:94:58:04:67:64:03:a7:96:ea:ab:95:25:cf:
d0:c9:c6:97:f1:e9:e0:76:aa:17:54:8a:10:52:71:
b2:58:b0:27:af:bd:bf:9c:fe:c9:29:39:4b:e4:1d:
a5:3c:29:26:ce:6f:36:d1:a4:e7:cf:99:31:cd:71:
cd:51:ed:7c:37:6b:b8:37:16:4a:a9:7d:fb:c1:57:
07:cf:04:a2:fd:1f:39:fa:80:64:e8:cd:0a:cd:f4:
93:e8:11:75:68:a3:b8:fd:4e:b9:c7:1d:61:32:ff:
d3:41:97:73:93:ef:d1:01:2b:9b:0f:55:51:cf:c1:
16:dc:1b:83:ed:0a:6d:5b:c7:4f:8d:7c:93:2c:60:
85:22:5b:b4:3b:4d:f5:64:28:63:ef:4d:f8:19:72:
3e:0c:0c:8a:00:91:31:b9:d0:60:32:3d:6c:5f:38:
da:56:3e:29:8d:a9:8d:c0:e7:32:06:0c:1a:ce:cd:
50:9f:69:a2:8f:72:bb:7b:4e:ad:69:8f:a3:c9:31:
66:c4:46:02:14:33:cd:0e:84:7b:66:64:f3:77:ad:
36:7b:97:d6:7c:88:75:25:f6:70:68:3f:2b:02:b4:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:18:72:08:8B:EE:2A:26:84:2B:90:25:5B:82:C0:A6:B9:5C:CA:DA
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/wRhyCIvuKiaEK5AlW4LAprlcyto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.240.0/21
Signature Algorithm: sha256WithRSAEncryption
14:52:d4:84:c7:29:9c:c3:93:10:02:17:48:89:60:02:6d:dc:
79:b7:7a:a1:a2:19:bf:2b:52:b0:96:33:55:11:d0:2a:f6:15:
f4:96:83:3c:a0:50:1a:d8:a9:cf:24:72:99:2a:ab:3f:2a:dd:
45:a2:08:b9:84:db:84:4c:9b:46:8b:e9:9f:7f:d0:16:a0:29:
b8:47:31:1a:fb:ca:a9:df:67:08:f9:d5:2b:6a:06:e5:99:4a:
07:6b:85:7a:a0:c1:8e:81:ba:7e:dd:b1:e1:6f:4b:ff:ee:92:
26:96:bd:c3:81:9c:a9:83:bf:51:a0:6f:c8:36:ed:08:e7:7f:
55:9e:48:88:53:d2:fc:42:d9:4c:6f:64:bd:32:e1:37:3f:06:
34:fb:79:84:93:35:60:b8:93:4b:49:82:50:8a:85:9d:c9:bf:
cc:5c:5c:e6:23:66:2e:d1:23:27:d9:8f:e7:c6:74:f3:c8:45:
a5:37:e2:4c:5d:2e:03:63:2a:29:a5:bb:12:31:c6:e7:3b:1a:
16:c8:0d:3a:1b:e2:12:2a:e1:36:47:db:a3:42:43:26:8e:d1:
13:e1:1d:37:16:b0:d9:de:b9:8d:48:9c:da:db:23:8b:30:a6:
9c:1f:46:23:99:46:0e:ea:f7:af:96:a0:41:a6:f1:21:23:d8:
cd:de:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:02 2026 by rpki-client