Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WYe2YzHdtOSP4h4uw2VkijqY0K8.roa
File: WYe2YzHdtOSP4h4uw2VkijqY0K8.roa (raw, json)
Hash identifier: DndiRwXucQDdG1JvlEV67BIFWYMLyU+Uj+0XwLdt1qc=
Subject key identifier: 59:87:B6:63:31:DD:B4:E4:8F:E2:1E:2E:C3:65:64:8A:3A:98:D0:AF
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019F8ED0C6BAE0F69D147D8024DA75AD25B0
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WYe2YzHdtOSP4h4uw2VkijqY0K8.roa
Signing time: Thu 23 Jul 2026 11:51:14 +0000
ROA not before: Thu 23 Jul 2026 11:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44626
IP address blocks: 5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d0:c6:ba:e0:f6:9d:14:7d:80:24:da:75:ad:25:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jul 23 11:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5987b66331ddb4e48fe21e2ec365648a3a98d0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:59:8d:a6:30:c5:02:22:5b:ba:3f:33:90:
79:8b:70:c3:cc:9c:19:25:f4:a4:87:46:bd:52:b1:
8b:5c:41:1c:22:34:35:b2:76:21:54:3b:dd:e0:22:
6a:d2:c0:3f:a9:f4:d2:f6:69:43:da:ac:6b:cd:61:
0f:7d:24:fc:26:9f:63:cb:cd:38:5d:b8:28:d4:4b:
cb:c2:f6:ac:85:66:45:d4:0d:a0:57:c1:a2:ae:ac:
db:d4:ce:94:55:52:ea:f8:93:e0:51:a0:d1:f0:51:
83:f7:50:fa:f7:82:ae:b8:6f:ea:6d:cb:3a:14:18:
84:46:d5:1f:04:22:4a:4a:c8:60:83:2d:63:0d:16:
24:72:e6:f3:42:42:e1:bb:27:22:c4:cd:f0:df:45:
b7:ea:6f:4b:27:49:53:09:af:17:8d:43:5a:25:0e:
b0:db:c2:96:65:77:b5:15:f8:80:4d:e9:d3:9f:71:
e4:fd:99:05:f1:ce:12:22:2e:0d:a7:d0:96:f8:9a:
19:3d:41:e2:fb:6b:a5:f0:16:c6:97:08:9b:20:2a:
9b:a6:08:fa:77:db:b9:ad:b8:2d:28:fc:33:f5:ae:
bc:b7:96:a4:9c:fb:7f:da:dd:92:f0:56:99:d8:21:
19:d1:6e:06:9d:09:6a:38:39:3f:72:db:bd:c4:d5:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:87:B6:63:31:DD:B4:E4:8F:E2:1E:2E:C3:65:64:8A:3A:98:D0:AF
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WYe2YzHdtOSP4h4uw2VkijqY0K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.59.0/24
5.8.65.0/24
Signature Algorithm: sha256WithRSAEncryption
72:2a:12:80:11:b1:7b:56:5c:e5:fb:ed:af:7b:a5:c7:6c:8e:
40:e7:32:22:65:df:3e:36:20:9a:18:0a:30:58:92:f0:b6:59:
f4:ef:4e:2b:78:76:7a:8f:f4:7d:b1:1d:f4:d7:f1:4c:3f:31:
e4:60:a6:52:b4:c0:28:39:b8:20:c4:75:18:0a:c7:79:3b:73:
c4:57:a0:ef:e8:c6:8e:9e:22:74:01:27:c3:09:8c:56:ad:d0:
23:3d:e9:f0:b9:65:72:fc:f4:3b:48:8b:a6:08:f1:03:26:8a:
51:28:84:d3:1c:e8:02:cf:f9:4f:74:4c:87:28:bd:97:36:fd:
fc:4a:ec:32:a6:2b:cf:ab:5a:08:3b:2c:e2:f8:5c:fe:28:57:
83:5a:eb:59:7c:f5:1d:20:71:4c:e6:fd:83:75:b4:37:96:d8:
36:f8:ee:d1:88:54:d6:b0:2c:15:c9:c8:27:76:42:02:08:4a:
7d:f4:ac:f8:e3:8b:4d:f0:d8:56:be:c9:93:97:d9:7e:e9:f8:
90:f4:8a:f8:21:db:f4:8b:e2:4e:34:f0:a4:ed:4c:32:18:8a:
6f:d1:32:3b:00:59:2f:b0:06:14:be:44:cd:dd:e7:93:e7:ec:
e2:44:3d:5a:d3:df:cc:87:1a:d6:b6:aa:ca:be:33:37:5f:d8:
6a:ad:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:28 2026 by rpki-client