Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/WEwBpxaMC4nIG4w4vl_e2xC8V98.roa
File: WEwBpxaMC4nIG4w4vl_e2xC8V98.roa (raw, json)
Hash identifier: z9bbJLmUEVXg0O+C6bGdQnkEYUAIO6F1iJAXdJlUcMU=
Subject key identifier: 58:4C:01:A7:16:8C:0B:89:C8:1B:8C:38:BE:5F:DE:DB:10:BC:57:DF
Certificate issuer: /CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Certificate serial: 019F8F348FF14DDAACDACE79A03925304AD5
Authority key identifier: 92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/WEwBpxaMC4nIG4w4vl_e2xC8V98.roa
Signing time: Thu 23 Jul 2026 13:40:14 +0000
ROA not before: Thu 23 Jul 2026 13:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47376
IP address blocks: 85.8.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:34:8f:f1:4d:da:ac:da:ce:79:a0:39:25:30:4a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Validity
Not Before: Jul 23 13:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=584c01a7168c0b89c81b8c38be5fdedb10bc57df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:e0:03:cb:fa:c8:54:f4:8c:42:c4:a3:30:
94:e4:43:08:26:a9:c2:2e:ac:70:33:13:88:f2:b4:
73:e5:e5:00:21:4c:c9:54:b7:17:d6:e5:c2:4a:8c:
16:c9:4a:e7:64:99:5c:51:52:be:da:08:ee:d2:90:
a2:38:6d:ca:58:86:4d:f7:e6:cc:13:3e:d3:c3:f8:
d5:df:89:a5:3d:fb:a3:16:5f:8a:34:64:4f:93:04:
39:37:36:65:e0:ce:c6:94:f6:ac:72:34:4f:7e:fd:
9c:84:a7:31:6c:d3:15:b3:01:e2:db:9d:85:97:82:
b7:c1:9c:48:8e:d8:01:c2:a2:dd:d7:9e:f6:63:13:
bd:65:ac:09:16:da:63:dc:2a:95:97:81:e2:2a:1b:
6f:f6:e1:d7:92:d0:8e:ef:f9:10:b3:8d:7a:54:8f:
4a:01:b8:af:a0:63:74:a9:3d:f2:6c:e4:94:6c:a3:
9f:dc:91:b1:1c:19:ed:ad:72:aa:39:41:6d:68:63:
b2:52:75:c6:42:04:65:a9:54:d1:9c:04:97:3a:b0:
00:81:f9:40:d4:70:5e:27:57:de:72:21:11:0c:a3:
96:e3:f5:4d:3e:f9:b1:1c:3f:43:e8:e3:96:1c:d0:
03:a4:1f:78:44:e8:eb:6a:a1:c0:86:72:92:d8:f8:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:01:A7:16:8C:0B:89:C8:1B:8C:38:BE:5F:DE:DB:10:BC:57:DF
X509v3 Authority Key Identifier:
keyid:92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/WEwBpxaMC4nIG4w4vl_e2xC8V98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.242.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6d:80:8a:cf:15:19:0f:61:5d:88:5c:06:36:99:9e:ad:26:
39:bb:3b:07:d7:33:bd:81:7f:b5:dd:23:79:66:fa:6b:67:ad:
03:b4:15:bf:2e:60:ce:88:28:01:3e:47:f4:c3:33:69:2a:14:
f1:10:a8:5e:0f:d8:92:0d:29:25:0a:b2:d5:f1:40:04:29:ef:
23:51:09:77:38:39:2b:c2:b5:1f:43:4f:56:71:03:3c:7d:fb:
94:08:aa:8d:ee:57:fe:cb:f3:cb:4a:83:e5:4f:69:c6:61:9f:
a2:3d:e6:92:b6:50:c7:ad:94:ae:c4:a2:6d:fd:ff:da:d2:24:
75:a7:78:8f:cb:5e:54:61:8c:9a:91:78:14:22:4e:80:61:6d:
6a:0f:13:7d:0c:90:24:80:a5:d5:32:20:10:eb:f8:08:1c:09:
82:a1:a3:90:6f:15:c7:68:12:22:e6:9e:c0:f8:26:31:df:d3:
b3:53:3a:37:30:9d:cb:4e:4c:97:f9:2b:dc:85:5f:e8:9a:b9:
87:be:c1:97:2b:0e:8d:ec:82:7f:8b:6a:e0:89:79:7a:fe:b7:
f5:80:1d:87:c6:0f:31:ab:29:3c:a8:72:09:bd:ec:2c:f6:ac:
9c:e8:dd:3f:33:3f:24:41:f8:30:d5:6a:f2:66:fc:fe:50:60:
66:90:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:49 2026 by rpki-client