Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/WjZ-lIR7MyhCZaOyQOqTaGg93bc.roa
File: WjZ-lIR7MyhCZaOyQOqTaGg93bc.roa (raw, json)
Hash identifier: 9r+bJWO2ypdWBvTMrN/txM30uqxsJdCMbt8zxX7CLS8=
Subject key identifier: 5A:36:7E:94:84:7B:33:28:42:65:A3:B2:40:EA:93:68:68:3D:DD:B7
Certificate issuer: /CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Certificate serial: 019F23686C5A223FB813ACFAF86FF6006FE2
Authority key identifier: 6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/WjZ-lIR7MyhCZaOyQOqTaGg93bc.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200044
IP address blocks: 195.22.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6c:5a:22:3f:b8:13:ac:fa:f8:6f:f6:00:6f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a367e94847b33284265a3b240ea9368683dddb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:82:85:3e:b9:16:98:e9:d4:f8:80:60:7f:
2f:fb:0d:8a:99:f3:0c:dd:82:29:80:3b:49:e3:70:
d8:30:47:ed:0a:60:0c:c2:f9:b2:2b:5d:c5:59:a4:
23:e3:15:ad:4b:16:b4:27:ae:16:7b:d6:68:23:c4:
e6:a7:a7:63:08:c5:e7:52:96:e2:57:b7:f1:3f:fb:
77:2b:46:6c:fb:7c:16:4f:ba:ee:58:3d:c6:f1:41:
b5:94:19:13:21:25:55:a2:44:34:55:e6:93:d4:84:
67:00:0c:ec:78:98:d8:b3:dc:8c:dc:81:8c:33:47:
1c:75:75:62:d3:a8:bb:5a:ec:ae:05:de:14:da:c7:
72:d5:e3:14:c0:61:c0:fe:52:45:b3:2f:e7:3b:f0:
2b:1d:71:e9:c2:a8:dc:07:c8:77:42:c6:e3:59:d1:
4f:f3:42:7d:96:1d:2e:4a:ba:a3:66:8c:72:3c:b3:
6d:5a:2f:20:4d:ef:14:d9:0d:37:06:ad:b2:01:0b:
ee:2c:d2:bf:a7:ac:ff:ea:8d:8a:19:5d:b0:37:7e:
3a:d1:ca:af:5b:55:6b:f4:2c:55:de:f8:36:9d:b1:
91:53:8d:5f:25:2b:2d:71:fd:9e:d9:de:96:d1:97:
12:84:ff:8c:8f:58:b7:53:9a:60:98:74:88:3b:d5:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:36:7E:94:84:7B:33:28:42:65:A3:B2:40:EA:93:68:68:3D:DD:B7
X509v3 Authority Key Identifier:
keyid:6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/WjZ-lIR7MyhCZaOyQOqTaGg93bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.123.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f5:22:ce:6b:0b:51:fd:1f:f9:1d:ae:bd:05:6e:92:1f:a8:
2e:9d:6d:e1:4d:28:9d:85:99:fd:96:d4:ee:77:59:8b:59:ab:
a0:1e:df:d8:32:e9:47:3a:c0:43:f3:fb:f5:cd:d5:43:2b:ef:
36:e7:34:11:34:6c:7e:ec:d9:8c:fb:31:ea:fb:c5:48:26:e2:
a2:84:16:6f:2f:5a:bf:f8:4e:b9:4c:0b:21:bd:97:7b:f9:27:
fe:7b:63:5a:ab:d3:82:e0:7c:00:9e:b1:27:5c:bc:45:ea:09:
a6:c8:17:f9:2e:3a:02:39:37:79:e9:b5:d6:d6:63:76:39:95:
d7:d2:94:75:e4:5e:f7:c2:82:36:f4:50:86:da:17:92:b6:e5:
f5:46:7f:3d:d4:dc:64:57:d2:69:e7:f7:51:06:a5:e4:93:b6:
3b:d3:9b:9f:7a:f3:76:52:f4:dc:e3:da:9d:0e:f9:f0:b5:bf:
1c:87:e3:1a:2c:e2:01:45:ba:43:cc:27:f1:62:c7:a7:fb:b9:
f0:26:0a:a1:9f:a8:a8:a8:01:29:f3:34:b9:c2:6a:ee:2f:1c:
fb:fe:c4:90:67:af:59:ee:6a:d4:33:f6:87:11:ab:8a:ec:51:
ac:5e:70:b2:20:d9:40:eb:21:82:a2:b0:58:9f:c0:84:da:6c:
ca:9d:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:41 2026 by rpki-client