Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/WXUROIq4F1W-zbMEwZGC0-4ns6A.roa
File: WXUROIq4F1W-zbMEwZGC0-4ns6A.roa (raw, json)
Hash identifier: RQDdQUCiW8kBw09hGsbRZq5XM/aEA3ZM3OJ8FztuujY=
Subject key identifier: 59:75:11:38:8A:B8:17:55:BE:CD:B3:04:C1:91:82:D3:EE:27:B3:A0
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019F34A7DB5B0F5905C3F3BC229FC605E91A
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/WXUROIq4F1W-zbMEwZGC0-4ns6A.roa
Signing time: Sun 05 Jul 2026 23:40:43 +0000
ROA not before: Sun 05 Jul 2026 23:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.111.32.0/23 maxlen: 24
109.111.34.0/23 maxlen: 24
109.111.48.0/20 maxlen: 20
109.111.54.0/23 maxlen: 24
109.111.56.0/22 maxlen: 24
185.65.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:34:a7:db:5b:0f:59:05:c3:f3:bc:22:9f:c6:05:e9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 5 23:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=597511388ab81755becdb304c19182d3ee27b3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:78:90:59:20:c4:d0:54:1b:2b:b0:13:05:
0f:3d:ee:c4:b2:96:07:6c:0a:3e:24:a7:19:9b:c2:
0f:6b:eb:60:ff:7d:1d:69:45:0b:f6:6b:ac:94:c3:
85:23:02:63:4f:ea:41:fe:9f:c4:83:75:67:c0:df:
9a:e7:06:1c:2e:69:3b:0b:31:1f:0c:61:85:86:8c:
73:b2:45:46:e6:35:84:49:1b:a5:4b:45:0a:e9:2a:
d2:63:b2:bf:b1:b4:63:35:f4:aa:3b:7d:a0:9a:57:
34:89:97:07:b0:b3:e3:9d:83:0d:f0:f2:2b:fe:1e:
2d:cc:6c:a7:ed:b3:ad:6d:57:43:7a:0e:0a:45:fb:
be:45:66:96:84:c6:e0:5e:cd:55:cb:1b:d8:fe:e0:
5d:44:ed:b6:b9:ea:d6:67:08:1d:41:c2:7c:c8:fe:
62:af:22:2a:2c:01:e4:53:c7:c0:57:87:d0:bc:40:
00:f9:d8:9f:e6:36:a2:76:5e:73:9d:79:ba:2c:0a:
9b:60:64:78:f2:27:98:1f:a5:13:8f:8f:6e:ab:61:
51:f2:a8:12:e9:3c:57:cc:f1:d3:20:23:61:ba:7c:
6e:d7:98:10:ee:29:4a:d5:15:53:41:ad:38:52:f9:
73:f7:e9:40:03:ca:f2:96:3f:7f:84:00:87:ba:84:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:75:11:38:8A:B8:17:55:BE:CD:B3:04:C1:91:82:D3:EE:27:B3:A0
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/WXUROIq4F1W-zbMEwZGC0-4ns6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/22
109.111.48.0/20
185.65.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:50:62:1b:c3:7e:81:0e:d6:76:a3:75:2f:c2:21:7b:54:a2:
69:14:7b:c1:10:2b:e6:df:13:76:8c:f3:a5:7a:28:89:bd:12:
a1:a9:f2:4f:00:85:0a:33:fd:ce:8c:78:b4:f4:b2:e0:ca:79:
aa:f1:ca:e2:8d:e9:dc:d8:18:a7:3b:2c:c6:3a:c2:ea:8f:1a:
bb:0c:7b:12:c2:1f:16:30:05:93:6b:be:ad:aa:c3:fb:31:25:
e5:9a:30:cc:e0:d9:05:df:6a:aa:83:44:43:c9:9b:95:53:ea:
80:b3:e5:14:7f:3f:10:1b:06:63:3d:f4:a6:3f:b1:1b:98:e0:
b1:a2:6d:43:66:5d:56:f5:7a:ce:c3:68:a6:f9:02:78:3d:2b:
f7:29:ed:83:3c:99:59:08:08:d7:bc:07:df:fe:2f:4d:c0:d6:
8c:a3:1c:7c:85:bb:03:29:5c:ad:5d:1e:12:ab:ed:2d:1a:a0:
e7:1d:6f:0a:95:ad:2b:23:55:d7:1b:c7:6e:d5:57:9a:41:23:
04:40:20:53:54:98:92:9e:10:65:52:cd:e6:c2:00:af:ba:eb:
0b:f2:bb:f9:a9:58:a5:48:df:91:17:3d:89:9b:ec:35:12:65:
60:8d:23:82:22:96:ea:a2:3c:6a:41:de:e9:13:86:63:48:a2:
63:4f:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:12:01 2026 by rpki-client