Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/wEJikxHblT6L9s-bWi71LrsBZRI.roa
File: wEJikxHblT6L9s-bWi71LrsBZRI.roa (raw, json)
Hash identifier: bunPLGyVfPKxwGeY/HVdEI1aNYchPYcPFBV30VR16pY=
Subject key identifier: C0:42:62:93:11:DB:95:3E:8B:F6:CF:9B:5A:2E:F5:2E:BB:01:65:12
Certificate issuer: /CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
Certificate serial: 019F236915596C77F5BAC43260FD21D916F6
Authority key identifier: B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/wEJikxHblT6L9s-bWi71LrsBZRI.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203778
IP address blocks: 194.33.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:15:59:6c:77:f5:ba:c4:32:60:fd:21:d9:16:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c042629311db953e8bf6cf9b5a2ef52ebb016512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:4d:fd:b1:49:23:67:46:8a:52:5c:b3:3d:
2c:74:bf:f8:c9:e2:07:e0:78:02:71:23:4a:7a:fb:
20:17:9a:47:23:60:0f:a0:d9:e2:66:6a:e8:6b:c2:
5c:95:81:c8:25:24:fc:a3:fd:1d:e1:80:7a:80:46:
d6:01:b8:ad:de:00:0c:ea:ee:a8:de:e7:1b:25:67:
fc:85:e8:e6:73:8e:10:63:37:51:39:0a:b1:6d:c8:
2f:53:3e:b9:b9:d7:c3:1a:71:e9:5a:38:62:4e:cb:
b1:e6:39:f6:fa:bf:00:af:3b:04:e6:1c:bb:68:ab:
8b:57:6c:5a:81:2b:1c:d5:f7:79:97:31:2b:37:eb:
77:64:cc:60:de:ef:47:21:ff:35:99:69:f0:f3:9b:
72:bd:4b:cb:97:e6:ed:c5:c8:05:49:95:ad:e4:e5:
13:a4:ef:a5:22:3b:47:72:b0:2f:58:9f:ad:eb:fc:
1d:e6:5f:5d:92:d7:73:3c:58:0a:9e:76:27:b4:ef:
7f:11:7d:48:0f:ff:ae:bf:58:04:53:f8:2d:98:13:
01:73:02:3d:02:83:ed:2b:da:a0:8d:8b:cc:e2:0d:
ff:15:10:df:da:a2:b1:da:c3:42:86:c0:63:e4:26:
62:10:b6:20:88:f2:31:82:39:6c:db:e4:21:48:b2:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:62:93:11:DB:95:3E:8B:F6:CF:9B:5A:2E:F5:2E:BB:01:65:12
X509v3 Authority Key Identifier:
keyid:B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/wEJikxHblT6L9s-bWi71LrsBZRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.76.0/23
Signature Algorithm: sha256WithRSAEncryption
10:b1:37:fc:eb:53:6f:98:e5:a6:14:d6:3a:01:95:f4:d0:30:
bc:f5:bc:64:39:e2:a6:f2:5a:07:87:5c:88:ed:83:3d:21:43:
f9:ec:36:d5:24:30:15:e5:a9:19:ee:4d:2d:55:e8:d2:40:49:
fd:6b:f9:a4:bf:51:aa:f7:39:34:75:dd:41:a1:b5:ee:6d:70:
a6:fc:53:5b:b6:a9:04:b7:97:ea:29:f9:ec:1a:23:11:70:fb:
6f:20:2f:69:e7:89:ba:7f:2e:42:82:6d:5b:06:ac:e4:a3:70:
86:b1:77:8c:a1:ba:37:51:67:3c:02:7f:e6:ae:de:c8:91:a4:
6e:1f:bf:49:8f:91:01:64:0e:dd:8a:e5:8a:27:83:c1:c7:63:
f3:70:b4:11:26:76:59:24:b7:c5:8d:5a:63:57:6b:a9:a4:0c:
84:d5:97:1b:31:17:ea:97:48:f7:d6:aa:9e:5f:08:45:63:fc:
d6:30:59:bb:6c:c7:60:50:66:fa:82:26:63:3e:59:8c:8a:7e:
48:49:dc:93:91:56:12:2c:b8:47:93:77:98:b5:ca:6b:f7:a7:
44:8b:d0:d6:0e:a7:5b:98:dc:7a:5f:a7:5a:fd:fe:26:33:6c:
15:3d:97:b9:1b:f2:43:27:76:6e:72:f5:a8:8e:fa:8d:e1:ba:
a6:aa:01:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:45 2026 by rpki-client