Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/WP_E34plJ0O3N0S7JYCB7lN7wmA.roa
File: WP_E34plJ0O3N0S7JYCB7lN7wmA.roa (raw, json)
Hash identifier: w7tp2TDpf5fEZdFoSaHNL5/XjscaOJcFum6Cz+q+sLA=
Subject key identifier: 58:FF:C4:DF:8A:65:27:43:B7:37:44:BB:25:80:81:EE:53:7B:C2:60
Certificate issuer: /CN=2494f51a3b17ee8fffc2bcc5cfb236a2c06d3014
Certificate serial: 019F2368678FEFFB2B8F430F7816CC4A1C1B
Authority key identifier: 24:94:F5:1A:3B:17:EE:8F:FF:C2:BC:C5:CF:B2:36:A2:C0:6D:30:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/WP_E34plJ0O3N0S7JYCB7lN7wmA.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205844
IP address blocks: 178.157.88.0/23 maxlen: 24
185.204.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:67:8f:ef:fb:2b:8f:43:0f:78:16:cc:4a:1c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2494f51a3b17ee8fffc2bcc5cfb236a2c06d3014
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58ffc4df8a652743b73744bb258081ee537bc260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:50:76:92:cd:3c:54:0a:22:5b:8d:eb:2e:
4d:d6:87:fc:7b:b1:5b:1a:78:90:98:73:a4:79:29:
94:d5:de:4f:e1:b4:1d:14:65:f4:e7:72:8e:d9:87:
65:a8:d2:21:33:06:44:3d:b6:1e:47:64:be:0f:8c:
8e:be:3f:81:4e:41:7e:52:a4:ac:bc:07:aa:54:48:
61:61:5c:7f:06:16:25:43:74:5e:20:c6:5a:74:cb:
13:d1:10:69:27:f4:2d:d0:69:b2:7d:f0:89:20:0a:
e4:19:24:ed:e7:ec:5a:64:0c:7b:94:52:a3:3e:f3:
0b:9c:42:5b:9e:34:ef:41:1a:10:5c:0d:13:8a:0e:
f4:5b:fe:27:a5:d1:a9:c8:57:4b:da:94:db:f3:75:
ee:0c:62:56:c2:ca:04:c7:61:9f:8d:06:3b:3b:98:
0f:ee:51:3a:5d:62:ea:81:b9:e3:7d:68:6f:94:5d:
bd:e2:36:35:e0:b4:57:6f:8f:eb:d3:8c:3e:39:5c:
2b:98:9e:41:b6:22:fa:1b:9c:01:85:c9:a4:a0:a6:
fe:e4:9b:18:80:40:67:44:33:78:65:74:ea:29:b9:
cc:20:c7:b8:68:74:68:cd:1a:a1:7d:07:a8:9a:8e:
69:91:1c:60:6e:ee:2f:3d:bd:a0:d1:20:9d:d7:94:
c5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:C4:DF:8A:65:27:43:B7:37:44:BB:25:80:81:EE:53:7B:C2:60
X509v3 Authority Key Identifier:
keyid:24:94:F5:1A:3B:17:EE:8F:FF:C2:BC:C5:CF:B2:36:A2:C0:6D:30:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/WP_E34plJ0O3N0S7JYCB7lN7wmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.88.0/23
185.204.128.0/22
Signature Algorithm: sha256WithRSAEncryption
47:b2:4b:38:44:21:9d:29:9c:5e:b4:ec:08:7d:1f:18:e8:e6:
ac:6e:b5:1c:62:c0:e5:ef:f3:bd:26:ce:29:c9:d6:6d:20:a6:
16:aa:a2:5f:35:14:e8:e0:b1:5f:da:22:f9:bb:ce:7d:3f:5f:
06:16:45:fa:7f:20:93:06:32:d1:24:ed:e3:7e:00:11:34:da:
c7:e7:1e:a2:f1:ad:fa:2d:e6:06:6d:4c:34:b3:45:d4:29:aa:
9b:2b:10:9c:fd:2d:15:6d:b8:4f:2e:42:fa:a9:03:fd:b0:c6:
79:76:24:61:f4:4c:8d:c7:16:7f:20:b7:c8:06:98:d2:87:22:
60:fd:79:cf:49:ac:0e:c1:12:8d:4d:17:08:38:eb:f7:f3:d5:
e9:eb:df:0e:56:32:0d:1d:cd:b1:2c:70:c1:df:25:fb:0b:45:
56:62:7f:f2:bd:c8:80:bc:08:8b:17:d5:aa:52:7c:cf:45:83:
e2:74:6f:1f:b0:fc:94:1f:d9:c4:37:22:a2:26:7d:0c:f4:7a:
2d:23:c3:a0:72:c9:82:87:ef:1f:bb:d4:3a:74:24:d1:c8:8a:
3e:29:66:57:c9:2d:63:09:58:07:33:82:28:5f:f4:2d:2a:cd:
4e:54:b0:ab:4a:b8:1a:25:3c:9d:58:a2:51:f0:21:bd:ec:94:
c8:4c:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:21:41 2026 by rpki-client