Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/W7PD11LygxlXwTSc_eQjL66TbcM.roa
File: W7PD11LygxlXwTSc_eQjL66TbcM.roa (raw, json)
Hash identifier: 4DlREykdT0y3ocX4wZzbFJdh2/QXV/XMjSZIGtZWXyM=
Subject key identifier: 5B:B3:C3:D7:52:F2:83:19:57:C1:34:9C:FD:E4:23:2F:AE:93:6D:C3
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A1BBD5BB37F4D7A634FD3F52B6975A4A91
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/W7PD11LygxlXwTSc_eQjL66TbcM.roa
Signing time: Sun 08 Nov 2026 15:45:08 +0000
ROA not before: Sun 08 Nov 2026 15:45:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215749
IP address blocks: 212.21.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:d5:bb:37:f4:d7:a6:34:fd:3f:52:b6:97:5a:4a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 8 15:45:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bb3c3d752f2831957c1349cfde4232fae936dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:8c:05:74:79:3b:61:64:65:49:b5:8e:61:
1f:43:72:dc:b1:30:5b:79:23:e6:3c:7b:79:21:31:
48:49:c1:b5:89:25:a6:57:ff:6a:c3:60:9a:76:d8:
31:87:89:a6:dc:b0:a9:de:60:2d:2b:06:c9:ef:bd:
b8:9d:52:ea:cb:3e:cf:ca:c5:fe:85:7e:8b:b6:8c:
ac:7f:97:9e:dd:55:a7:f3:9c:17:cc:6c:e8:e2:38:
17:db:ca:b6:c7:96:86:cf:db:89:2e:36:b3:f2:9b:
d8:68:06:b9:72:95:16:22:cf:56:71:24:33:c9:3c:
79:10:24:c4:14:f0:26:43:59:42:12:d9:b4:17:2b:
85:10:4d:7c:98:8d:1e:3f:87:cd:0b:5c:6a:85:82:
54:ae:ad:b5:89:47:3a:e3:87:c5:cd:ce:5f:c7:2a:
72:90:56:36:0e:84:73:88:a4:49:63:45:c6:d5:7d:
e7:a0:cd:c7:b7:15:d4:14:55:45:72:90:fc:bc:d1:
e3:54:39:b0:c8:6d:1d:0c:6a:71:64:6c:7e:15:a1:
7d:d2:e4:eb:c0:ab:71:b5:8c:46:63:b6:fc:64:93:
57:5c:8e:4b:9c:0c:0d:49:8d:0d:7e:87:76:05:63:
22:84:59:ce:b6:96:46:4f:25:19:88:42:a6:01:c7:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B3:C3:D7:52:F2:83:19:57:C1:34:9C:FD:E4:23:2F:AE:93:6D:C3
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/W7PD11LygxlXwTSc_eQjL66TbcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.100.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f0:0a:10:12:c6:f1:55:94:af:e0:14:bc:e2:d5:b4:66:35:
a0:31:c3:51:19:52:cf:45:ea:d8:0f:b4:66:56:88:83:88:cf:
5a:57:06:ef:29:d1:36:21:d9:76:df:14:34:d3:a8:ac:89:f5:
78:3b:44:cc:35:85:81:fb:ba:39:2d:03:43:b0:35:be:f1:5e:
9d:ab:a3:32:5c:9c:d2:6c:f4:df:de:07:f4:9b:74:f1:75:65:
3c:a9:4b:63:d5:3d:0d:73:cd:f5:49:05:8e:90:8e:ea:b7:17:
a3:51:11:b6:87:28:eb:7e:84:22:f0:77:f9:41:4e:3b:5d:6d:
a4:a7:90:ae:af:37:02:0f:ab:b7:cc:89:00:c6:3a:10:5a:40:
c1:b5:31:8e:f6:bb:7d:49:90:30:33:25:c0:9b:2d:8e:d9:2e:
87:dd:27:95:29:86:67:37:1f:70:48:ec:be:da:0a:3c:22:6f:
fc:70:25:86:18:0d:d8:cf:46:f7:61:fc:7b:eb:f9:1a:b9:26:
97:fb:1d:f4:27:a3:bc:a0:0f:de:8a:3a:b0:8c:c2:e2:39:26:
5a:c2:7a:b3:3e:c5:f5:a2:c8:6a:2a:54:96:68:64:2b:22:7a:
8c:5c:c3:ed:52:82:11:74:f3:6e:58:1d:71:14:0a:a8:29:21:
85:a0:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:46 2026 by rpki-client