Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wZj-K-T6eitI470_EL030r_xfCY.roa
File: wZj-K-T6eitI470_EL030r_xfCY.roa (raw, json)
Hash identifier: WbeEljEVTVMfz2t7bngudghC/uHpxOeztAtcuajFv8s=
Subject key identifier: C1:98:FE:2B:E4:FA:7A:2B:48:E3:BD:3F:10:BD:37:D2:BF:F1:7C:26
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1CABA2AEAA6B1C88C7D351653B0F0FE10
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wZj-K-T6eitI470_EL030r_xfCY.roa
Signing time: Wed 11 Nov 2026 13:09:20 +0000
ROA not before: Wed 11 Nov 2026 13:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219117
IP address blocks: 140.225.220.0/23 maxlen: 23
140.225.222.0/23 maxlen: 23
167.17.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:ba:2a:ea:a6:b1:c8:8c:7d:35:16:53:b0:f0:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 11 13:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c198fe2be4fa7a2b48e3bd3f10bd37d2bff17c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:83:47:59:19:14:9d:aa:ee:4c:5e:a2:75:
c7:b7:50:dc:8c:06:14:ef:65:d6:bf:66:3c:09:86:
c9:89:7e:03:3a:69:24:d5:79:fe:26:f9:5e:85:3a:
18:22:c9:5f:a4:45:db:fb:0c:23:17:14:93:53:37:
51:fa:cf:aa:7e:61:fe:57:b4:a5:2d:03:f7:ef:63:
44:51:09:34:72:ac:49:8f:e1:ac:4c:df:b2:e6:3a:
81:cd:77:45:1c:08:44:6d:42:a6:08:23:6a:71:c3:
25:67:e3:f4:ef:8b:f0:2f:d8:d2:3e:cd:bf:3d:64:
ff:d0:7d:2a:5d:fb:d6:88:c3:a4:28:f0:3a:68:13:
46:ce:5e:d7:49:80:2a:b1:6f:42:3c:f7:88:fb:05:
93:6c:cc:e7:52:97:3c:a3:93:29:55:fe:13:d0:bb:
af:5a:a2:b8:06:c9:df:c1:d7:87:57:23:42:f4:eb:
8a:d0:10:41:4d:40:81:9d:8f:16:43:b0:7d:ec:57:
65:5e:79:8d:58:d0:78:64:28:96:6f:a9:fa:68:ca:
f8:20:dd:12:5a:a7:7f:92:d2:e5:35:e9:43:aa:83:
41:89:32:7c:4a:f8:d6:7d:4e:05:c8:de:11:5e:d2:
cb:a8:67:db:0b:27:a0:62:47:c2:20:2b:9d:96:87:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:98:FE:2B:E4:FA:7A:2B:48:E3:BD:3F:10:BD:37:D2:BF:F1:7C:26
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wZj-K-T6eitI470_EL030r_xfCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.225.220.0/22
167.17.62.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:73:fa:96:0d:f8:91:cc:66:7f:87:50:43:86:a6:10:93:c2:
6b:cb:fd:32:64:b1:be:0c:ca:ff:32:42:66:3d:bb:15:05:30:
d3:03:fd:c9:9b:63:06:02:1a:3b:b1:d5:6e:5e:2f:38:3b:55:
27:9e:df:15:25:12:28:34:ae:ef:91:84:1b:ba:32:fb:ff:23:
c4:14:ca:72:21:71:48:67:79:ed:f1:b1:12:82:7c:95:e6:da:
99:8c:1e:ca:28:36:6f:71:4b:22:33:08:09:52:5d:7a:9c:4d:
f4:01:4e:bf:c7:ad:df:0e:19:65:f4:8b:18:8e:a7:b4:9c:2b:
f7:78:8b:d2:d8:70:f4:ea:8c:aa:80:f2:59:84:70:f0:d1:ca:
f4:6c:b4:e9:fc:de:0d:87:44:8c:f5:9e:9f:19:df:b9:41:d0:
b7:e9:92:66:49:df:84:b3:46:7d:67:4b:e4:2b:4f:d2:13:12:
9f:03:67:92:24:8d:f0:a6:43:cc:6f:a1:9d:06:a2:bd:92:29:
e8:ee:32:d4:bf:4c:a5:bd:17:bb:6f:c3:5f:24:68:ab:77:d9:
eb:ca:df:1e:dd:55:8d:67:37:39:93:73:fa:9d:6d:d0:93:2c:
0c:72:7b:5f:83:95:a5:88:25:36:17:c4:db:64:48:3b:8a:ad:
db:ae:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:36:21 2026 by rpki-client