Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/WRfWp6HbqiLrJdTcEFqGTR_haxY.roa
File: WRfWp6HbqiLrJdTcEFqGTR_haxY.roa (raw, json)
Hash identifier: zRStM1z0fS/dDt32gvvFhDITrhGZhwjd4CFo2EuaBzY=
Subject key identifier: 59:17:D6:A7:A1:DB:AA:22:EB:25:D4:DC:10:5A:86:4D:1F:E1:6B:16
Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial: 019CF26372F0B73A953D4E432FF22AC6C2F4
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/WRfWp6HbqiLrJdTcEFqGTR_haxY.roa
Signing time: Sun 15 Mar 2026 16:45:29 +0000
ROA not before: Sun 15 Mar 2026 16:45:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32135
IP address blocks: 209.248.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:63:72:f0:b7:3a:95:3d:4e:43:2f:f2:2a:c6:c2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
Validity
Not Before: Mar 15 16:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5917d6a7a1dbaa22eb25d4dc105a864d1fe16b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:46:33:b9:97:de:bb:5a:67:33:6a:6f:60:
97:c4:b7:6e:71:de:ed:e8:f4:47:0a:62:71:69:87:
c2:13:0d:d8:cb:a2:08:ad:1a:8c:e6:9a:0e:b6:39:
14:ce:41:43:dd:70:cd:91:b1:d3:bb:08:03:c2:8a:
60:10:b5:12:a3:89:cd:d4:ce:49:8e:d9:41:8e:92:
59:ce:a0:fd:96:4f:07:7b:8f:58:e1:83:9a:7c:dd:
ce:c0:02:09:2b:1e:6b:09:2c:7b:c3:c0:65:17:ef:
18:93:8f:7d:fe:7a:47:70:d3:85:ec:65:0f:59:84:
77:b6:23:cd:1e:dc:ff:d9:97:d7:59:09:c3:ee:b4:
fb:88:5b:17:64:de:9c:ec:8e:87:92:82:68:c6:15:
ed:3e:c1:fb:88:0f:48:1d:52:40:87:b2:8b:eb:b7:
5b:12:d5:d6:77:66:01:8c:37:fb:03:bc:b4:36:57:
bd:b5:b5:ee:d2:06:fd:5c:17:2b:80:e4:04:fd:64:
40:61:21:21:f8:9f:ba:90:50:b8:09:f0:a6:9b:8a:
d1:ea:96:1d:73:3f:fb:03:82:16:10:c4:9a:b7:8c:
83:e3:e3:e0:c2:94:0a:5e:fe:a8:1e:f2:3c:3b:7e:
e9:43:ad:58:92:29:4c:fd:f9:ee:82:80:cb:0a:b6:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:17:D6:A7:A1:DB:AA:22:EB:25:D4:DC:10:5A:86:4D:1F:E1:6B:16
X509v3 Authority Key Identifier:
keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/WRfWp6HbqiLrJdTcEFqGTR_haxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.248.32.0/19
Signature Algorithm: sha256WithRSAEncryption
55:5c:9a:75:73:5d:cf:6c:3f:6d:30:cb:94:1b:a9:10:b8:b3:
11:10:00:0a:55:05:ef:1c:6d:ba:4a:ae:9a:0a:ce:63:a1:ec:
48:30:11:c3:85:aa:c2:7a:1b:22:6c:4d:c3:a1:05:ae:a9:ce:
57:7d:fa:6b:35:16:f9:46:4c:a1:84:f1:f0:5c:a5:45:75:29:
3c:7b:b2:bd:1c:dc:57:72:34:d0:eb:6d:33:75:e2:e4:26:35:
0a:44:4a:83:33:a7:ee:19:3f:52:fe:d5:95:6a:3d:10:f0:54:
3a:aa:3a:32:aa:0e:c7:50:20:0c:15:5a:d1:61:a2:f5:65:ee:
87:01:07:f2:b4:71:74:5c:b7:42:c6:7a:9d:d4:f1:3a:cd:e5:
16:c9:88:34:0b:5b:9f:7b:95:c3:0c:a3:be:4e:f1:a5:67:77:
41:f9:b8:4a:e6:d8:c6:ed:99:8d:bb:3d:97:52:fa:e5:02:55:
1c:b0:e6:3c:75:47:f3:56:60:b8:ba:b9:ee:33:36:0a:cb:e4:
29:fc:da:cc:08:ac:44:94:51:71:1d:44:ba:7a:6c:37:bb:66:
ef:e4:ad:a6:93:e4:b9:61:9d:5d:77:18:70:96:8c:82:a5:a6:
39:95:2c:da:a9:b5:25:19:6d:bc:7e:5b:5d:ed:90:41:92:24:
aa:be:a4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:06 2026 by rpki-client