Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/wcZFZKJuAQyp04XCR7u-DhFRd3A.roa
File: wcZFZKJuAQyp04XCR7u-DhFRd3A.roa (raw, json)
Hash identifier: 5hph13qMNz8BJaZ5fOJ0lHqfAydPPEugNlEoJOSv5SQ=
Subject key identifier: C1:C6:45:64:A2:6E:01:0C:A9:D3:85:C2:47:BB:BE:0E:11:51:77:70
Certificate issuer: /CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Certificate serial: 019F2368D8D5E9AC160A3128B181DFCBCA94
Authority key identifier: B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/wcZFZKJuAQyp04XCR7u-DhFRd3A.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31027
IP address blocks: 194.50.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d8:d5:e9:ac:16:0a:31:28:b1:81:df:cb:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1c64564a26e010ca9d385c247bbbe0e11517770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:3d:8a:37:81:ca:a4:a0:87:64:16:75:00:
de:c8:1f:b8:21:aa:4e:1b:0e:10:7b:78:0c:be:26:
82:26:6d:40:22:4a:9a:4c:e0:65:4f:67:41:8c:80:
a9:e1:fb:80:b0:3a:74:b7:39:cd:77:46:1a:1e:c9:
8c:c7:0d:42:d8:c1:dc:0f:c4:e4:07:a9:df:3d:e9:
19:47:e9:5a:27:3b:d4:3c:8d:65:eb:88:46:9a:ec:
de:ca:b6:d1:0e:e2:55:aa:a4:9d:9f:d8:b8:8c:9f:
bb:e1:8f:ca:89:36:00:2d:fd:80:38:0c:c6:88:10:
39:eb:9e:7f:f9:22:9c:52:0e:27:a2:bb:19:f4:06:
87:d2:61:ed:13:57:1e:c2:c0:0c:7f:9c:d0:7c:83:
c5:da:34:3f:b3:22:54:1a:b6:56:c9:6b:0a:95:17:
ce:9b:d5:28:31:83:c0:1e:c1:9b:b8:e3:6a:69:90:
c6:27:2d:38:78:6d:1d:66:05:45:b5:25:c6:88:a0:
8a:7b:5d:68:bf:64:5e:15:48:a4:69:f7:2d:ad:ba:
8f:07:4d:ef:2c:22:53:f5:73:a5:d5:8b:49:37:5e:
32:9c:c9:aa:5e:0d:0f:b6:21:27:32:e9:0c:b7:04:
5b:b3:d5:da:61:b0:95:6b:2d:6a:e2:c7:eb:d2:6f:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C6:45:64:A2:6E:01:0C:A9:D3:85:C2:47:BB:BE:0E:11:51:77:70
X509v3 Authority Key Identifier:
keyid:B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/wcZFZKJuAQyp04XCR7u-DhFRd3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:33:6f:e4:bc:d5:45:93:16:91:ec:bb:ea:05:c6:62:cd:39:
a7:1d:ab:58:1a:dd:30:8e:b2:0b:11:ad:2f:60:5b:df:20:9e:
9e:86:10:d8:e9:f6:f5:bd:89:28:89:51:b2:a9:8e:48:be:16:
4a:e6:e8:aa:9f:d3:c6:ab:2e:66:5b:89:e4:9b:70:88:da:47:
b9:75:65:7b:58:42:f3:64:ca:aa:b3:cc:ce:1a:be:f2:7e:a1:
36:9a:68:8a:fa:bb:f7:fa:50:c7:ee:c5:f6:6a:3d:5e:0d:c3:
1a:da:55:56:96:a9:c5:3a:6d:96:52:19:de:16:25:fd:47:a7:
8e:2d:3e:d2:c8:75:cc:15:24:fe:ea:7f:85:d5:5d:61:40:e2:
3a:3d:d2:02:70:c1:de:4f:8d:7a:9d:94:69:af:b0:05:8d:43:
17:e7:a6:49:3e:d1:f9:2d:3c:5e:31:eb:7d:c8:03:84:ad:f1:
70:4b:69:6b:6d:e5:dd:a3:df:5d:6f:65:52:9f:e8:7d:4c:0c:
1a:21:8c:00:40:7c:64:98:5a:1e:ef:cd:5f:1e:69:7d:4c:e0:
0d:3d:46:14:bc:89:aa:6f:01:f1:58:f6:12:ca:88:d2:ca:b6:
20:0c:47:0e:e0:4d:2b:d4:54:24:28:92:05:0f:76:97:0f:90:
5a:04:ef:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaNjV6awWCjEosYHfy8qUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjRiNTc0YTI0M2U4NTNkZjJkZjA1NGM5YzlmMDkxZWQ0
N2YxYTEwHhcNMjYwNzAyMTUxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWM2NDU2NGEyNmUwMTBjYTlkMzg1YzI0N2JiYmUwZTExNTE3NzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YI9ijeByqSgh2QWdQDeyB+4IapO
Gw4Qe3gMviaCJm1AIkqaTOBlT2dBjICp4fuAsDp0tznNd0YaHsmMxw1C2MHcD8Tk
B6nfPekZR+laJzvUPI1l64hGmuzeyrbRDuJVqqSdn9i4jJ+74Y/KiTYALf2AOAzG
iBA5655/+SKcUg4norsZ9AaH0mHtE1cewsAMf5zQfIPF2jQ/syJUGrZWyWsKlRfO
m9UoMYPAHsGbuONqaZDGJy04eG0dZgVFtSXGiKCKe11ov2ReFUikafctrbqPB03v
LCJT9XOl1YtJN14ynMmqXg0PtiEnMukMtwRbs9XaYbCVay1q4sfr0m9vCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHGRWSibgEMqdOFwke7vg4RUXdwMB8GA1UdIwQY
MBaAFLAktXSiQ+hT3y3wVMnJ8JHtR/GhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NTMWRLSkQ2RlBmTGZCVXljbndrZTFIOGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYt
NjY3ZDY2NDY5Y2Q5LzEvd2NaRlpLSnVBUXlwMDRYQ1I3dS1EaEZSZDNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYtNjY3ZDY2NDY5Y2Q5
LzEvc0NTMWRLSkQ2RlBmTGZCVXljbndrZTFIOGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjI5MA0G
CSqGSIb3DQEBCwUAA4IBAQA8M2/kvNVFkxaR7LvqBcZizTmnHatYGt0wjrILEa0v
YFvfIJ6ehhDY6fb1vYkoiVGyqY5IvhZK5uiqn9PGqy5mW4nkm3CI2ke5dWV7WELz
ZMqqs8zOGr7yfqE2mmiK+rv3+lDH7sX2aj1eDcMa2lVWlqnFOm2WUhneFiX9R6eO
LT7SyHXMFST+6n+F1V1hQOI6PdICcMHeT416nZRpr7AFjUMX56ZJPtH5LTxeMet9
yAOErfFwS2lrbeXdo99db2VSn+h9TAwaIYwAQHxkmFoe781fHml9TOANPUYUvImq
bwHxWPYSyojSyrYgDEcO4E0r1FQkKJIFD3aXD5BaBO9h
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:37 2026 by rpki-client