Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/WfDkBo6-ByY2M_9lVfhhbvJ8pG8.roa
File: WfDkBo6-ByY2M_9lVfhhbvJ8pG8.roa (raw, json)
Hash identifier: JE6Ay7MaZYnar46SXXtpFkglHNLfLDb6FMY0RRt+DYM=
Subject key identifier: 59:F0:E4:06:8E:BE:07:26:36:33:FF:65:55:F8:61:6E:F2:7C:A4:6F
Certificate issuer: /CN=d3373d1dc6148cb270950876abafd7401d4332b0
Certificate serial: 019F17802F79CAA4254083BC09A576423640
Authority key identifier: D3:37:3D:1D:C6:14:8C:B2:70:95:08:76:AB:AF:D7:40:1D:43:32:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/WfDkBo6-ByY2M_9lVfhhbvJ8pG8.roa
Signing time: Tue 30 Jun 2026 07:48:24 +0000
ROA not before: Tue 30 Jun 2026 07:48:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196902
IP address blocks: 193.105.48.0/24 maxlen: 24
2001:67c:f6c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:80:2f:79:ca:a4:25:40:83:bc:09:a5:76:42:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3373d1dc6148cb270950876abafd7401d4332b0
Validity
Not Before: Jun 30 07:48:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59f0e4068ebe07263633ff6555f8616ef27ca46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:e7:a0:ec:35:e0:c2:04:7c:5e:8e:66:d9:
eb:05:d4:4a:b5:2d:ca:e7:c3:e7:7f:26:44:6a:03:
7e:65:44:99:75:1a:02:3d:f5:78:39:5a:3f:60:2a:
20:f4:91:05:3c:19:c7:7c:ca:34:32:ae:ab:6f:be:
8f:9d:c1:12:e9:af:ff:1b:4b:58:51:de:34:35:e5:
6f:e1:fe:03:6b:fc:71:24:9f:95:1e:86:09:05:b5:
9f:92:3f:54:75:55:6d:f1:12:6a:d9:af:52:9f:49:
eb:34:9f:7c:b9:47:b8:82:7f:23:c8:2b:72:84:51:
90:af:e7:34:d5:df:d3:15:fc:02:f7:47:b1:45:6d:
48:02:2b:96:ca:60:06:5e:8d:85:aa:a2:e3:e6:e4:
45:b1:27:d5:80:a9:e1:11:c1:16:05:2e:b9:6f:69:
87:ef:69:82:b4:af:19:5e:b3:7d:77:46:f8:ce:4d:
fb:bb:16:2e:ff:37:1a:f7:93:09:1c:dd:30:27:94:
28:60:7e:64:6c:cf:c5:8a:d2:a8:28:5d:91:8e:bf:
56:1f:62:3c:ce:37:3b:2f:ce:1f:a7:4f:6a:c8:ce:
26:05:e0:21:2c:76:70:61:10:8e:de:fb:ac:07:88:
25:15:62:66:89:2e:c4:11:86:33:34:bf:4d:f3:4e:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F0:E4:06:8E:BE:07:26:36:33:FF:65:55:F8:61:6E:F2:7C:A4:6F
X509v3 Authority Key Identifier:
keyid:D3:37:3D:1D:C6:14:8C:B2:70:95:08:76:AB:AF:D7:40:1D:43:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zc9HcYUjLJwlQh2q6_XQB1DMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/WfDkBo6-ByY2M_9lVfhhbvJ8pG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/378d28-594e-4a0d-898b-c7400709a8dd/1/0zc9HcYUjLJwlQh2q6_XQB1DMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.48.0/24
IPv6:
2001:67c:f6c::/48
Signature Algorithm: sha256WithRSAEncryption
5b:22:de:4d:39:14:72:b8:e7:35:5c:7d:ca:b4:1a:1b:71:b5:
6e:4e:24:54:9d:3b:8a:00:b5:71:fe:b8:94:a0:19:31:0a:5c:
ce:dd:65:bb:25:d2:6e:02:53:f7:87:17:17:bf:6d:b5:c4:18:
69:e2:2a:f5:f5:fc:92:fd:26:86:1b:f2:86:a6:63:02:44:1d:
ae:c4:21:41:48:48:7a:b3:27:8c:9d:7a:25:b3:6c:4b:72:0b:
4e:05:e8:c5:1b:78:8c:49:b8:a5:b0:a8:5c:6b:3e:df:9a:f7:
8d:8f:90:50:1f:c2:31:ee:72:06:8c:67:c0:44:c7:30:5e:8f:
ee:86:87:40:88:2b:b8:32:80:55:da:2e:10:83:1f:f9:5e:b7:
44:74:96:c3:f6:1a:e1:7f:b8:cd:f9:f6:a8:06:68:a1:40:d2:
57:80:f4:b8:9e:02:56:77:23:46:51:cc:5a:e2:62:9f:6b:de:
39:21:4e:50:44:eb:9b:c6:5d:d3:43:82:c6:c2:15:47:d1:e6:
9c:4a:46:ad:d2:db:da:40:a3:c4:e1:16:40:2a:2d:0f:4c:e4:
71:ae:b8:80:90:10:39:df:82:6c:2b:96:8a:d5:be:b8:26:b4:
3f:58:78:30:97:8a:39:2e:39:94:95:51:39:6e:c8:ee:41:5e:
41:bc:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:22 2026 by rpki-client