Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/wwpquAWTUuFb0E9CJs-YBNeMQ7E.roa
File: wwpquAWTUuFb0E9CJs-YBNeMQ7E.roa (raw, json)
Hash identifier: 2XANtZptrutEVaXB3duL9dMIg7D+kzakEupuwq2jEe4=
Subject key identifier: C3:0A:6A:B8:05:93:52:E1:5B:D0:4F:42:26:CF:98:04:D7:8C:43:B1
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368A916FF41CBB23A11D9E2F2651F19
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/wwpquAWTUuFb0E9CJs-YBNeMQ7E.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5394
IP address blocks: 194.20.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a9:16:ff:41:cb:b2:3a:11:d9:e2:f2:65:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c30a6ab8059352e15bd04f4226cf9804d78c43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:67:c5:6e:bc:54:ff:d5:d6:63:c3:f4:ba:
ad:db:86:78:e6:9d:d3:f4:4d:6f:06:bb:71:e3:1c:
f0:bf:ec:33:44:f0:89:fa:49:5b:9b:25:6e:c9:a5:
f0:bb:e2:a3:e5:13:47:2a:b3:20:86:01:25:ac:ac:
ae:71:26:34:f3:91:c1:46:60:2e:a7:84:e7:d5:1b:
87:ea:07:fe:98:84:8a:9d:0e:52:82:ba:f7:92:f9:
5e:7d:27:b5:d3:cd:a0:f9:21:44:13:9d:ed:c1:1e:
08:11:12:f9:c5:4d:64:10:a0:4b:b2:ed:8e:a8:a4:
3d:25:53:ec:34:2d:53:e6:d7:f4:a5:b1:c8:8c:b5:
42:ff:7b:63:50:30:7f:a3:df:a3:0e:55:21:bf:d2:
7e:23:c0:f6:98:89:6a:aa:fd:d4:9c:17:6b:e2:7f:
6a:1e:af:cb:d9:98:c7:c9:2f:b2:a1:fa:87:b5:2f:
bd:94:15:6d:05:f5:20:f3:52:1a:28:6a:9e:8d:76:
7f:19:df:44:11:38:7e:32:e2:20:4e:86:99:3a:17:
d9:f8:ac:d5:9f:da:ce:19:b7:13:25:7e:37:a7:ea:
45:71:78:e1:4e:7f:b9:a2:85:44:53:e3:7d:cb:1f:
f4:92:33:fa:d5:91:e9:33:74:cf:ff:44:6f:f1:41:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0A:6A:B8:05:93:52:E1:5B:D0:4F:42:26:CF:98:04:D7:8C:43:B1
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/wwpquAWTUuFb0E9CJs-YBNeMQ7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:0e:ca:ed:5a:e8:74:9d:88:2d:9c:86:b9:29:d4:c4:03:ee:
a3:9c:e2:f1:84:c4:5a:d1:af:a7:72:36:1c:90:83:60:73:79:
12:18:43:35:b3:d0:de:bd:b6:2a:05:95:a0:0d:4b:5b:5f:22:
dd:37:13:7d:ec:bb:41:78:69:28:4a:ed:92:8a:c0:8c:e1:15:
ce:c6:76:0c:96:89:80:93:f2:68:b1:28:d3:6f:8e:45:e8:4e:
c5:3b:a2:67:6c:83:ad:20:e8:af:70:6b:a9:e7:fe:28:04:13:
ea:8b:bd:c5:58:cc:fc:91:0b:a9:f1:95:19:86:75:c9:0c:e6:
b9:76:90:b9:c7:ce:f4:bf:af:7b:dc:b6:14:8f:65:6c:da:89:
85:af:f8:10:52:f9:cc:28:f8:f1:e6:91:e5:a5:64:32:e4:e0:
27:6f:3e:b3:9b:58:94:53:bd:3b:0d:af:fa:91:54:67:29:10:
86:f1:44:bd:b1:f0:0d:9e:82:db:e3:a2:0b:aa:79:a8:a4:13:
a8:63:cb:2a:17:a1:34:93:3e:39:39:b4:a1:74:d9:67:ed:4d:
1c:a2:6f:3e:75:6a:76:32:38:9a:9d:cd:1e:c9:18:6d:3b:95:
ae:15:19:55:83:b7:df:77:4f:88:2c:9f:0c:2a:68:95:0f:e6:
91:a8:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:07 2026 by rpki-client