Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wETOr7pjVmV7xbWNKBuP0t6nRl8.roa
File: wETOr7pjVmV7xbWNKBuP0t6nRl8.roa (raw, json)
Hash identifier: pRRkwperUh3CBR5kxYN2htpz3gsx9h9C5+Rvr60LtA8=
Subject key identifier: C0:44:CE:AF:BA:63:56:65:7B:C5:B5:8D:28:1B:8F:D2:DE:A7:46:5F
Certificate issuer: /CN=c02ea5d99d10bcdd2949693725375190909ac782
Certificate serial: 019F23686D44722BA9FB8F49AABFCD49EBE8
Authority key identifier: C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wETOr7pjVmV7xbWNKBuP0t6nRl8.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214591
IP address blocks: 193.34.203.192/26 maxlen: 26
2001:7f8:15b:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6d:44:72:2b:a9:fb:8f:49:aa:bf:cd:49:eb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02ea5d99d10bcdd2949693725375190909ac782
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c044ceafba6356657bc5b58d281b8fd2dea7465f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:d9:2c:b2:69:ad:53:11:55:a1:6a:f8:8c:
b7:3e:e2:0b:c7:3c:7d:07:44:27:01:6a:f1:4d:78:
7d:5d:b8:5b:b1:fa:7e:fa:ea:01:b6:eb:39:db:df:
58:aa:41:15:be:e1:9b:ab:6d:61:c9:69:dc:77:67:
3c:e9:e3:94:7f:0c:05:c0:37:10:c6:fb:77:bd:82:
c3:0f:ab:f6:65:68:5b:14:b9:28:5b:8f:85:fe:d4:
61:2f:6f:86:30:87:24:f0:cd:27:47:52:3b:16:31:
2d:54:a1:0e:57:f6:1f:20:f3:e6:1e:27:a5:9a:c9:
1f:f8:e9:72:f0:3d:fa:37:19:29:58:58:5c:26:bb:
09:af:cc:7f:4f:01:a5:bb:dd:98:98:f5:4d:15:58:
3b:73:a3:8e:fc:e8:30:81:a9:80:de:8e:14:b6:98:
6b:61:a5:21:31:2b:39:4d:1e:0d:cb:c5:1d:f9:69:
ef:9c:50:5d:40:9c:54:ba:3e:5b:d5:97:50:91:b0:
b1:af:b4:2c:a0:35:6e:f8:1f:20:63:af:41:c5:0a:
64:8a:c7:67:ce:9d:59:99:ba:fc:51:3e:09:56:01:
d5:5f:35:6a:19:c5:23:d9:72:2e:31:5d:e5:ab:c0:
c4:cc:f4:ba:1a:24:b5:ef:c2:73:be:3a:87:ca:92:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:CE:AF:BA:63:56:65:7B:C5:B5:8D:28:1B:8F:D2:DE:A7:46:5F
X509v3 Authority Key Identifier:
keyid:C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wETOr7pjVmV7xbWNKBuP0t6nRl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.203.192/26
IPv6:
2001:7f8:15b:1::/64
Signature Algorithm: sha256WithRSAEncryption
7f:81:6e:f9:4f:2a:67:d4:44:b5:cf:2e:e3:d9:1e:f8:57:bc:
8d:a4:db:29:bf:4a:34:3b:13:3b:0e:76:bb:f6:2b:5f:16:77:
9c:f0:d3:c2:a4:41:b6:e3:ff:2d:04:da:78:a1:b6:4f:ff:0c:
02:af:45:52:98:7f:51:5b:bf:fa:57:d4:44:a2:1c:f0:e1:61:
6c:cb:98:53:20:e7:ed:b4:3b:24:23:de:e9:63:b1:70:b0:bd:
0c:f9:b4:98:99:c3:0c:62:05:25:4e:5f:d7:16:6e:e6:8f:6e:
9e:98:9b:91:bf:51:3b:a5:ca:93:a0:98:42:fe:2b:43:cb:33:
72:90:a9:12:32:64:5f:d5:0d:f8:b5:4e:26:43:4d:0e:ba:e7:
bd:37:dc:a5:06:90:3a:4e:23:7f:92:04:4c:b6:e6:49:d8:85:
5d:f8:d5:aa:6e:cf:67:0d:a0:67:41:df:85:24:e1:95:b6:81:
35:d7:69:72:65:70:38:c8:c2:3f:1a:9d:18:f1:35:15:dd:f0:
e3:5c:e2:2c:b7:46:ae:2c:a4:07:6b:d6:7d:25:b6:29:d1:37:
e5:5b:8d:26:52:4a:df:f7:25:30:fc:4f:ad:d1:0a:6d:15:0a:
40:77:ca:fa:06:cb:4c:ca:28:52:05:3f:49:67:16:b3:34:09:
9d:94:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:11 2026 by rpki-client