Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/WfbgqzFvbp8TCWxSG_sNKuLnLRk.roa
File: WfbgqzFvbp8TCWxSG_sNKuLnLRk.roa (raw, json)
Hash identifier: jfHBs52kM4vMm6kxJTz0eoaLnYZ9f8a9vM4u4mqutm0=
Subject key identifier: 59:F6:E0:AB:31:6F:6E:9F:13:09:6C:52:1B:FB:0D:2A:E2:E7:2D:19
Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930
Certificate serial: 019F1A6B8DB7C0DB5633DA6888978E031BB1
Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/WfbgqzFvbp8TCWxSG_sNKuLnLRk.roa
Signing time: Tue 30 Jun 2026 21:24:43 +0000
ROA not before: Tue 30 Jun 2026 21:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216058
IP address blocks: 2.56.204.0/22 maxlen: 24
91.195.254.0/23 maxlen: 24
91.198.108.0/23 maxlen: 24
188.164.152.0/21 maxlen: 24
2a01:bbc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:6b:8d:b7:c0:db:56:33:da:68:88:97:8e:03:1b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930
Validity
Not Before: Jun 30 21:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59f6e0ab316f6e9f13096c521bfb0d2ae2e72d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:54:b8:24:1e:db:e2:a9:1d:cb:37:0c:ad:47:
ea:b1:ec:ca:fc:9b:b2:4d:56:91:0c:73:4a:96:ca:
5a:ec:cd:c6:f3:59:ce:7b:4b:80:53:66:6a:e9:dd:
4b:8b:0c:e7:11:42:ca:8e:9b:32:53:df:c2:01:15:
aa:8f:0a:2a:3e:78:ae:47:ab:c3:26:cf:38:b9:67:
76:e3:7a:7c:98:47:80:db:a0:93:92:4e:05:4b:0b:
e8:2c:c7:a1:75:34:20:72:32:a4:7c:1d:dc:cf:2b:
36:76:b1:3b:23:37:1e:18:43:57:84:1c:5d:6d:35:
ea:d2:94:4c:d3:b9:b8:37:38:9d:32:be:39:30:40:
84:95:af:6e:54:b3:7b:27:6c:4e:c6:c5:18:1e:cb:
a4:ce:ce:74:cd:29:6f:8a:52:22:fb:3d:27:0c:27:
a2:b8:22:38:e1:ef:a7:36:0c:c9:50:95:61:a4:7e:
4b:6b:ce:87:80:96:86:21:37:52:1b:36:c4:04:a7:
c7:cc:83:b3:86:4f:40:9f:d9:8d:f4:5b:2a:52:45:
c1:dd:d5:18:0f:77:a7:70:d2:85:5b:cf:2b:b8:05:
de:54:23:81:20:7e:88:21:8f:be:68:a2:b8:d2:39:
b8:3e:cc:4a:a7:68:36:bc:55:a5:d4:47:e1:95:33:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:E0:AB:31:6F:6E:9F:13:09:6C:52:1B:FB:0D:2A:E2:E7:2D:19
X509v3 Authority Key Identifier:
keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/WfbgqzFvbp8TCWxSG_sNKuLnLRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.204.0/22
91.195.254.0/23
91.198.108.0/23
188.164.152.0/21
IPv6:
2a01:bbc0::/32
Signature Algorithm: sha256WithRSAEncryption
65:22:dc:34:43:c1:35:08:f3:d6:e2:eb:c5:3e:51:7c:1d:86:
31:01:48:51:99:3b:45:5c:85:15:eb:20:c2:b6:6b:2e:bf:08:
3d:fb:75:ec:33:dc:7e:f4:dd:ae:3a:e7:8a:78:1e:2d:8a:91:
ae:26:cd:90:7d:1e:0a:aa:5a:a4:c5:52:91:66:4d:93:bb:30:
4c:ea:3d:0a:ac:77:22:70:22:33:97:6f:5d:fb:f6:72:ca:0e:
04:79:ac:de:26:75:db:c2:6f:96:14:c3:73:1b:1d:49:73:da:
7c:88:cf:c4:7d:05:4f:49:df:34:3d:3c:2d:f5:3a:d9:86:2f:
b0:36:6c:b9:dd:c4:a5:3f:41:2b:6a:26:98:75:2a:07:19:de:
5f:fa:df:99:27:9f:1e:c0:4a:e8:15:7e:ed:83:9c:9d:1f:be:
94:45:54:7a:0d:1f:0e:87:a5:14:51:7e:92:df:c2:01:47:a9:
4e:47:ef:6c:aa:e6:c1:f1:2b:73:9b:c2:cc:f2:db:63:56:a0:
6b:bc:0f:e8:8e:4e:c7:03:09:8f:1e:fb:5a:86:05:1e:d6:e8:
58:82:79:6b:95:30:5c:38:7f:d4:e9:40:8d:35:79:4b:2f:04:
46:c8:58:0d:30:85:e6:90:82:0d:4b:e3:e2:93:dc:ac:ac:2a:
77:91:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:59 2026 by rpki-client