Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wWLDGbWarJafcnsDBnDHMQe9rx8.roa
File: wWLDGbWarJafcnsDBnDHMQe9rx8.roa (raw, json)
Hash identifier: vf1xyKbFA4rgyTyIOjzQ0mDBngp8E4gR5TwC54tifQI=
Subject key identifier: C1:62:C3:19:B5:9A:AC:96:9F:72:7B:03:06:70:C7:31:07:BD:AF:1F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F277A296B42DB164E2095684F6C29B890
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wWLDGbWarJafcnsDBnDHMQe9rx8.roa
Signing time: Fri 03 Jul 2026 10:15:45 +0000
ROA not before: Fri 03 Jul 2026 10:15:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61624
IP address blocks: 151.242.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:7a:29:6b:42:db:16:4e:20:95:68:4f:6c:29:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 3 10:15:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c162c319b59aac969f727b030670c73107bdaf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:6b:cc:05:b1:a2:a5:88:4a:c6:d2:b6:8f:
44:d8:74:91:0a:2a:86:9c:6f:57:11:76:74:d8:4f:
e6:fa:69:9c:0c:d5:19:a7:11:0e:5b:12:b1:34:6d:
a2:85:5d:ad:2d:0b:49:5a:1a:f9:63:51:78:a8:05:
ca:bf:a6:25:bc:c0:b8:f6:28:b7:7f:59:56:43:a5:
bb:1b:a0:23:54:6b:e7:21:c1:01:18:9e:05:98:90:
a8:e8:78:45:3a:21:76:8f:18:9b:09:08:2f:18:bb:
62:bc:51:32:46:29:af:0b:57:6b:84:c4:95:86:74:
d3:ea:22:97:6b:ee:8c:b5:6b:ba:61:54:f5:51:2b:
cc:11:cf:ec:5a:d3:35:5f:fd:38:f8:d9:45:0c:e8:
b3:80:9d:58:20:c6:f8:91:d2:bb:90:8b:84:12:36:
cc:9b:4b:8d:ef:0b:cb:5d:d0:9b:02:54:d1:e8:70:
a9:12:27:b4:51:c6:c9:c4:3b:f7:1d:c9:28:01:f9:
5f:d4:08:5e:67:82:f2:9d:eb:46:28:fc:95:ba:03:
21:ed:93:1e:45:3d:6c:a3:f3:37:f8:62:ae:47:5d:
7c:ab:05:31:05:7d:35:8b:f1:22:d8:4f:f8:ad:ca:
46:1c:de:a0:47:f0:70:90:ad:0e:ce:c4:ef:a8:8e:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:62:C3:19:B5:9A:AC:96:9F:72:7B:03:06:70:C7:31:07:BD:AF:1F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wWLDGbWarJafcnsDBnDHMQe9rx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.95.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6d:34:11:c3:3a:83:e0:c3:c8:46:49:a4:9d:27:b4:24:d5:
38:05:6d:5a:0a:44:94:fe:53:28:c3:a3:d6:ab:be:48:bd:8c:
4f:7f:5a:60:be:aa:98:f1:8c:86:ce:48:cd:04:f7:e7:ab:95:
fd:84:88:5e:a4:db:0f:f5:0d:d4:63:bb:f8:2f:5e:e1:40:b1:
23:1f:72:7d:fb:0b:2c:b0:97:d2:ab:2b:05:9a:ee:15:64:eb:
9c:af:9b:81:0e:bf:ff:90:17:83:7b:96:b9:e5:d5:42:9c:51:
7a:87:76:43:f2:50:c6:d9:ad:65:48:cd:c8:62:97:c7:1a:61:
1c:8a:9a:e8:dd:7c:9e:01:23:ac:2e:79:c9:5c:52:6b:d6:77:
e1:da:32:85:84:c8:48:18:dc:ba:d6:c4:15:7c:9f:06:50:61:
ad:1a:f1:a3:87:2c:f3:b4:82:b4:41:39:cf:55:b2:af:e1:ce:
a4:60:e6:c8:71:0a:8a:5b:55:d7:0f:ca:ed:02:af:18:9c:be:
00:c2:f1:fa:32:b6:a3:a0:d0:77:46:50:d7:3c:65:94:e6:48:
43:89:4f:f0:7a:a0:c2:80:01:a8:3c:ca:5e:dd:83:9d:c6:1c:
19:59:c9:99:d2:26:10:6f:dd:3e:6d:1e:56:e6:7e:10:13:58:
9c:cd:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:51 2026 by rpki-client