Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/1WCWC52zGfwCmY5V-mhdhgDriwQ.roa
File: 1WCWC52zGfwCmY5V-mhdhgDriwQ.roa (raw, json)
Hash identifier: IPlYfdDKlG6GcFbb6yt9vpWAAJAp4h7ZVHeTEXhrSfo=
Subject key identifier: D5:60:96:0B:9D:B3:19:FC:02:99:8E:55:FA:68:5D:86:00:EB:8B:04
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019DB04AD1E87A1F1A78B2289E11C27ADD57
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/1WCWC52zGfwCmY5V-mhdhgDriwQ.roa
Signing time: Tue 21 Apr 2026 13:46:26 +0000
ROA not before: Tue 21 Apr 2026 13:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 195.216.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:4a:d1:e8:7a:1f:1a:78:b2:28:9e:11:c2:7a:dd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Apr 21 13:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d560960b9db319fc02998e55fa685d8600eb8b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:37:75:33:d8:83:58:2f:b2:a0:36:6c:0a:
27:e7:25:56:45:e2:7a:a5:df:83:d0:2b:ec:0d:a8:
5e:29:13:4c:d5:ea:d3:b0:e2:d5:31:9b:92:c9:0e:
8f:b8:1f:1d:97:6e:a0:66:e9:b7:11:d4:be:02:61:
63:98:46:7d:1d:ff:07:23:9d:e4:f1:13:17:a9:1a:
48:12:6d:35:54:67:a8:28:b2:31:9a:f7:30:6d:cb:
6e:83:72:7f:70:9a:63:ee:67:8f:5c:cf:c6:d1:8c:
0c:95:2d:c2:20:ec:18:de:e7:e3:71:a7:d1:ae:4e:
ef:2a:1b:b7:08:9c:8c:22:4d:13:fa:53:5e:53:17:
ab:d3:c1:48:35:67:df:bd:e4:4b:84:91:2f:c1:23:
ef:b4:fb:c5:e8:57:9e:fb:d6:a2:a4:de:fa:00:25:
50:29:b6:9a:ee:fe:a7:e7:50:0d:28:17:69:40:d5:
7d:b5:78:2f:26:5d:65:c2:53:21:04:a4:b6:8f:9d:
5e:fc:69:3f:c1:d6:b5:be:67:12:ad:64:98:3b:e0:
39:a4:96:6d:aa:1f:a5:86:87:f6:81:8e:ef:4f:10:
7c:91:04:f2:d1:63:ad:34:6d:84:1d:25:f4:ec:28:
57:fa:67:c3:4e:b2:db:85:f2:3d:9a:db:b8:85:d8:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:96:0B:9D:B3:19:FC:02:99:8E:55:FA:68:5D:86:00:EB:8B:04
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/1WCWC52zGfwCmY5V-mhdhgDriwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.172.0/24
Signature Algorithm: sha256WithRSAEncryption
76:32:a4:36:e9:36:4f:7c:f4:5e:b2:64:8c:bc:52:db:a1:a2:
6e:5e:f0:f4:27:d9:79:44:24:92:1e:7f:da:43:31:f4:fa:d3:
00:dd:37:3d:b2:ef:b5:82:a1:ae:40:d6:37:83:ba:57:e6:cd:
41:8d:e8:f1:52:25:8f:dc:78:28:93:8f:1a:b6:72:be:61:b4:
22:0e:77:12:be:e6:c6:f1:eb:4f:a6:3b:33:85:1f:b9:8f:4b:
3c:c5:9d:9e:47:38:23:ae:f0:c5:37:7a:5c:ab:52:d3:33:18:
21:84:db:30:5c:e1:fe:bb:70:58:be:65:21:99:79:da:96:a5:
88:12:d8:48:73:e2:60:66:8c:d8:77:c4:9b:35:12:3c:bc:46:
ea:0a:9a:7c:af:43:d7:5a:db:8d:4c:12:f0:cc:42:1d:b5:ec:
f6:b6:b2:4b:eb:ac:ef:aa:83:ab:69:db:e5:f7:2c:11:8d:1f:
63:85:ee:5f:22:8b:ce:a2:ad:e0:39:96:94:03:1a:8a:45:e8:
42:65:65:30:9b:2a:a7:a2:68:01:aa:7f:1f:54:3e:53:f5:6d:
02:92:68:4b:03:fc:22:bc:ff:f0:fb:de:50:11:f7:b6:fa:92:
8f:2d:50:5f:92:1b:70:51:4b:7a:ad:d7:eb:7b:2d:40:fe:44:
2d:60:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:45:02 2026 by rpki-client