Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/WCRvbp_nJ61w_L7dB6Hf7IOGAtY.roa
File: WCRvbp_nJ61w_L7dB6Hf7IOGAtY.roa (raw, json)
Hash identifier: 64WvdrrvzHpzDzkmPq1Up/4HxutVHHLjzEFwNnqxnK8=
Subject key identifier: 58:24:6F:6E:9F:E7:27:AD:70:FC:BE:DD:07:A1:DF:EC:83:86:02:D6
Certificate issuer: /CN=736c83469d2807ebe397115bbd84f94488cc814b
Certificate serial: 019DF93EBE985146C035CC51690AE20A44F9
Authority key identifier: 73:6C:83:46:9D:28:07:EB:E3:97:11:5B:BD:84:F9:44:88:CC:81:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/WCRvbp_nJ61w_L7dB6Hf7IOGAtY.roa
Signing time: Tue 05 May 2026 17:45:32 +0000
ROA not before: Tue 05 May 2026 17:45:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197422
IP address blocks: 193.26.121.0/24 maxlen: 24
2a00:9a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:3e:be:98:51:46:c0:35:cc:51:69:0a:e2:0a:44:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736c83469d2807ebe397115bbd84f94488cc814b
Validity
Not Before: May 5 17:45:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58246f6e9fe727ad70fcbedd07a1dfec838602d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:55:55:46:84:df:20:1e:cd:8c:03:35:98:
51:2b:0d:0c:65:f5:40:68:04:0a:53:f2:62:ee:8a:
c5:24:41:62:cd:b4:6b:d0:10:f8:a0:e4:72:56:d7:
bd:d1:0d:9e:b8:a1:c8:69:48:ce:3a:20:12:c2:c4:
f6:75:87:21:11:80:99:08:1a:70:04:35:f9:6a:20:
58:0f:7d:8b:f7:f1:4e:71:88:34:b1:48:d7:f5:80:
05:5a:c0:c3:52:de:59:3b:ae:06:b0:c7:dc:8c:98:
a9:3e:35:b3:86:f7:2a:be:aa:5d:44:04:09:b2:cf:
15:7c:e5:b7:48:20:4f:4a:04:6f:53:b1:f4:ae:fc:
de:7c:78:23:f6:77:71:2f:03:e8:ae:09:f9:7b:20:
c7:d4:61:ae:3b:e0:a1:34:d2:46:a4:fd:a8:b9:a1:
49:14:1a:fc:54:41:b3:14:13:d6:ae:93:cf:24:70:
4a:49:a4:83:a2:c5:7f:86:e9:f1:2b:e9:a6:21:96:
2c:82:8b:ad:aa:7a:45:ca:5b:c4:50:36:36:54:84:
22:e2:58:fa:29:82:70:6b:1b:88:84:77:78:90:e4:
05:ff:fa:a1:fc:48:ba:60:9d:f8:23:10:d5:3e:2b:
cc:4e:75:3e:cf:28:c7:e5:30:28:4b:e3:19:3f:40:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:24:6F:6E:9F:E7:27:AD:70:FC:BE:DD:07:A1:DF:EC:83:86:02:D6
X509v3 Authority Key Identifier:
keyid:73:6C:83:46:9D:28:07:EB:E3:97:11:5B:BD:84:F9:44:88:CC:81:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/WCRvbp_nJ61w_L7dB6Hf7IOGAtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.121.0/24
IPv6:
2a00:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
13:1e:66:90:13:8f:4a:12:be:dd:1a:a3:10:b6:43:2c:0a:aa:
bb:e7:18:89:6e:61:f9:22:4b:d3:0f:44:f9:77:86:38:d0:d7:
a6:90:fc:34:2d:5d:79:a3:2a:50:c9:be:0e:16:a0:36:06:5f:
bb:d5:fa:eb:63:b4:04:11:01:c6:86:03:a1:e9:ac:75:8c:1c:
b9:bc:75:71:2d:99:80:fe:1a:53:25:61:fd:80:c7:3b:fb:0b:
fd:1b:12:81:d1:76:7e:7e:5c:17:5d:70:9b:f7:56:c7:4a:e0:
b6:84:10:00:d2:b6:97:8d:b6:6a:b3:96:ed:90:d2:f9:a6:da:
31:3b:36:04:bc:7c:98:52:e4:a4:4e:71:d3:96:73:26:04:8e:
a4:a1:7e:53:e9:b0:8e:77:b0:1e:83:30:d7:0f:9d:09:17:b4:
15:11:e0:11:38:9c:08:14:99:16:77:9f:e5:20:05:f7:c5:73:
dc:16:50:0c:2a:75:1c:83:60:b4:c0:cc:78:95:69:41:6f:76:
61:11:77:64:8d:14:ec:eb:b6:f9:6f:29:17:57:12:d2:7e:9e:
25:05:4a:77:f0:f5:f9:ed:4b:ba:7b:00:02:0b:94:75:d8:d9:
f1:97:84:f6:0a:8b:a7:22:d4:33:35:e1:ba:20:c3:31:60:c6:
9c:1b:64:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:39 2026 by rpki-client