Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/WVsQxFgimK0IaVgu0fCqH6Ya9j0.roa
File: WVsQxFgimK0IaVgu0fCqH6Ya9j0.roa (raw, json)
Hash identifier: 9sCLSewlIQe4J9YBGaa7rhwdb5suwltCJKk62oK5F6w=
Subject key identifier: 59:5B:10:C4:58:22:98:AD:08:69:58:2E:D1:F0:AA:1F:A6:1A:F6:3D
Certificate issuer: /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial: 019FB225E3B013483823BE0E7A886B06CDA0
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/WVsQxFgimK0IaVgu0fCqH6Ya9j0.roa
Signing time: Thu 30 Jul 2026 08:30:55 +0000
ROA not before: Thu 30 Jul 2026 08:30:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210455
IP address blocks: 45.133.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:25:e3:b0:13:48:38:23:be:0e:7a:88:6b:06:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
Validity
Not Before: Jul 30 08:30:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=595b10c4582298ad0869582ed1f0aa1fa61af63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:a9:92:aa:68:59:3f:ba:af:8e:e2:6e:f7:
a5:31:f2:12:c5:95:26:eb:86:e0:73:c7:12:4d:08:
4f:28:83:a2:a8:5f:58:23:a1:5c:62:42:bc:04:83:
cf:64:fb:18:a3:f9:e1:b9:55:c9:91:9c:98:87:0f:
35:d2:46:8e:88:51:3f:9f:cb:3c:c1:0a:40:f8:10:
7f:5e:47:d3:14:0f:43:b5:69:ed:93:ce:03:55:77:
3b:72:e8:8f:e6:17:52:f3:85:7b:18:79:2f:7d:be:
af:44:34:e3:71:75:18:4f:1a:a4:43:d7:1d:e0:d6:
9f:f0:1f:86:39:35:90:27:c2:02:58:44:27:83:c4:
a5:6d:51:af:e5:c2:78:d5:7f:6c:ab:55:10:f9:78:
e6:6e:8b:d5:e9:2d:63:bc:71:33:fc:82:f3:8d:93:
71:1d:69:f1:60:2f:f3:87:50:a2:9b:bd:d8:c9:ca:
8f:da:92:d7:2f:75:de:78:a6:31:1d:25:50:db:be:
b4:4d:24:f4:d5:b0:fe:06:da:2a:bd:7c:c6:1a:68:
4d:ff:6b:46:35:fc:f3:c0:47:9c:d9:ec:00:97:1b:
38:14:90:15:4f:7b:46:6c:24:7f:ee:30:ad:ac:de:
b3:ca:fa:43:b9:fa:ef:b9:06:b0:75:37:31:ec:e5:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:10:C4:58:22:98:AD:08:69:58:2E:D1:F0:AA:1F:A6:1A:F6:3D
X509v3 Authority Key Identifier:
keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/WVsQxFgimK0IaVgu0fCqH6Ya9j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.241.0/24
Signature Algorithm: sha256WithRSAEncryption
04:dd:ab:20:e8:c6:3f:e5:1b:05:3e:d4:4a:f8:f1:99:d1:48:
0b:f5:94:0c:45:2a:eb:c1:c0:c9:4e:23:c6:54:97:b0:38:01:
1e:05:36:99:51:2b:a7:35:69:1d:3f:b1:34:67:48:90:c9:19:
ac:ec:78:5c:ef:ce:fe:26:ff:69:e8:62:b3:0c:7f:34:aa:9b:
88:e4:ea:43:32:2a:d1:02:e2:8d:64:ad:ea:04:bd:ad:8a:87:
67:64:e2:6b:1d:03:6e:8f:cf:ff:a9:be:ed:af:b3:2f:b3:3a:
1c:38:64:66:10:f2:50:96:f4:88:cb:bf:49:4f:c8:80:e2:a7:
a2:d4:7d:42:23:cf:1e:65:26:56:e0:e8:4b:16:9d:8b:83:5d:
20:4a:da:3a:00:78:31:a3:de:a8:e3:9e:14:d5:d1:5c:c4:50:
fa:d3:06:33:d8:64:9d:85:15:f1:4b:01:54:6f:2d:37:d6:23:
1e:fb:32:b9:48:5e:14:5e:96:53:08:0b:4b:30:6a:a6:94:0e:
4f:21:c8:b9:82:d7:8d:d5:94:26:82:90:46:a3:a1:3c:43:d9:
f7:7f:97:fa:d6:49:a7:df:bc:d4:c6:a6:45:52:34:c2:15:50:
e8:c6:42:13:27:72:fc:69:82:0c:f6:29:05:5c:f5:25:09:96:
b4:51:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:16:25 2026 by rpki-client