Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/WFW6qhbNTOwNvMn1wBdtZc0maBc.roa
File: WFW6qhbNTOwNvMn1wBdtZc0maBc.roa (raw, json)
Hash identifier: 4FeYT4PmqlfqsjKx24dhNEkHWmZbQRRBE78LWYeUekw=
Subject key identifier: 58:55:BA:AA:16:CD:4C:EC:0D:BC:C9:F5:C0:17:6D:65:CD:26:68:17
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F2369131BD867658C9D469943EE6F65B9
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/WFW6qhbNTOwNvMn1wBdtZc0maBc.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207886
IP address blocks: 193.104.7.0/24 maxlen: 24
193.104.12.0/24 maxlen: 24
193.104.41.0/24 maxlen: 24
193.104.67.0/24 maxlen: 24
2a10:8140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:13:1b:d8:67:65:8c:9d:46:99:43:ee:6f:65:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5855baaa16cd4cec0dbcc9f5c0176d65cd266817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ec:29:3f:d1:8f:42:2c:b4:52:2f:3c:80:0b:
3f:34:68:15:d0:32:48:21:2a:be:c0:45:09:5f:7c:
84:3a:cd:92:4c:a4:75:e0:f8:78:e6:3b:96:8f:52:
d7:bb:16:db:cf:9e:b1:52:b5:57:eb:31:12:c5:d7:
1f:7e:51:38:98:c6:05:98:62:1d:c5:64:5d:fc:5a:
1a:0d:88:97:4e:fb:a4:23:43:74:3b:0b:de:7c:73:
76:f1:10:a1:80:a0:6e:11:b7:e7:f7:3e:ad:c9:16:
ba:f3:f7:78:b3:c2:62:db:5d:e7:4c:d5:02:a8:b8:
e5:d8:2d:46:c2:60:f7:fc:f0:9d:ba:b2:94:87:15:
23:78:aa:14:1e:fa:0f:3e:f6:bf:99:14:4e:4d:30:
5e:08:f2:e2:52:d2:f8:4e:85:da:b0:9e:af:af:24:
3b:f7:3b:d9:09:14:4f:ce:2a:31:55:c1:db:31:dd:
a1:33:90:6b:a8:70:f1:7d:8c:69:15:22:d1:19:f7:
85:8e:b2:65:90:83:1b:da:72:03:49:ed:8d:3b:40:
4d:be:ed:58:f8:98:09:19:79:19:85:3f:f8:16:4d:
2b:c8:6e:8b:73:c8:6b:29:e0:aa:84:9b:2f:5c:84:
4f:64:3e:33:25:a6:cb:96:a1:ec:16:8f:21:e1:d1:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:BA:AA:16:CD:4C:EC:0D:BC:C9:F5:C0:17:6D:65:CD:26:68:17
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/WFW6qhbNTOwNvMn1wBdtZc0maBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.7.0/24
193.104.12.0/24
193.104.41.0/24
193.104.67.0/24
IPv6:
2a10:8140::/29
Signature Algorithm: sha256WithRSAEncryption
9b:85:d4:17:44:86:d5:2f:ef:76:2d:f3:63:ca:44:c7:e8:95:
fe:1b:4e:0a:06:68:93:df:36:ba:bf:86:1e:ba:d0:bc:e5:02:
8f:97:4e:4b:b8:60:d6:e0:99:29:f5:da:db:45:03:f3:fc:d0:
52:be:0e:7a:17:11:2d:fb:fd:47:46:2d:de:2b:84:69:50:65:
2a:52:e0:f2:a6:82:6f:86:7d:87:ee:95:fc:b1:a5:d5:1f:b5:
11:a9:6c:5f:3c:b6:ec:98:3f:1d:1f:fe:23:6c:e5:3a:53:8b:
98:c3:21:dc:4a:6f:c6:44:08:73:7f:bd:9a:5b:06:38:90:8b:
5e:97:d5:13:d8:ed:c5:21:4c:f0:85:36:49:20:4c:de:2a:e2:
cf:fc:cb:ab:5b:83:ea:04:9b:6e:06:69:a0:2c:38:26:5b:8b:
ee:cd:1e:96:28:72:02:67:79:e6:58:dc:e7:a9:f0:6f:48:30:
57:89:dd:a9:1a:50:ef:02:f1:b3:c2:08:2e:b4:82:e0:34:c1:
f0:f5:ea:cd:fa:38:14:ed:37:f7:80:27:00:e6:a0:a6:35:ad:
34:7b:0f:80:60:4c:00:54:03:73:a5:1e:12:a2:3c:7b:a0:75:
a0:72:0e:17:96:1a:63:47:e5:3b:e5:e7:38:e2:78:fa:05:95:
c9:5d:aa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:29 2026 by rpki-client