Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wcpziIlmPJ5qNuFdYJfOKLI5Fgk.roa
File: wcpziIlmPJ5qNuFdYJfOKLI5Fgk.roa (raw, json)
Hash identifier: qascbndRFhBQBsPyN5BEI1tNTqbMpbb8G+3VrNevpE0=
Subject key identifier: C1:CA:73:88:89:66:3C:9E:6A:36:E1:5D:60:97:CE:28:B2:39:16:09
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0C8B0D6B1D6DB1DB14880DFB6F57A5699
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wcpziIlmPJ5qNuFdYJfOKLI5Fgk.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a0e:ee80::/29 maxlen: 29
2a0f:3340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d6:b1:d6:db:1d:b1:48:80:df:b6:f5:7a:56:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1ca738889663c9e6a36e15d6097ce28b2391609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:0b:a5:62:30:01:85:04:3a:d1:b7:3e:01:
a2:06:97:21:c0:e7:12:7a:b8:49:e2:e2:0c:cc:5d:
53:9b:a2:4c:b1:63:6f:1c:12:c4:bb:2e:50:8a:d4:
cd:16:5b:66:ec:79:a8:60:72:21:03:1a:7e:f6:f9:
47:f8:1d:ab:b4:40:62:fd:01:4e:0f:e2:c9:aa:01:
5c:39:41:c4:06:cd:8c:92:c1:d9:22:cc:97:b5:fa:
6b:77:96:45:4e:b7:69:ee:fb:28:bf:68:57:a1:e0:
fc:7e:99:70:8b:fe:5a:5e:38:2a:9a:42:92:11:1b:
a1:ed:94:d5:02:65:02:22:9b:10:9b:9a:48:d6:69:
21:4f:a3:f8:5e:cd:5a:a3:94:fc:86:8b:86:c6:be:
62:9c:e3:ff:0b:f6:59:76:c2:95:b1:7a:28:d2:57:
7c:7a:ae:55:3f:ac:82:ed:e1:82:b5:c1:60:35:a2:
57:8f:98:a1:7a:b8:e8:a7:30:ae:1c:19:fc:f5:e3:
eb:89:b1:64:48:69:9d:9f:e3:d5:86:ab:bb:29:56:
da:d5:a5:9a:b8:ba:7b:e2:d9:47:3f:bf:b9:ef:3c:
e8:7e:bf:61:8e:e4:12:5a:29:a0:6f:f9:a1:fe:f6:
02:8a:6e:1f:a0:70:8d:66:d5:f7:0a:78:2b:93:3b:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CA:73:88:89:66:3C:9E:6A:36:E1:5D:60:97:CE:28:B2:39:16:09
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wcpziIlmPJ5qNuFdYJfOKLI5Fgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:ee80::/29
2a0f:3340::/29
Signature Algorithm: sha256WithRSAEncryption
a7:a9:77:18:cc:03:b9:dc:33:63:4f:32:ac:60:60:3a:ba:d1:
24:34:c6:22:4b:90:95:ee:3a:df:ba:01:7f:c5:34:98:cb:32:
46:be:3e:46:b5:05:0c:81:41:03:b0:9c:c9:e8:7d:d5:05:d0:
c2:a8:79:4a:1e:dc:2b:53:d6:e2:6d:0a:e5:35:0a:ac:9a:bf:
2e:80:be:aa:1a:04:f4:4e:25:8d:16:3e:45:c0:78:b0:62:01:
39:51:0f:1b:d9:59:1b:4a:8e:78:b6:63:fa:ba:9b:36:e9:d1:
ae:d7:97:c6:e4:16:92:09:91:40:35:c4:5c:26:34:0f:d9:f1:
59:e4:4b:c9:62:42:f5:6b:71:7e:52:ad:e3:94:03:6d:da:8f:
a6:99:cd:cc:24:6e:44:1e:d1:27:31:28:3d:29:80:2c:78:b7:
d1:8f:d9:a7:c5:b3:01:b4:c8:c8:6e:48:69:5c:70:55:21:62:
ec:09:8c:1e:36:a2:b0:48:b8:b9:ad:29:64:22:53:9a:1a:3c:
a7:09:24:23:8a:28:f3:28:43:56:f4:ad:a8:b5:45:9d:58:e6:
3a:9e:29:2f:42:9a:7a:80:b4:e8:e3:65:bc:ff:df:a2:e4:3a:
a3:93:73:9e:13:f3:9e:4a:ff:07:22:1d:d1:1d:47:64:ee:1e:
90:5f:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:31:21 2026 by rpki-client