Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/WgnWOUv-gbfkSkHsun9sFImtYDY.roa
File: WgnWOUv-gbfkSkHsun9sFImtYDY.roa (raw, json)
Hash identifier: JD0mfdTRFtEepkN2tCd2j8n570DvIkGT71G7OwTRiZw=
Subject key identifier: 5A:09:D6:39:4B:FE:81:B7:E4:4A:41:EC:BA:7F:6C:14:89:AD:60:36
Certificate issuer: /CN=98278f199786335e86468b4b98fca03a66b27ede
Certificate serial: 019F74CD38818429D8B66444CDEFA8D36523
Authority key identifier: 98:27:8F:19:97:86:33:5E:86:46:8B:4B:98:FC:A0:3A:66:B2:7E:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCePGZeGM16GRotLmPygOmayft4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/WgnWOUv-gbfkSkHsun9sFImtYDY.roa
Signing time: Sat 18 Jul 2026 10:37:14 +0000
ROA not before: Sat 18 Jul 2026 10:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 78.108.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCePGZeGM16GRotLmPygOmayft4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:cd:38:81:84:29:d8:b6:64:44:cd:ef:a8:d3:65:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98278f199786335e86468b4b98fca03a66b27ede
Validity
Not Before: Jul 18 10:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a09d6394bfe81b7e44a41ecba7f6c1489ad6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:1a:9e:86:47:70:5b:d2:69:91:6e:b4:16:
10:f0:dc:21:5e:52:28:a6:c2:89:f7:63:84:a9:fa:
cc:88:3c:e1:17:3a:28:5d:fa:fd:23:26:d4:9b:fa:
3c:cc:3c:82:53:1c:7e:0e:1b:53:2a:5c:c9:a8:20:
b5:79:9c:74:44:dc:39:41:3d:1c:eb:22:ba:e4:0a:
eb:b3:c9:01:5f:a5:8f:23:25:45:85:07:59:26:4f:
5b:9e:36:fd:a3:52:7e:22:35:82:1a:71:b1:2d:7e:
db:26:9c:e6:83:16:cf:c0:96:62:07:77:0a:3c:9b:
cd:a6:ab:a4:1c:c3:1b:62:5c:07:eb:00:43:c1:81:
1e:69:6e:74:89:35:0d:4b:bd:70:8a:13:68:da:b4:
d0:f6:42:da:3b:9d:2a:fe:12:3c:f8:88:68:b7:f8:
9c:eb:0e:f1:00:02:a1:a8:d8:ff:c9:a5:af:98:e9:
dc:7a:77:83:7a:0b:c1:c9:78:65:f7:37:12:73:c7:
11:64:9a:8c:f3:6a:5f:0e:19:50:b3:a1:3e:f1:a8:
57:34:1a:a1:c1:17:b1:95:a6:5a:9a:91:8c:33:25:
8e:8a:be:5d:bb:bc:83:f6:1f:92:87:83:6e:c6:67:
54:00:24:1f:8d:9f:af:a7:1b:ec:9a:91:78:d6:47:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:D6:39:4B:FE:81:B7:E4:4A:41:EC:BA:7F:6C:14:89:AD:60:36
X509v3 Authority Key Identifier:
keyid:98:27:8F:19:97:86:33:5E:86:46:8B:4B:98:FC:A0:3A:66:B2:7E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCePGZeGM16GRotLmPygOmayft4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/WgnWOUv-gbfkSkHsun9sFImtYDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f6:dc:81:36:6b:82:23:cf:46:b1:cd:bd:9a:83:05:c7:b5:
26:64:9a:6c:97:43:07:4d:a7:7f:57:8c:9f:42:d7:32:95:66:
76:e5:83:7b:6a:42:1c:5a:6d:db:25:f0:54:ad:5e:22:40:64:
30:cd:f9:b4:09:ac:36:9f:9f:35:ab:85:76:c9:c5:87:ed:23:
74:2d:cb:b4:7e:2b:22:56:d3:5e:50:9d:cb:07:ea:d1:e3:eb:
a0:be:8c:bd:84:60:8e:b8:3e:f6:a7:d3:35:b4:3f:a9:64:e5:
ed:d1:af:f9:69:ed:b9:63:8d:fe:b4:a8:3e:13:ff:72:e9:17:
39:cb:d1:7f:c9:86:31:c5:92:a0:fc:d6:64:bf:ca:90:aa:9e:
a4:df:f1:03:5b:fd:c6:9a:0e:98:67:ba:f5:d2:39:cc:0c:62:
54:c4:ed:9f:7a:b9:6d:57:68:e2:10:f1:4b:16:29:8f:b5:7e:
ca:84:49:ae:a7:ed:c3:8e:c3:3f:e9:f4:2b:cf:e3:5e:f7:73:
10:ca:f2:39:c2:8e:2a:c5:ed:26:9e:fb:48:00:5b:9a:a5:2a:
d4:6b:8b:56:b7:63:74:28:22:25:e2:89:ba:5f:66:80:ce:e1:
fe:c9:ea:c6:b1:06:ca:80:12:10:51:18:fd:d2:cd:fb:a8:f7:
ee:b2:2e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:55 2026 by rpki-client